Privacy Policy

Who we are

Raky ("we") is responsible for the information described here — the data controller, in GDPR terms.

Privacy questions: [contact address to be added].

What Raky collects

Everything below comes from you answering a question in the app. Raky has no bank connection, no open-banking integration, and no access to your accounts, cards or transactions — there is nothing for you to connect and nothing for us to read.

• Your profile. The name you give, your age, and the monthly income you enter.
• Your onboarding answers. Your household, housing situation, transport, debt, regular costs, subscriptions, goals and what you want to spend on — the answers Raky uses to build the plan.
• Your plan and your entries. The budget categories Raky works out, plus any transactions, savings goals and contributions you record yourself.
• Your settings. Your chosen currency and notification preference.
• Subscription status. Whether you have an active Raky subscription, handled for us by RevenueCat and the app store. We never see your card number.

What Raky does not collect

Raky does not ask for, receive or store: your bank login, account numbers, card numbers, your real bank transactions, your location, your contacts, your photos, or your device advertising identifier.

Why we hold it

• To give you the product. Your plan cannot exist without the answers it is built from. This is performance of our contract with you.
• To keep your plan across devices. So a new phone does not mean starting over.
• To run the subscription. To know whether you have paid, and to restore purchases when you ask.
• To keep the service working. Diagnosing errors and preventing abuse, which is our legitimate interest in a functioning app.

Where it is stored, and who can see it

Your data is held in our Supabase project (Postgres), protected by row-level security so that your rows are readable only by your own account.

The only third parties involved are the ones needed to run the app: Supabase hosts the database; RevenueCat and Apple or Google handle the subscription; and your device operating system delivers notifications if you enable them.

We do not sell your personal data. We do not share it with advertisers or data brokers, and we do not use it to target ads anywhere.

TODO: confirm the Supabase hosting region and name it here, along with the transfer mechanism if that region is outside the EEA.

How long we keep it

Your plan and answers are kept while your account exists. Delete your account and we remove them within 30 days, except where we must keep a record — a payment receipt, for example — to meet a tax or accounting obligation.

Your rights

If you are in the UK, EU or EEA, you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. If you are in California, you have comparable rights, including the right not to be discriminated against for exercising them.

Write to us at [contact address to be added] and we will answer within one month. You can also complain to your local data protection authority.

Children

Raky is not for children. The app is intended for people aged 16 and over, and we do not knowingly collect data from anyone younger. If you believe a child has given us data, write to us and we will delete it.

Changes

If we change this policy we will update the date at the top, and tell you in the app before a material change takes effect.