What changed in this version. These are corrections so the policy matches the Service as it now works. (1) Recontrol is also a web application at app.recontrol.money, hosted by Vercel; Section 14 describes its cookies and browser storage, and its usage analytics are off in the EEA and the UK until you turn them on (Sections 1, 3.3, 6.1 and 14). (2) AI Chat now looks up what each question needs, which can include individual transactions, and can propose changes you confirm; the AI features permission is asked the first time you ask, can be turned off in Settings, and also covers sorting a linked bank’s new kinds of transaction (Section 4A). (3) Bank connections may also bring in investment holdings, card and loan terms, and repeating payments, where your bank reports them (Section 3.2). (4) You sign in with Google, Apple or your email address: a one-time code sent to it, or a password where your account has one (Sections 3.1 and 7); the codes are sent by our email provider (Section 6.1); and the web application’s sign-in storage is listed (Section 14). (5) The Service no longer computes a net worth (Section 5). (6) When you delete your account, what you recorded in a shared space stays with that space (Section 11.2). We also list feedback and notifications among the data we hold (Sections 3.1 and 3.3).
1. Introduction
Recontrol (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you use the Recontrol mobile applications or the Recontrol web application at app.recontrol.money (each, and together, the “App”) and all related services (collectively, the “Service”). This Privacy Policy applies to all users of the Service. Recontrol is provided as a mobile application for iOS and Android and as a web application at app.recontrol.money. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices as described in this Privacy Policy, you should not access or use the Service. This policy should be read together with our Terms of Service, our Information Security Policy, our Data Retention and Disposal Policy, and our Access Controls Policy.2. Who we are
Recontrol is a personal and collaborative finance management application that helps users track accounts, record transactions, set financial goals, collaborate in shared workspaces, and — optionally — import balances, transactions, and investment holdings from connected financial institutions, and ask questions about their own figures using AI Chat. Data Controller / Data Fiduciary:- Name: Mrinal Wahal (sole proprietorship)
- Email: support@recontrol.money
- Mailing Address: 2005, Yucca, Paramount Symphony, Crossing Republik, Ghaziabad, Uttar Pradesh, India 201016
3. Information we collect
3.1 Information you provide directly
3.2 Information from connected financial institutions (optional integrations)
If — and only if — you choose to connect an external financial account, we receive data from that institution on your behalf and with your consent. These integrations are optional and inactive until you explicitly connect an account. Manual entry remains fully available and is the default. See Section 4 for full detail.
We never receive, see, or store your online banking or brokerage login credentials or one-time passwords. Authentication happens directly between you and the institution (through Plaid or Zerodha). See Section 4.
3.3 Information collected automatically
Analytics is limited and optional. The App includes one product-analytics tool, PostHog (see Section 13). It captures pseudonymous usage events and the stripped crash reports described above to help us understand how the App is used and where it breaks — it never receives your financial data (balances, transactions, holdings), your name, or your email. You can turn analytics off at any time from Settings in the mobile application or Profile and settings in the web application, and it is disabled on local/development builds. In the web application, for visitors in the European Economic Area and the United Kingdom, analytics are off — and nothing is stored on your device for them — until you turn them on. We do not use any advertising SDK, cross-app tracking, or social-media pixel.
3.4 Information we do not collect
- Banking credentials — we never receive or store the username, password, PIN, or one-time password for your bank or brokerage. Where you connect an institution, that authentication is handled directly by Plaid or Zerodha
- Precise location — we do not collect GPS or precise location data. We record the two-letter country code from your device’s region setting at sign-up (see Section 3.3); this is coarse and is not location tracking. The web application reads the country that Vercel derives from your IP address on each request, solely to decide whether usage analytics start switched off where the law requires consent first; it is not stored
- Contacts — we do not access your device address book
- Photos or media — we do not access your camera or photo library
- Advertising identifiers — we do not collect IDFA or any advertising identifier
- Payment details — we never receive or store your card number, billing address, or any payment instrument. In-app purchases are processed entirely by Apple or Google (see Section 4B)
- Audio recordings — where you ask an AI Chat question by voice, transcription is performed by your device’s operating system or, in the web application, your browser. We receive only the resulting text and never store, receive, or transmit audio (see Section 4A)
- Biometric data — we do not collect or receive fingerprint, face, or other biometric data. The App offers an optional biometric app lock (e.g. Face ID / fingerprint); this verification is performed entirely by your device’s operating system, and your biometric data never leaves your device or is shared with us
4. Connected accounts and financial integrations
Recontrol offers optional integrations that let you link an external financial institution so your balances, transactions, and holdings import and refresh automatically. You are never required to use them, and manual entry remains fully available.4.1 Plaid (bank connections — United States and Canada)
- We use Plaid Inc. (“Plaid”) to connect to your bank. Plaid is a regulated financial-data aggregator.
- When you connect a bank, you authenticate directly with Plaid (and, through Plaid, your bank). Recontrol never sees or stores your bank login credentials.
- On your behalf, Plaid provides us the data listed in Section 3.2, including up to 730 days (two years) of transaction history so your account history can be reconstructed.
- Plaid is a United States-based service provider, and Plaid processes your banking data on infrastructure located in the United States before it reaches Recontrol. See Section 8 (International data transfers).
- We store a Plaid access token so we can refresh your data — periodically on a schedule, in response to secure webhooks from Plaid, and when you open the App. This token is encrypted at rest using AES-256-GCM.
4.2 Zerodha (investment holdings — India)
- We use Zerodha’s Kite Connect API to import your investment holdings if you connect your Zerodha (demat/trading) account.
- You authenticate directly with Zerodha. Recontrol never sees your Zerodha password or two-factor codes.
- On your behalf, Zerodha provides us the holdings data listed in Section 3.2.
- We store a daily Zerodha access token, encrypted at rest using AES-256-GCM. It expires every day, after which you must re-authorise to continue syncing.
- Your use of Zerodha is also governed by Zerodha’s privacy policy.
4.3 Disconnecting an integration
You can disconnect any integration at any time from within the App. When you disconnect:- We revoke the access token with the provider (Plaid or Zerodha), and
- We delete the stored encrypted token from our systems.
4A. AI Chat
AI Chat is an optional feature that lets you ask questions about your own finances in plain language. It is available only on a paid plan. The same permission, AI features, also lets the Service ask a model to sort a linked bank’s new kinds of transaction into your categories (Section 4A.7). If you never turn AI features on, none of your information is sent to the model provider described below.4A.1 Who processes it, and your permission
The model is Claude, provided by Anthropic PBC, in the United States. Anthropic acts as our processor for these features. The first time you ask AI Chat a question, the App asks you to turn on AI features. The request names Anthropic and lists what is sent, and nothing reaches Anthropic until you agree. Your choice is recorded with your account, so it applies in the mobile and web applications alike. It is never a condition of subscribing. You can turn AI features off at any time in Settings (mobile) or Profile and settings (web); after that, AI Chat sends nothing and imported transactions are sorted without the model. Under Anthropic’s commercial terms, Anthropic does not train its models on data sent through its API, and prompt and response content sent to the messages endpoint is not retained by default once the response has been returned. Anthropic may retain content flagged by its automated trust-and-safety systems, or where retention is required by law. Anthropic’s handling of this data is governed by the Anthropic Privacy Policy and its published API data-retention documentation.4A.2 What AI Chat sends to the model
AI Chat sends your question, a short orientation, and the results of the look-ups the question needs:- your question, and the earlier turns of the same on-device session;
- the Space’s name, reporting currency and today’s date;
- the Space’s assets and liabilities — names, types, currencies and today’s balances — and the names of its categories and income sources;
- the Space’s headline totals for the current month;
- caveats: whether some money has no category, whether an amount could not be converted, and which connections have stopped syncing, named by institution;
- the permissions your role holds in the Space;
- as the question needs: spending by category over any period; lists of matching transactions, each with its note (or its accounts), amount, date and direction; balances on a date; the Space’s budgets, goals and watchlists with their figures; and the results of projections computed from figures you provide;
- opaque internal record identifiers for the records named above.
4A.3 What is never sent to the model
Your name, email address, or phone number; account numbers, including the last four digits imported from a bank; any banking or brokerage credential; individual investment holdings (security names, quantities and prices); and any data from a Space other than the one you are asking about.4A.4 What we store
We store the text of your question and the outcome of the exchange, attributed to your account, in our own database. We do not store the answer, and we do not store the data sent with it. There is no server-side conversation history; the transcript you see exists only on your device, for that session, and is discarded when the App closes. Your questions are deleted when you delete your account, and you may ask us to erase them at any time (Section 10). Question text is never sent to our analytics provider.4A.5 Voice input
If you ask by voice, the audio is transcribed by your device’s own speech recognition — Apple’s on iOS, Google’s on Android — or, in the web application, by your browser’s. Whether that transcription is performed on the device or on the provider’s servers is determined by the platform and varies by language and device; it is not a choice we control. While the microphone is open, the mobile App supplies your institution and account names to the platform recogniser as vocabulary hints so it can transcribe them correctly. The microphone is active only while you are dictating, and a dictated question is never sent without your confirmation. Recontrol does not record, store, or transmit audio.4A.6 Limits on what the model can do
AI Chat can propose a change to the Space — recording or correcting a transaction, updating a balance, adding an account, category or income source, setting or changing a budget, goal or watchlist, or deleting one of these. The proposal is computed and checked by our backend and shown to you on a card drawn by the App; nothing is changed unless you confirm it, and a confirmed change is made under your own permissions. AI Chat cannot move money, connect or disconnect institutions, change members, roles or invitations, delete a Space or your account, or change a subscription or sponsorship. Every figure it states must come from figures our backend computed — it is instructed not to calculate, estimate, or infer figures of its own, and to state that it does not have a figure rather than produce one. AI Chat does not make any decision about you, and nothing in it constitutes financial, investment, or tax advice (see the Terms of Service).4A.7 Sorting imported transactions
When a bank you linked brings a kind of transaction your Space has not seen before, and the Service cannot place it from your Space’s own history or category names, it may ask the model to choose among your Space’s categories. It sends the names of the Space’s categories, the institution’s category for the transaction, and up to three merchant names — never an amount, a note, or anything that identifies you. This happens only if the person who linked the bank has turned on AI features.4A.8 Your own AI tool
The web application lets you connect an AI assistant of your own, such as Claude or ChatGPT, to your Recontrol data. That connection is made by you, in your tool. When you use it, the data it reads is sent to that tool’s provider at your direction, under that provider’s terms and privacy policy. You can remove the connection in your tool’s settings at any time.4B. Subscriptions and payments
Recontrol offers an optional paid subscription. The core ledger is free and remains free.4B.1 What we receive
We use RevenueCat, Inc. to reconcile store purchases into an entitlement. What reaches our systems is limited to: whether an active subscription exists, when it expires, and an opaque customer identifier. We do not receive card numbers, billing addresses, or transaction amounts. RevenueCat processes, on our behalf and as our processor: an app-generated user identifier, your device type and operating system, and the store’s own purchase receipt (Apple) or purchase token (Google). RevenueCat stores this data on Amazon Web Services in the United States. See the RevenueCat Privacy Policy.4B.2 Sponsorship in shared Spaces
If you put your subscription behind a Space so its bank connections can sync (“sponsoring”), we record that you have done so. Other members of that Space can see that the Space is sponsored. Sponsoring is always your own act — no role and no administrator can commit your subscription on your behalf, and you can withdraw it at any time.4B.3 Deleting your account does not cancel your subscription
Because your subscription belongs to your Apple or Google account rather than to Recontrol, deleting your Recontrol account removes our record of it but does not cancel it. Cancel through your store’s subscription settings before deleting your account. See Section 11.5. How we use your information
- Creating and managing your user account
- Authenticating your identity and managing sessions
- Enabling you to create, view, edit, and delete financial accounts, transactions, goals, and Spaces
- Importing and refreshing data from financial institutions you choose to connect
- Converting and displaying balances in your chosen currency
- Computing totals, balance history, budgets, goals and watchlists
- Answering the questions you ask in AI Chat, preparing the changes you ask it to propose, and understanding which questions are asked so we can build them into the product (Section 4A)
- Sorting imported transactions into your categories (Section 4A.7)
- Providing paid features, determining your entitlement to them, and applying fair-use limits (Section 4B)
- Enabling collaborative features, including memberships, roles, and permissions
- Providing customer support
- Identifying and fixing bugs and performance issues
- Detecting and preventing unauthorised access and abuse
- Complying with applicable law
- Sending essential service communications (security alerts, policy updates)
6. How we share your information
6.1 Service providers and processors
Recontrol’s database is hosted in the United States (AWS us-east-1, Northern Virginia, via Nhost), and our application/API server is also hosted in the United States (Railway). Your data is therefore stored and processed in the same country. The supporting and optional providers above operate in the United States, with the exception of Zerodha (India, only if you connect it). See Section 8 for the international-transfer disclosure.
Telemetry is filtered before it leaves us. Server-side traces, metrics and logs are pushed to a collector we operate ourselves, which forwards them to Grafana Cloud. Sensitive fields are removed at the source under a deny-by-default allowlist: only explicitly permitted technical fields may be emitted, so a field added to the product later cannot silently begin flowing to a monitoring vendor.
6.2 Collaborative Space members
When you participate in a shared Space, other members of that Space may see the financial data within that Space (accounts, transactions, goals, imported balances and holdings) in accordance with the permissions assigned to their role. Your display name and email may be visible to other Space members.6.3 Legal requirements
We may disclose your information if required to do so by law, court order, or other legal process initiated by competent authorities.6.4 Business transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any change in ownership.6.5 What we do not do
- We do not sell your personal information to third parties
- We do not share your data for advertising or marketing by third parties
- We do not share your data with data brokers
- We do not track you across other apps or websites
7. Data security
We implement appropriate technical and organisational measures to protect your personal information, as described in detail in our Information Security Policy:- Encryption in transit: All data is transmitted over TLS/HTTPS
- Encryption at rest: Data stored in our databases is encrypted at rest using AES-256, provided by AWS
- Application-level token encryption: Access tokens for connected integrations (Plaid, Zerodha) are additionally encrypted at rest using AES-256-GCM before being stored
- Secure credential storage: On mobile devices, authentication tokens are stored using platform-native secure storage (iOS Keychain / Android Keystore via Expo Secure Store). In the web application, your sign-in is sealed with encryption in a cookie that page scripts cannot read, and the short-lived access token is held in memory only; you are signed out after an hour without activity and asked to sign in again a day after signing in
- Password hashing: You sign in with Google, Apple or your email address. A password, where your account has one, is stored only as a one-way hash; we cannot read it. A one-time sign-in code expires after 10 minutes
- JWT authentication: All API requests are authenticated using signed JSON Web Tokens
- Role-based access control: Collaborative Spaces enforce granular permissions (see our Access Controls Policy)
- Input validation: All API requests are validated using Protocol Buffer schema validation (protovalidate)
- Webhook verification: Incoming webhooks from Plaid and our subscription provider are verified cryptographically as well as by a shared secret, so a forged or replayed payload is rejected
- Telemetry redaction: Monitoring data is filtered at the source by a deny-by-default allowlist before it leaves our systems, so names, amounts, balances, email addresses, tokens and free text are never exported to a monitoring vendor
- Access controls: Internal access to user data is restricted to authorised personnel on a need-to-know basis
7.1 Data breach notification
In the event of a personal data breach, we will notify affected users and the relevant authorities in accordance with the laws that apply to them:- India: the Data Protection Board of India and affected users, under the DPDP Act and the Digital Personal Data Protection Rules, 2025, and applicable requirements under the Information Technology Act, 2000.
- United States: affected residents (and, where required, state Attorneys General) under applicable state data-breach-notification laws.
- Canada: the Office of the Privacy Commissioner of Canada and affected individuals where a breach creates a “real risk of significant harm” (PIPEDA), and the Commission d’accès à l’information for Quebec residents (Law 25); we maintain a record of breaches as required.
8. Data storage location and international data transfers
Changed on 29 July 2026. Recontrol’s database was migrated from AWS ap-south-1 (Mumbai, India) to AWS us-east-1 (Northern Virginia, United States). The categories of data we collect, the purposes we use them for, and the providers we share them with are unchanged except as separately described in this version. What changed is the country in which your data is stored at rest. Versions of this policy before 29 July 2026 described storage in India and remain accurate for the period they were in force.
8.1 If you are outside the United States
If you access the Service from Canada, India, or anywhere else outside the United States, your personal data is stored and processed in the United States. We want you to understand what this means:- Comparable protection. We protect your data with the technical and organisational safeguards described in Section 7 and our Information Security Policy, and we remain accountable for that protection regardless of where the data is processed — consistent with the accountability principle under Canada’s PIPEDA and with our obligations as a Data Fiduciary under India’s DPDP Act.
- Access by authorities. While your data is in the United States, it is subject to United States law and may be accessible to United States courts, regulators, and law-enforcement or government authorities under lawful process. Data processed by a provider operating in another country may be subject to that country’s laws.
- Your consent. By creating an account and using the Service, you consent to the transfer, storage, and processing of your personal data in the United States as described here.
8.2 If you are in India
We are established in India and remain the Data Fiduciary for your personal data wherever it is stored. The Digital Personal Data Protection Act, 2023 permits the transfer of personal data outside India except to territories restricted by the Central Government; the United States is not currently a restricted territory. Our obligations to you under the DPDP Act — including security safeguards, breach notification, your rights under Section 10, and grievance redressal under Section 17 — are unaffected by where the data is stored.8.3 International processing through Plaid
If you choose to connect a bank using Plaid (available for United States and Canadian institutions), your banking data is processed by Plaid Inc. in the United States before it is transmitted to, and stored by, Recontrol. By connecting a bank through Plaid, you consent to this processing, which is necessary to provide the bank-connection feature you have chosen to use. Plaid’s handling of your data is governed by Plaid’s End User Privacy Policy.8.4 International processing through Anthropic
If you turn on AI features, the data described in Sections 4A.2 and 4A.7 is processed by Anthropic PBC in the United States. This happens only when you use those features. See Section 4A for what is and is not sent, and what Anthropic does with it.9. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy, in line with our Data Retention and Disposal Policy and the storage-limitation principle of the DPDP Act.10. Your rights
Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights:- Access: Request a summary of the personal data we hold about you and how we process it
- Correction: Request correction of inaccurate or incomplete personal data, and completion or updating of your data
- Erasure: Request deletion of your personal data (see Section 11)
- Data portability / export: Request a copy of your data in a portable format, or export your transactions, accounts and balances yourself as CSV from the web application
- Withdraw consent: Where processing is based on consent, withdraw your consent at any time (including by disconnecting an integration, or by turning off AI features in Settings — Section 4A.1)
- Opt out of analytics: Turn off product analytics and crash reporting at any time from Settings in the mobile application or Profile and settings in the web application
- Erase your AI Chat questions: Ask us to delete the questions you have asked in AI Chat. We never store the answers
- Grievance redressal: Raise a complaint with our Grievance Officer (Section 17), which we will address within the timeframe required by law
- Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity
- Use the account settings within the App
- Visit Delete your data
- Email us at support@recontrol.money
10.1 United States (California and other states)
These rights apply to residents of US states with comprehensive privacy laws (including California’s CCPA/CPRA, and the laws of Colorado, Connecticut, Virginia, Texas, Oregon and other states). We extend the core rights below to all US users regardless of whether we currently meet a given law’s applicability thresholds. Categories of personal information we collect map to these statutory categories: identifiers (email, display name, phone number); financial information (account balances, transactions, goals; and, if you connect a bank, imported account and transaction data); commercial information (your subscription status and the fact of a purchase — never payment details, which we do not receive); audio/electronic information (the text of AI Chat questions you ask; we do not receive audio); internet/network activity (limited request metadata such as IP address, pseudonymous product-analytics events, and crash reports); and sensitive personal information (financial-account information and account log-in credentials). Sources, purposes, and recipients are described in Sections 3–6. We do not use AI Chat to profile you or to make any decision about you. It answers a question you asked, using figures we computed, and produces no score, ranking, eligibility determination, or automated decision of any kind. Your rights:- Know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
- Delete the personal information we hold about you (see Section 11).
- Correct inaccurate personal information.
- Portability — receive a copy in a portable format.
- Opt out of “sale” or “sharing” of personal information and of targeted advertising — we do not do any of these, so there is nothing to opt out of, but we honour browser opt-out preference signals such as the Global Privacy Control (GPC).
- Limit the use of sensitive personal information — we use sensitive personal information only to provide the Service and for purposes that do not trigger the right to limit.
- Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a right.
10.2 Canada (PIPEDA and Quebec Law 25)
For users in Canada, we comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (Law 25).- Accountability. Our designated Privacy Officer (Section 17) is accountable for our handling of your personal information and for responding to your requests and complaints.
- Consent. We collect, use, and disclose personal information with your knowledge and consent. Because financial information is sensitive, we rely on your express consent for it; you may withdraw consent at any time (including by disconnecting an integration or deleting your account), subject to legal or contractual limits.
- Limited collection, use, and retention. We collect only what we need for the purposes in Section 5 and retain it only as described in our Data Retention and Disposal Policy.
- Cross-border storage. Your personal information is stored and processed in the United States and may be accessible to authorities there under lawful process (see Section 8). We remain accountable for its protection.
- Your rights: access your personal information, request correction, withdraw consent, and — for Quebec residents — data portability and de-indexing of certain information.
- No solely automated decisions. We do not use your personal information to make decisions based exclusively on automated processing that produce legal or similarly significant effects about you.
- Complaints. You may complain to our Privacy Officer. If unsatisfied, you may contact the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d’accès à l’information.
- Electronic messages (CASL). We send transactional and service messages necessary to operate the Service. We will send commercial electronic messages only with your consent and will always include a way to unsubscribe.
11. Account deletion and data erasure
11.1 How to delete your account
You have the right to delete your account and all associated personal data at any time:- In-app: In the mobile application, Settings → Delete My Recontrol Account; in the web application, Profile and settings → Delete my Recontrol account
- Instructions: Visit Delete your data
- Email: Send a deletion request to support@recontrol.money
11.2 What gets deleted
Upon processing your deletion request, we permanently delete:- Your user account and profile information (email, display name, phone number)
- Every Space in which you are the only member, with all of its records, including data imported into it (see Section 11.6 for shared Spaces)
- All stored integration access tokens (which are also revoked with the provider before deletion)
- All AI Chat questions attributed to you (answers were never stored)
- Your feedback messages and your notifications
- Our record of your subscription, your usage counters, and any Space sponsorships
- Your currency preferences, country/region, and other settings
- Your Space memberships and role assignments
- Your registered device push tokens
- Session tokens and authentication data
11.2A Your subscription is not deleted with your account
11.3 Processing timeframe
In-app deletions are processed immediately. Email requests are processed within thirty (30) days of receipt.11.4 Data that may be retained
After account deletion, we may retain minimal data only where required by applicable law (for example, records required by a court order or law enforcement process). We will not retain any data beyond what is legally mandated.11.5 Written confirmation
You may request written confirmation that your data has been deleted by emailing support@recontrol.money.11.6 Effect on shared Spaces
Your erasure is never blocked by a shared Space, and you are not required to hand one over first.- Spaces where you are the only member are deleted with your account, together with all records within them.
- Spaces with other members are not deleted. Your membership and role assignment are removed; the Space’s own accounts, transactions and history remain, because they are the Space’s records and other members’ personal data, not solely yours. Transactions you recorded there are shown as recorded by a “Former member”. If you were the Space’s only administrator, the longest-standing remaining member is automatically granted an administrator role, so the Space is never left unmanageable.
- Spaces you sponsored stop syncing their bank connections once your subscription record is removed. Nothing in them is deleted, and any other member may sponsor the Space to resume syncing.
12. Children’s privacy
The Service is not intended for users under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. Because the Service is restricted to adults, we do not knowingly collect personal information from children under 13 (in compliance with the US Children’s Online Privacy Protection Act (COPPA)) or from minors protected under US state laws or Canadian law. We do not sell or share the personal information of minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@recontrol.money.13. Third-party services
We do not integrate third-party advertising SDKs, cross-app tracking, or social-media tracking pixels. The only analytics tool we use is PostHog, which collects pseudonymous usage events and stripped crash reports (never your financial data) and which you can turn off in Settings (mobile) or Profile and settings (web).
14. Cookies and local storage
The mobile application does not use cookies. It uses:- Expo Secure Store: To securely store authentication credentials using platform-native secure storage (iOS Keychain / Android Keystore)
- AsyncStorage: To persist session state and cached data locally on your device, including the way you last signed in on it (Apple, Google or email), so the sign-in screen can name it
- PostHog local storage: If analytics is enabled, the PostHog SDK stores a pseudonymous identifier and a small event queue locally on your device
- RevenueCat local cache: Your subscription status, so the App knows what you are entitled to without a network round trip
- AI Chat session memory: Your current chat transcript is held in memory only, for the duration of the session, and is discarded when the App closes. It is never written to our servers
- Strictly necessary cookies for signing in:
__Host-rctrl-sessionkeeps you signed in. It holds your sign-in, sealed with encryption, is markedSecure,HttpOnlyandSameSite=Strict, is sent only to app.recontrol.money, cannot be read by page scripts, and expires within a day of signing in. It is cleared when you sign out__Secure-rctrl-signed-insays only that this browser is signed in (its value is1), so recontrol.money can offer to open the app instead of signing in. It names no one, opens nothing, and is set and cleared with the session cookie__Host-rctrl-sign-innames the way you chose to sign in (Apple, Google or email) while you sign in, so we can count which ways in work. It isHttpOnly, holds nothing else, and expires after 15 minutes or when signing in finishes
- Preference cookies:
theme(your Appearance choice),money(how amounts are coloured) andsidebar_state(whether the sidebar is open), set only when you change those preferences - Browser storage (localStorage and sessionStorage): Preferences such as Hide amounts, the Space you last opened, your analytics choice, recent search-box entries and the transaction views you save; the way you last signed in on this browser (Apple, Google or email), so the sign-in page can name it; the page to return to after signing in; and, for up to 30 minutes, the state of a bank or broker connection you are in the middle of
- PostHog storage: Only while usage analytics are on. In the European Economic Area and the United Kingdom they are off, and nothing is stored for them, until you turn them on in Profile and settings; elsewhere they are on, and you can turn them off there
- AI Chat session memory and your access token: Held in memory only, never written to browser storage
15. Governing law
This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011). Any disputes arising under this Privacy Policy shall be subject to the jurisdiction of the courts of Ghaziabad, Uttar Pradesh, India. If you reside outside India, nothing in this section deprives you of the protection of the mandatory data-protection and consumer-protection laws of your country, state, or province of residence (such as the CCPA/CPRA and other US state laws, PIPEDA, and Quebec’s Law 25). You may also have the right to lodge a complaint with your local data-protection authority.16. Changes to this Privacy Policy
We may update this Privacy Policy periodically. When we make material changes, we will:- Update the “Last Updated” date at the top of this policy
- Provide notice within the App
- Send an email notification for significant changes
17. Contact us and Grievance Officer
If you have questions, concerns, or requests regarding this Privacy Policy, or wish to exercise your rights or raise a grievance:- Grievance Officer: Mrinal Wahal
- Email: support@recontrol.money
- Mailing Address: 2005, Yucca, Paramount Symphony, Crossing Republik, Ghaziabad, Uttar Pradesh, India 201016
- Data deletion requests: Delete your data
By using Recontrol, you acknowledge that you have read and understood this Privacy Policy.