Privacy Policy

In short

Your financial information stays on your devices, locked with keys only you and the people you share with hold. If you turn on sync, it is end-to-end encrypted before it leaves your device, so the sync server stores only data it cannot read. Rakan has no advertising, no analytics and no tracking, and we never sell or share your data.

What stays on your device

Everything you enter: households, accounts, balances, transactions, budgets, goals, debts, notes and setup answers. It is kept in an encrypted database whose key is held by your device's keychain or keystore and never leaves the device. Automatic backups made by the app are encrypted with the same key and stay on the device.

Optional sync and sharing

Sync is off until you turn it on. When it is on, each change is encrypted on your device with keys only your devices and the people you share a household with hold. The sync server keeps:

• public keys and certificates for your account and devices, and the date each device last synced;
• for each shared household, who may see or change each part of it (by random identifiers, not names), keys sealed to each member, encrypted changes and one encrypted snapshot;
• hashes of sign-in tokens and invite links, never the secrets themselves, until they expire.

The server cannot read names, amounts, notes, email addresses or anything else you enter. It deletes changes once every device has them. It does not store IP addresses; the company hosting it may keep standard connection logs for a short time to keep the service secure.

Keys and backups in your own accounts

If you choose, your sync keys are saved to your own iCloud Keychain (iPhone and Mac) or your Google account's end-to-end encrypted backup (Android), so you can recover them on a new device. With sync on, a backup file locked with your sync keys can also be saved to your iCloud Drive. These copies are held by Apple or Google under their own privacy policies; we cannot read them.

Touch ID, Face ID and notifications

If you turn on the app lock, your device checks your fingerprint or face; the app is only told whether the check passed. Bill and balance reminders are scheduled on your device and are not sent through any server of ours.

Your choices and deleting your data

You can export everything to CSV or Excel at any time. To delete your sync account and everything the server keeps for it, open Rakan and choose Turn Off Sync, then Turn Off and Delete My Account (Mac: Settings, Sync and devices; iPhone: More; Android: the menu, then Delete My Account). Households shared with others carry on for them. Deleting the app removes everything on that device. See Deleting your account.

Children

Rakan is meant for adults managing a household's money and is not directed at children.

Changes and contact

If this policy changes, the new version will be posted here with a new effective date, and important changes will be shown in the app. Questions: {{SUPPORT_EMAIL}}.