Rudder Privacy Policy

Last updated: July 21, 2026

This policy explains what data the Rudder application (the "App") processes, for what purpose, and what rights you have over it. Rudder is a personal expense-tracking app for iOS.

1. Data controller

The controller responsible for processing your data is Ángel Vergara, the App's developer.

For any privacy-related questions, contact: rudder.support@gmail.com

2. What data we process

We process only the data needed for the App to work. Specifically:

Account data: your email address. If you sign up with email and password, the password is handled in encrypted form by our authentication provider and is never accessible to us. If you sign in with "Sign in with Google" or "Sign in with Apple", we receive only the account identifier and the associated email address.
Financial data you enter: transactions (amount, date, category, description, currency), recurring expenses and subscriptions, budgets, and custom categories. You create this data manually or by importing files.
Imported files: when you import a statement in CSV or PDF format, the App reads and processes its contents on your device to extract the transactions. Only the resulting transactions you confirm are saved; the original file is not uploaded to our servers.
Minimal technical data: App preferences (such as default currency or sign-in method) stored locally on your device.

We do not collect location, contacts, photos, or advertising identifiers.

3. Purpose and legal basis

We process your data to provide the App's service: to create and maintain your account, to store and sync your financial data across your devices, and to let you access it securely. The legal basis is the performance of the contract you enter into when using the App (Art. 6(1)(b) GDPR).

We do not use your data for advertising, we do not sell it, and we do not track you across other apps or websites.

4. Biometric authentication (Face ID)

You can lock the App with Face ID. Biometric data is handled entirely by Apple's operating system and never leaves your device nor is it accessible to us.

5. Providers and third parties

To provide the service we rely on the following providers, acting as processors or service providers:

Supabase: hosting of the database and authentication system. Stores your account and financial data in encrypted form, isolated per user.
Google (Google Sign-In): only if you choose to sign in with your Google account, to verify your identity.
Apple (Sign in with Apple): only if you choose to sign in with your Apple ID.
Exchange-rate services (Frankfurter / open.er-api.com): to convert currencies. Only currency codes (e.g., EUR or USD) are sent to them; no personal or financial data of yours is ever sent.

6. Data retention

We keep your data for as long as you maintain an active account. When you delete your account, your associated financial data is deleted from our servers.

7. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability at any time. Many of these you can exercise directly in the App (editing or deleting transactions, or deleting your account). For the rest, or for any complaint, write to us at rudder.support@gmail.com.

If you reside in the European Economic Area, you also have the right to lodge a complaint with your supervisory authority. As the developer is based in Spain, the competent authority is the Spanish Data Protection Agency (www.aepd.es).

8. Children

The App is not directed to children under 16, and we do not knowingly collect data from children under that age.

9. Changes to this policy

We may update this policy to reflect changes in the App or in applicable law. We will publish the current version at this same address, indicating the date of last update.

10. Contact

For any questions about this policy or about the processing of your data: rudder.support@gmail.com