Privacy Policy

1. Data controller

Service operator: Renulo. Contact for privacy requests: renulo.app@gmail.com.

2. What we collect

Account data: email address, authentication identifiers (including from Google sign-in if you use it).

Profile data: display name (if provided), preferred currency, language preference.

Subscription data you enter: service names, amounts, currencies, billing dates, categories, notes.

Technical data: session cookies required to keep you logged in (see Cookies).

We do not connect to your bank account or scan your email inbox.

3. Why we use your data

To create and secure your account and provide the subscription tracker.

To store and display your subscriptions and spending summaries.

To send transactional emails (e.g. email confirmation) via our auth provider.

Legal basis (GDPR): contract performance (providing the service) and, where applicable, legitimate interest in operating and securing the service.

4. Where data is stored

Data is stored in Supabase (database and authentication) and served via Vercel. Providers may process data in the EU, US, or other regions according to their terms and safeguards (e.g. Standard Contractual Clauses).

5. How long we keep data

Active account: we keep your data for as long as your account exists.

After you delete your account: profile and subscription data are removed from our database without undue delay. Backups held by our infrastructure providers may retain copies for a limited period (typically up to a few weeks) before automatic rotation.

Server and security logs may be kept for a limited time by our hosting providers for troubleshooting and abuse prevention.

6. Cookies

We use essential cookies only to maintain your login session. We do not use advertising or analytics cookies at this time. If we add analytics later, we will update this policy and ask for consent where required (e.g. in the EU).

7. Sharing with third parties

We use Supabase (auth/database), Vercel (hosting), and optionally Google (sign-in). We do not sell your personal data.

Exchange rate data is fetched from public APIs; no personal data is sent for that purpose.

8. Your rights

You may access, correct, or delete your data. You can delete your account in Settings, which removes your profile and subscriptions.

You may withdraw consent where processing is consent-based, object to certain processing, and lodge a complaint with a supervisory authority (e.g. UODO in Poland, or the relevant authority in your country).

To exercise rights, contact renulo.app@gmail.com.

9. Children

Renulo is not directed at children under 16. We do not knowingly collect data from children.

10. Changes

We may update this policy. We will post the new version on this page with an updated date.