Privacy Policy

In short

Your financial information stays on your devices, locked with keys only you and the people you share with hold. If you turn on sync, it is end-to-end encrypted before it leaves your device, so the sync server stores only data it cannot read. Rakan has no advertising, no analytics and no tracking, and we never sell or share your data.

What stays on your device

Everything you enter: households, accounts, balances, transactions, budgets, goals, debts, notes and setup answers. It is kept in an encrypted database whose key is held by your device's keychain or keystore and never leaves the device. Automatic backups made by the app are encrypted with the same key and stay on the device.

Optional sync and sharing

Sync is off until you turn it on. When it is on, each change is encrypted on your device with keys only your devices and the people you share a household with hold. The sync server keeps:

• public keys and certificates for your account and devices, and the date each device last synced;
• for each shared household, who may see or change each part of it (by random identifiers, not names), keys sealed to each member, encrypted changes and one encrypted snapshot;
• hashes of sign-in tokens and invite links, never the secrets themselves, until they expire;
• for each device, the push address Apple or Google gives it, so the server can let it know there is news, until you turn off sync or remove the device.

The server cannot read names, amounts, notes, email addresses or anything else you enter. It deletes changes once every device has them. It does not store IP addresses; the company hosting it may keep standard connection logs for a short time to keep the service secure.

Keys and backups in your own accounts

If you choose, your sync keys are saved to your own iCloud Keychain (iPhone and Mac) or your Google account's end-to-end encrypted backup (Android), so you can recover them on a new device. With sync on, a backup file locked with your sync keys can also be saved to your iCloud Drive. These copies are held by Apple or Google under their own privacy policies; we cannot read them.

Touch ID, Face ID and notifications

If you turn on the app lock, your device checks your fingerprint or face; the app is only told whether the check passed. Bill and balance reminders are scheduled on your device and are not sent through any server of ours.

With sync on, the sync server can ask Apple or Google to deliver a push notification to your device when something changes, so it is up to date when you open the app. A push carries no information from your households: at most it says that new expenses are waiting for your OK or that someone accepted an invite, never what, how much or by whom, and usually it shows nothing at all. Apple and Google deliver it under their own privacy policies, so they can see that your device received a notification and when. You can turn off Rakan's notifications in your device's settings at any time.

Gold and silver prices

Prices for gold and silver are entered by hand unless you ask for today's world price. Only then does your device ask Gold API (gold-api.com), a public price service, for the price of gold and silver. The request names only the metals: no account, key, identifier or anything you entered goes with it, and nothing comes to us. As with any website, Gold API can see your device's IP address. You can turn on fetching once a day; it is off until you do.

The contact form

If you write to us through the form on the Support page, what you enter there (your email address, your name if you give it, the topic and your message) is sent by email to our support mailbox, which Microsoft 365 hosts for us, so we can answer you. The website does not store it. We keep the email only as long as we need it to help you, and use your address only to answer you. To stop the form being misused, the website counts the messages from each connection's IP address in memory for up to an hour, and never records the address.

Your choices and deleting your data

You can export everything to CSV or Excel at any time. To delete your sync account and everything the server keeps for it, open Rakan and choose Turn Off Sync, then Turn Off and Delete My Account (Mac: Settings, Sync and devices; iPhone: More; Android: the menu, then Delete My Account). Households shared with others carry on for them. Deleting the app removes everything on that device. See Deleting your account.

Children

Rakan is meant for adults managing a household's money and is not directed at children.

Changes and contact

If this policy changes, the new version will be posted here with a new effective date, and important changes will be shown in the app. Questions: write to us through the contact form.