Privacy and Cookie Policy

Last updated: 2026-09-27 · policy version 2

Controller

[BETA CONTROLLER LEGAL NAME], [BETA CONTACT ADDRESS], Italy. Privacy requests: privacy@rationest.com.

Beta publication prerequisite: replace the controller and provider placeholders, resolve the separate geographic-address disclosure question, review the notice for the beta's international store availability, and publish it before opening signup. Registration and paid-service details require a later update before accepting payments.

Data, purpose, legal basis, and retention

• Account and authentication — email, display name, password verifier, sessions, and security logs; to create and secure the account and perform the service contract; retained while active and removed from active systems on account deletion, except limited records required by law.
• Household finances — expenses, incomes, ratios, splits, and balances; to perform the service contract; retained while active. Deletion removes the departing user's data and joint records involving that user while preserving records belonging only to the remaining partner.
• Receipt extraction — a selected image and extracted merchant, total, confidence, and line items; to perform the requested scan. Successful images are removed after extraction; failed/orphaned images after the 24-hour cleanup window; structured extraction after expense creation or the seven-day cleanup window.
• Billing — no payment is accepted during the free beta. Historical subscription records, if any, are handled under the applicable prior notice and legal obligations.
• Service and operational records — account, invitation creation and acceptance, expense and audit records support the requested service and cohort review. Requested invitation email delivery status (sent or failed) is kept on the invitation record independently of optional analytics. Retention: [SERVICE RECORD RETENTION PERIOD], subject to account deletion and applicable legal obligations.
• Product analytics — optional split views, recalculation, receipt corrections, and support taps contain only event names, timestamps, and pseudonymous couple identifiers, without financial amounts, descriptions, or receipt images. These events help improve the beta under consent as the legal basis and require a separate, off-by-default choice in mobile Settings. They expire after 180 days; withdrawing consent stops new collection immediately, and account deletion removes the couple's optional events.
• Email and push delivery — email address, push token, and message metadata; to deliver requested service communications. Marketing, if offered, requires a separate choice and unsubscribe mechanism.
• Diagnostics — optional sanitized crash, device, and performance information sent to Sentry under consent as the legal basis, only after its own off-by-default choice; retained for [SENTRY RETENTION PERIOD]. Product analytics and Diagnostics are independent choices in mobile Settings. You may withdraw either choice there at any time without losing service features.

Receipt scanning details

When you request a scan, RatioNest sends the normalized receipt image to Google Gemini for extraction. [CONFIRM GEMINI BILLING, APPLICABLE DATA PROCESSING TERMS, AND OPTIONAL LOGGING SETTINGS]. Both partners can see the extracted receipt data for a shared expense.

The image is removed after successful extraction; failed and orphaned uploads are automatically removed at the next scheduled cleanup after the 24-hour retention window. Extracted draft data is cleared when you create the expense or at the next scheduled cleanup after seven days.

You can review the extracted data or enter the expense manually instead. You may also request deletion through the account-deletion flow or by contacting the controller.

Service providers and International transfers

RatioNest uses service providers only for the stated purposes. Before beta signup, verify each provider's contracting entity, processing locations, retention, deletion support, DPA, and transfer mechanism.

• Supabase — authentication, database, and receipt storage; [SUPABASE ENTITY, LOCATIONS, AND TRANSFER MECHANISM].
• Resend — transactional email; [RESEND ENTITY, LOCATIONS, AND TRANSFER MECHANISM].
• Google Gemini — optional receipt extraction; [GOOGLE ENTITY, LOCATIONS, AND TRANSFER MECHANISM].
• Sentry — consent-based diagnostics; [SENTRY ENTITY, LOCATIONS, AND TRANSFER MECHANISM].
• Expo — push delivery and application services; [EXPO ENTITY, LOCATIONS, AND TRANSFER MECHANISM].
• Vercel — planned web hosting; [CONFIRM BETA DEPLOYMENT, VERCEL ENTITY, LOCATIONS, AND TRANSFER MECHANISM].
• Upstash — API abuse-prevention counters when configured; [CONFIRM BETA CONFIGURATION, UPSTASH ENTITY, LOCATIONS, AND TRANSFER MECHANISM].

Cookie and tracking notice

• Strictly necessary technologies — Supabase authentication/session storage and the RatioNest consent preference. Purpose: authentication, security, and remembering the choice. Duration: the authenticated session and until the preference is cleared or superseded.
• Optional product analytics and Diagnostics — separate, off-by-default mobile Settings choices. Product events expire after 180 days; Sentry retention is [SENTRY RETENTION PERIOD]. Withdrawing either choice stops its future collection.

Rejecting either optional choice does not reduce functionality. Closing the web banner keeps web diagnostics disabled. Cookie preferences remain available on every public page.

Your European privacy rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing and complain to the Italian Data Protection Authority. Email privacy@rationest.com. We normally respond within one month and may verify identity proportionately.

Account deletion and processor propagation

Open Settings in the mobile app and choose Delete Account, or email privacy@rationest.com. Authenticated deletion removes covered data from active RatioNest systems and disconnects the partner relationship. Where required, RatioNest instructs relevant service providers to delete covered data. Providers may retain limited transaction, fraud-prevention, legal-compliance, or backup data under documented schedules. Backup data is not restored to active use and is deleted when overwritten. A response will explain any legal exception.

California privacy rights

RatioNest does not sell personal information or share it for cross-context behavioral advertising. California residents may request access, correction, or deletion without discriminatory treatment using the methods above. An authorized agent may submit a request, subject to authority and identity verification. We acknowledge applicable requests within 10 business days and respond within 45 calendar days, subject to a permitted extension. If RatioNest is not legally subject to the CCPA, it may still honor these requests voluntarily.

Children and changes

RatioNest is not intended for anyone under 18. Material policy changes will be presented before they take effect where notice or renewed consent is required.