Terms of Use

1. Publisher

The Service is published by Virgil Haranger, sole trader (French micro-entreprise) trading as “Tefin”, company number (SIREN) 105 811 798, registered office at 31 rue Diderot, 91270 Vigneux-sur-Seine, France, contact contact@tefin.fr. Publication director: Virgil Haranger. The database and server functions are provided by Supabase and hosted in Frankfurt, Germany; the website is delivered by Vercel. Full legal information is available on the legal notice page.

2. Definitions

• PSD2: the second European Payment Services Directive (EU 2015/2366), which governs access to account data by authorised third parties.
• AISP (Account Information Service Provider): a provider authorised to access payment accounts on a read-only basis, with your consent.
• Powens: the open-banking provider through which bank aggregation is performed, an AISP authorised by the French Prudential Supervision and Resolution Authority (ACPR) — see §5.
• SCA (Strong Customer Authentication): the authentication you carry out directly with your bank to authorise access.
• Access token (tokenisation): a read-only technical identifier issued by Powens which replaces your banking credentials and lets Tefin retrieve your data without ever handling them.
• Household: a space shared between several users (couple, flatshare, family) used to track shared expenses and, if you so decide, part of your savings — see §8.

3. Purpose of the Service — essential notice

The Service lets you track your income and spending, categorise it, identify recurring charges, list your assets and project how they may evolve. It also lets you optionally aggregate, on a read-only basis, information from your bank accounts and digital assets. No feature of the Service can initiate a payment, a transfer or any operation on your accounts.

4. Access and account

Using the Service requires creating an account: there is no guest mode and no anonymous session. You must be at least 18 years old and have legal capacity to use the Service. You undertake to provide a valid and accurate email address.

You are responsible for keeping your Tefin credentials confidential and for all activity carried out from your account. We provide two-factor authentication and, on mobile, an app lock using a passcode or biometrics; enabling them is your choice. Notify us without delay at contact@tefin.fr in the event of unauthorised use of your account.

A single account works on both web and mobile, and your data is synchronised across your devices.

5. Bank aggregation through Powens (PSD2)

Account aggregation is carried out through Powens, an account information service provider (AISP) authorised by the ACPR under PSD2. Tefin makes this feature available as an agent of Powens and relies on the latter’s authorisation: Tefin holds no payment institution licence of its own and never acts in place of your bank.

When connecting, you authenticate directly with your bank through the secure Powens interface (strong customer authentication — SCA). Powens then issues a read-only technical access token, specific to your account, which replaces your credentials. This tokenisation mechanism guarantees that:

• Tefin never sees, receives or stores your banking credentials (customer number, password, access codes, card data);
• access is strictly read-only: neither Tefin nor Powens can carry out any payment operation or transfer on your accounts (no payment initiation service / PISP);
• only the information required for asset visualisation is retrieved: account identity and type, IBAN, balances, transaction history and, where applicable, holdings within your investment wrappers (French PEA, securities account, life insurance, employee savings);
• the access token is encrypted in our systems and never exposed to the client application (see the Privacy Policy).

Under PSD2, access to each bank rests on your consent and may require periodic re-authentication (typically every 90 to 180 days depending on your institution). You may disconnect a bank and withdraw your consent at any time from the application. The list of supported institutions is indicative and depends on connectors maintained by Powens: it may change, and the publisher does not guarantee that a given institution is or will remain supported.

6. Digital-asset aggregation (optional)

You may optionally connect a cryptocurrency platform. The connection uses the same aggregation channel as your bank accounts. Those platforms require a read-only key that you create with them and enter with the aggregation provider: it is never passed on to us. Access is strictly read-only and grants no withdrawal, purchase, sale or transfer rights. Availability depends on each platform's connector, which may be interrupted without notice.

7. Subscriptions, free trial and payments

The Service includes a free plan with no time limit and a Premium subscription. Prices are stated inclusive of tax: €8.99 per month or €79.99 per year. VAT is not applicable (article 293 B of the French General Tax Code). There are no setup fees and no paid add-ons: Premium grants access to all features.

• Free trial: a 14-day trial may be offered once per account, with no payment card. As no payment method is stored, it cannot turn into a subscription: at the end of the trial you return to the free plan and keep your data. We send reminder messages about the end date to your account email address — three days before, the day before, and once it ends. These messages form part of performing the contract and are not marketing communications.
• Referrals: every account has a referral code. Whoever uses it receives one month of Premium free; the code replaces the free trial rather than adding to it. The code holder in turn receives one free month when the referred person takes out a paid subscription. Free months are added after the current period. This benefit takes the form of access to the Service only: it carries no cash payment, no refund, and cannot be exchanged. A code may be used only once per account, cannot be used by its own holder, and is not open to accounts that have already subscribed. We may refuse or withdraw a benefit obtained through accounts created solely for that purpose.
• Term and renewal: the monthly plan has no commitment and renews each month. The annual plan commits you for twelve months and renews automatically for the same term unless cancelled before the renewal date. In accordance with article L215-1 of the French Consumer Code, you are informed of this renewal and may terminate at any time from the renewal date.
• Cancellation: online, from your account, in a few clicks and without justification. It takes effect at the end of the period already paid for — the current month for the monthly plan, the annual renewal date for the annual plan — during which Premium access is maintained.
• Where it is managed: a subscription purchased on the website is managed on the website through Stripe; a subscription purchased from the iOS or Android app is cancelled in the settings of the corresponding store, as required by Apple and Google. The application indicates which of the two applies to your account.
• Right of withdrawal: you have fourteen days to withdraw after subscribing. By requesting immediate access to the Service, you agree that performance begins during that period, which may reduce any refund in proportion to the period used (article L221-25 of the French Consumer Code).
• Returning to the free plan: your transactions, accounts and history are kept. Automatic synchronisation and projection analyses are paused and resume if you subscribe again.

Tefin neither collects nor stores any payment card data. Prices may change; any change will be notified to you before it takes effect and will apply only from the following renewal, which you remain free to decline by cancelling.

8. Household space

The Service lets you create or join a household using an invitation code. Shared expenses recorded there, their splitting rules and the resulting balances are visible to all members of that space. Your personal data remains private: you explicitly choose which savings accounts are shared, and the others stay invisible.

You undertake to add to a household only participants who are aware of it. The balances shown are a tracking tool between members: they are neither an acknowledgement of debt nor a payment instrument, and Tefin never takes part in settlements between you.

9. Acceptable use

You agree not to:

• use the Service for unlawful or fraudulent purposes;
• attempt to gain unauthorised access to the systems, accounts or data of others;
• disrupt, overload or circumvent the security measures of the Service or of its providers (including Powens);
• extract, copy or reuse the content of the Service beyond personal use.

Good-faith vulnerability research conducted in accordance with the policy published at /.well-known/security.txt does not breach this clause.

10. Intellectual property

All elements of the Service (brand, interface, texts, calculation models, code) are protected by intellectual property law and remain the property of the publisher. No licence or right is granted beyond the right to use the Service personally. Institution brands and logos shown in the application belong to their respective owners and are used for identification purposes only.

11. Availability and third-party dependencies

Aggregation depends on third parties (Powens, your bank, your cryptocurrency platform) and on the availability of their interfaces. The publisher does not guarantee uninterrupted availability of the Service and may temporarily suspend all or part of its features for maintenance or security reasons.

12. Liability

The Service is provided “as is”. The publisher does not warrant that it is free of errors, nor the accuracy of projections, which rest on assumptions and historical data. To the extent permitted by law, the publisher shall not be liable for financial decisions taken on the basis of the Service or for any resulting losses. Nothing in these Terms excludes the statutory guarantees you enjoy as a consumer.

13. Personal data

The processing of your data — including bank tokenisation, encryption, the list of processors and retention periods — is described in detail in our Privacy Policy, which forms an integral part of these Terms.

14. Account termination

You may stop using the Service and delete your account at any time from the application. Deleting your account revokes bank connections with Powens and erases your data (see the Privacy Policy). Deleting the account does not cancel a subscription purchased through a store: that is done in the settings of the store concerned. We may suspend or terminate access in the event of a breach of these Terms.

15. Changes

We may amend these Terms. Any substantial change will be notified in the application before it takes effect. The date of the last update appears at the top of this page.

16. Governing law, claims and mediation

These Terms are governed by French law, without prejudice to any more protective provisions of the country in which you habitually reside. Any claim must first be sent to us in writing at contact@tefin.fr; you will receive a reply within fifteen days at most.

Under article L616-1 of the French Consumer Code, you may then refer the matter free of charge to a consumer mediator. The publisher’s registration with an approved mediator is in progress; the mediator’s details will be published on the legal notice page as soon as it is effective. The European online dispute resolution platform remains available at ec.europa.eu/consumers/odr.

Any claim regarding PSD2 access to your accounts may also be addressed to Powens in its capacity as an authorised AISP, and to your bank. Failing an amicable settlement, disputes fall within the jurisdiction of the French courts.