Privacy Policy

1. Information We Collect

ronfy collects only the information necessary to provide our services:

• Account data: Email address and encrypted password when you create an account.
• Financial data: Transaction data synced from connected services (with your explicit authorization), invoice data imported from Gmail (with your explicit authorization), portfolio positions from brokerage accounts, and any data you enter manually.
• Usage data: Anonymous analytics to improve the app experience.

2. How We Use Your Information

We use your information to:

• Provide and maintain the ronfy service
• Display your financial data within the app
• Calculate net worth, expenses, and income summaries
• Generate personalized financial insights
• Send market signal notifications (if enabled)

3. Data Storage & Security

Your data is stored securely on Supabase (hosted on AWS) with encryption at rest and in transit. We do not sell, share, or transfer your personal or financial data to third parties. API tokens and OAuth credentials are stored encrypted and are only used to fetch your data on your behalf.

4. Third-Party Integrations

ronfy integrates with the following services:

• Wise: Account balances and transaction history. Requires your API token or OAuth authorization. We access only financial data — no personal profile information beyond what is needed for currency conversion.
• Gmail: Invoice import via OAuth. We only read specific invoice emails matching known patterns — we do not access your full inbox.
• Yahoo Finance: Market data (stock prices, indices). No personal data is sent to Yahoo.
• Akahu (NZ): Bank account balances and transactions via OAuth. Only accounts you explicitly authorize are accessed. Read-only.
• Plaid (EU/US): Bank account balances and transactions via secure token exchange. Only accounts you explicitly authorize are accessed. Read-only.
• Interactive Brokers (IBKR): Portfolio positions and transaction history via API. Read-only access to investment data.
• Binance: Cryptocurrency balances via API. Read-only access.

For all integrations, you can revoke access at any time from within the app. When you disconnect a service, we stop fetching new data from that provider.

5. User-Generated Content (Comments)

When you sign in and comment on a News article, we store the comment text, your chosen public username, the article it belongs to, and the time it was posted, linked to your account. Comments and your username are publicly visible. You can delete your own comments at any time; deleting your account permanently removes your comments, username, reports, and blocks. Reported comments are hidden automatically pending review (within 24 hours). You can block other users so their comments are hidden from your view.

6. Your Rights

You can at any time:

• Request a copy of your data
• Request deletion of your account and all associated data
• Revoke access to any connected integration

To exercise these rights, contact us at contact@ronfy.app.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

8. Cookies & Analytics

On this website we use Google Analytics 4 to understand aggregate, anonymous usage (page views, likes, comments). Analytics and advertising storage are denied by default (Google Consent Mode v2) until you accept. We never send personal identifiers to Google.

You can change your choice anytime: Cookie preferences.

9. Contact

If you have questions about this Privacy Policy, contact us at contact@ronfy.app.