BercailLast updated: 13 November 2026. Publisher: Hoareau Christophe. Contact: [email protected].
In one sentence. What you enter in Bercail serves your household and nothing else: no ads, no resale, no audience tracking. Without an account, everything stays on your phone. With an account, household data is shared with its members and hosted in the European Union.
1. Without an account: everything stays on the phone
You can use Bercail without signing in. Your lists, items, expenses, events and photos are then stored only on your phone. Nothing is sent to our servers.
2. With an account: what is sent, and why
The account is used to share the household between its members' phones, in real time.
| Data | Why | Who sees it |
|---|---|---|
| Email address, and an encrypted password if you choose one. With "Continue with Google": the address, name and profile picture Google provides. | To identify you and sign you back in on another phone | No one but you and the technical host |
| Household data: lists and items, places and items stored, loans, expenses and categories, fixed charges, events and chores, household notes, members' first names, colours, roles, dates of birth and photos | To share it between household members | The members of that household, and only them |
| Photos you add (box, item, wanted product, member) | To show them to the other members | The members of that household, and only them |
Bercail does not collect: your location, your contacts, the advertising ID, or data from other apps. There are no ads and no audience-measurement tools in the app.
3. What never leaves the phone
- Receipt scanning: the text is read on the phone (Google's ML Kit, which works offline). The receipt photo is not sent to us; only the expense you confirm joins the household.
- Reading QR labels: done on the phone by the Google Play services scanner.
- Your personal reminders ("Remind me" on a list): they are not shared with the household.
- Your recent searches and display settings.
Voice input goes through your phone's speech recognition app (usually Google's), under its own rules; Bercail only receives the resulting text.
4. Sharing within the household
Every member of a household can see and edit that household's data. Joining a household is only possible with an invitation code, valid for 7 days, given by a member. The household owner can remove a member at any time.
5. Subscription
Subscriptions are sold and charged by Google Play. We never receive your payment details: only the confirmation of the purchase, to unlock paid features for your household.
6. Hosting and processors
Account and household data are hosted by Supabase, in a data centre located in the European Union. Supabase acts as a processor, under the European Commission's standard contractual clauses. Google is involved for signing in with a Google account and for Google Play purchases.
7. Retention and deletion
- Anything you delete disappears from the app at once. On the server it is first marked as deleted, so the household's other phones learn about it, then permanently erased within 30 days.
- Deleting the household (Settings → Manage the household) erases all its content for all its members.
- Deleting your account (Settings → Delete my account) erases the account, the households you created with all their content and photos, and removes you from households where you are only a member. The phone is then reset.
- Exporting your data: Settings → Export all data produces a spreadsheet of the whole household.
Uninstalling the app erases what is on the phone, but not your account: delete it first if you want to erase everything. If Android backup is turned on, the app's local data may be included in it, depending on your Google settings.
8. Your rights
The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability. The legal basis is the performance of the service you request. Most of these rights are exercised directly in the app (edit, export, delete). For anything else, write to [email protected]. You can also lodge a complaint with the CNIL (the French data protection authority) or your local authority.
9. Children
Accounts are for people aged 16 and over. A parent may name their children in the household (first name, date of birth, photo): this is visible only to household members and is erased like everything else.
10. Permissions requested
- Internet: household sync.
- Notifications: requested only when you set a reminder, a loan return date or a fixed charge, and used only for those reminders.
- Start at boot: to reschedule your reminders after a restart.
The camera goes through the phone's Camera app: Bercail does not ask for camera access.
11. Changes
Any change to this page will be dated at the top. A change that would broaden the use of your data will be asked for in the app, not slipped into a text.