Last updated: September 3, 2026
Rata y Fina ("the App", "we") is operated by Lucas Gemperle Ortiz (sole developer, Spain). Contact: [email protected]
This policy explains what data the App handles, how, and your rights under the EU General Data Protection Regulation (GDPR), the UK GDPR and other applicable privacy laws. It applies to the App on iOS (Apple App Store) and Android (Google Play).
| Data | Where it lives | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Name, age and preferences you enter during onboarding (e.g. tone mode, savings goal) | On your device | Personalise your experience | Performance of contract (Art. 6(1)(b)) |
| Financial entries: expenses, income, categories, budgets, savings goals, notes | On your device | The core function of the App | Performance of contract (Art. 6(1)(b)) |
| Purchase and subscription status, anonymous purchase identifiers | Apple/Google and RevenueCat servers | Process your subscription, unlock premium features, restore purchases, prevent fraud | Performance of contract (Art. 6(1)(b)) |
| Email address (optional) | RevenueCat, Make and Loops servers | Send you subscription-related messages: welcome/receipt information, alerts if a payment fails, and notices about your account status | Performance of contract (Art. 6(1)(b)) |
| Email address — marketing (optional, opt-in) | Make and Loops servers | Only if you tick the corresponding box: send you savings tips, news and content about Fina | Consent (Art. 6(1)(a)) |
| Usage data (which screens you visit, in-app events, answers to in-app surveys, sampled session recordings) | PostHog (EU servers) | Understand how the App is used, find where it can be improved, fix issues | Legitimate interest (Art. 6(1)(f)) |
| Push notification registration: a push token and subscription ID for your device, plus your device model, OS, language, time zone and IP address, and tags describing your plan (whether your subscription is active, which plan, whether auto-renewal is on, whether a payment failed, and any collaborator code you entered) | OneSignal servers (US) | Send you the reminders and notices you agreed to receive | Consent (Art. 6(1)(a)) — you grant it in your device's notification permission, and can withdraw it in your device settings at any time |
| Messages you send us from inside the App (support, feedback, bug reports): the text you write, the contact you choose to leave (email or Instagram handle, optional), plus your plan, language, platform, App version and your RevenueCat support ID | Make servers (EU) and our email inbox | Answer you and fix what you report | Legitimate interest (Art. 6(1)(f)); consent for any contact detail you choose to give |
| Stories and photos you send for Fina's wall (optional): the name you choose to sign with, your story, and a photo if you attach one | Make servers (EU) and our email inbox | Review it, and publish it inside the App if you asked us to | Consent (Art. 6(1)(a)) |
| Technical requests to check for App updates and remote settings | Our hosting provider | Deliver updates and configuration | Legitimate interest (Art. 6(1)(f)) |
Your financial data never leaves your device. Amounts, balances, the names of your expenses, custom categories, notes and savings goals are stored only on your phone. Our analytics receive aggregate usage signals (for example: "an expense was added", or "she edited the amount: yes/no"), never amounts or descriptions, and never your email address.
About session recordings. A small, randomly sampled share of sessions is recorded to see where the App confuses people. These recordings are configured to mask every text field and every image, so what you type — amounts, names of expenses, notes — is never legible in them. They are hosted on EU servers and are never used for advertising. If you would rather not be recorded at all, email us and we will exclude you.
One honest clarification about identifiers. Analytics themselves never receive your email. However, if you save your email in the App, the message that triggers your welcome/receipt email carries your email together with your random analytics identifier, so that our automation can match a subscription event to the right person. This means that we — not PostHog — could in principle link the two. We do not use this to build advertising profiles, and you can ask us to delete your email at any time.
You can withdraw your consent to marketing communications at any time via the unsubscribe link included in every email, or by writing to us. Withdrawing it does not affect messages related to your subscription.
We do not collect: bank credentials or bank access, contacts, location, health data, or advertising identifiers. We do not access your camera or your photo library unless you explicitly pick a photo to send us. We do not track you across other apps or websites.