RatePocketRatePocket / Privacy Policy
Privacy Policy
Last updated 31 October 2026 · Applies to the RatePocket app for iPhone and Android (com.tradali.calculator) and this website.
The short version
- No account needed. Without signing in, your budget and entries stay on your phone.
- No bank connection. RatePocket never asks for bank logins. You decide what you record.
- Cloud only when you choose it. Backup, sync and groups are stored in our database in the EU (Paris).
- We don't sell your data and don't use your entries to target ads.
- You're in control. Clear this device, clear your cloud backup, leave or delete a group, or delete your account. See Account & data deletion.
1. Who we are
RatePocket is made and published by an individual developer working under the name Tradali. Tradali is the controller of the personal data described here. Contact: support.tradali@gmail.com. Brand site: tradali.com.
2. What we process
2.1 On your phone (no account)
Your budget, periods, categories, income sources, expenses and income (amounts, currencies, dates, titles, notes), preferences, and an install identifier used for receipt-scan limits. This stays on your device until you turn on backup or use a feature that sends data (described below).
2.2 Your account
Signing in is optional. You can sign in with Apple, Google or email and password (with a one-time code sent by email). We receive your account ID and email address, and with Apple you can choose to hide your email. We use them to sign you in, keep your backup and groups linked to you, and handle purchases and support.
2.3 Cloud backup & sync
With a Personal or Pro+ plan and signed in, your personal entries, budget periods and preferences are stored in our database so you can restore and sync them on your other devices.
2.4 Groups (Family and Split)
When you create or join a group we store: the group's name, style (Family or Split), currency and time zone; members, roles (Owner, Admin, Member) and display names; invitations (the invited email address and status), invite links and join requests; the group's shared entries, budget, categories and upcoming bills; for Family groups, shared savings; for Split groups, who paid, each person's share, payments between members and trips; and an activity log (who added or changed what). Every member of a group can see that group's shared data, according to their role. Your Personal space is never shared with a group.
2.5 AI receipt scan
Scanning is optional. The app asks for your permission the first time you scan, and remembers your answer for your account on that phone; you can turn it off at any time in Settings > Data & privacy, and the app then asks again before the next scan. The receipt image goes through our server function to Claude, Anthropic's AI service, which reads the shop, date, currency and items. If Claude can't read it (for example it has no credit left, is busy or fails), the same image is sent to ChatGPT, OpenAI's AI service, instead; in that case both services receive it. You review the result before anything is saved, and the review shows which service read it. Older versions of the app send the image to ChatGPT (OpenAI) only and ask before every scan.
- RatePocket never saves receipt images or screenshots, not in our database and not in any file storage. The image exists only for the moment it takes to read it.
- We keep a scan counter per account (or per install, if you're not signed in) to apply your plan's limit: 2 trial scans on Free, 35 a month with Personal, 100 a month with Pro+.
- Neither Anthropic nor OpenAI uses the image to train its models. Under their own API policies, each normally deletes request data within 30 days; it can be kept longer only if it is flagged for a policy violation or the law requires it.
2.6 Purchases
Subscriptions and one-off purchases are made through the App Store (Apple) or Google Play. RevenueCat tells the app which plan you have. We receive purchase status and product, never your card details.
2.7 Ads (Free plan only)
On the Free plan the app shows ads from Google AdMob. Personal and Pro+ have no ads. Google may process device and advertising identifiers, approximate location from your IP address and ad interactions. In the EEA, UK and Switzerland the app asks for your consent through Google's consent message first, and you can change your choice later in the app's ad privacy settings. On iPhone, the app asks for permission before using the advertising identifier (App Tracking Transparency).
2.8 App integrity (Android)
On Android, some sensitive actions are checked with Google's Play Integrity API, which confirms the request comes from the genuine app on a real device.
2.9 Notifications
If you allow notifications, we store your device's push token so we can tell you about group activity (for example, a new shared expense or a payment reminder). Reminders for your own upcoming bills and paydays are scheduled on your phone and don't use the push token. Push messages are delivered through Expo and Apple or Google's push services.
2.10 Emails
We send sign-in codes, group invitations and, when a group is deleted, a copy of that group's data to its members. These emails are sent through Resend.
2.11 Exchange rates
The app downloads currency rates from exchangerate.fun, or, if it's unavailable, from open.er-api.com or the free currency-api (currency-api.pages.dev or jsDelivr). This is a normal web request from your phone. It doesn't include your entries.
2.12 Support
If you email us, we process your message and anything you include in it.
3. Why we use data, and the legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Running the app, your account, backup, sync and groups you choose to use | Contract: providing the service you asked for |
| Receipt scan when you start one | Contract: providing the feature you requested |
| Purchases and plan status | Contract |
| Personalized ads (Free plan) and the advertising identifier | Consent, which you can withdraw at any time |
| Non-personalized ads (Free plan) | Legitimate interest in funding the free plan |
| Push notifications | Consent through your phone's notification permission |
| Security, abuse prevention, app integrity checks and scan limits | Legitimate interest in protecting the service and its users |
| Keeping records we must keep (for example, tax or legal requests) | Legal obligation |
We don't sell personal data, we don't share it for cross-context advertising, and we don't make decisions with legal effects about you by automated means.
4. Who helps us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, server functions (backup, groups, invites, scans) | EU (Paris, France) |
| Anthropic (Claude) | Reading receipt images you choose to scan | United States |
| OpenAI (ChatGPT) | Reading receipt images you choose to scan, when Claude is unavailable | United States |
| Apple | Sign in with Apple, App Store purchases, push delivery | Global |
| Google sign-in, Google Play purchases, AdMob ads and consent, Play Integrity, push delivery | Global | |
| RevenueCat | Plan and purchase status | United States |
| Expo | Sending push notifications | United States |
| Resend | Sending emails (codes, invites, group copies) | United States |
| Cloudflare | Hosting and protecting this website | Global |
| exchangerate.fun, open.er-api.com, currency-api (jsDelivr) | Currency rates (no personal entries) | Global |
5. International transfers
Our database is in the EU. Some providers above process data outside the EEA, mainly in the United States. Where that happens, we rely on the safeguards those providers offer under GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep data
| Data | Kept until |
|---|---|
| Data on your phone | You clear this device, clear the app's storage or uninstall |
| Cloud backup | You clear your cloud backup or delete your account |
| Your account | You delete it (in the app, or by email request) |
| A group and all its shared data | The Owner deletes the group. Members first receive an email copy. |
| Your name in a group's history after you leave or are removed | Stays with the entries you added, so the group's records stay accurate. If you delete your account, it's replaced with "Former member". |
| Receipt images | Never saved by RatePocket. Only the retention of each AI service that received it applies (Anthropic and OpenAI: normally up to 30 days). |
| Scan counters | A count of scans per account or install: per month on a plan, in total for the 2 free trial scans. Kept so plan limits can't be reset, including after account deletion. They hold no receipt content. |
| Push token | Replaced when it changes. Deleted with your account. |
| Support emails | As long as needed to handle your request |
Deleted data can stay in our database provider's routine backups for a short time before those backups are overwritten.
7. Your rights (GDPR and similar laws)
Wherever you live, you can ask us to:
- Access: get a copy of the personal data we hold about you.
- Correct: fix inaccurate data. Most of it you can edit directly in the app.
- Erase: delete your data. You can do it yourself in the app, or ask us (see Account & data deletion).
- Port: receive your data in a reusable format. The app exports PDF and CSV, and we can send your cloud data on request.
- Restrict or object: limit or object to processing based on legitimate interest.
- Withdraw consent at any time, for example for personalized ads or notifications, without affecting earlier processing.
- Complain to your local data protection authority.
Email support.tradali@gmail.com from the address on your account, or tell us which sign-in you use. We may ask you to confirm the request comes from you, and we reply within one month. Requests are free.
8. Your controls in the app
- Sign out in Settings. Your local records stay on this phone.
- Clear this device, clear cloud backup, delete account: Settings → Data & privacy → Clear data & more.
- Leave a group: in the group's Members screen. Delete a group (Owner only): in the group's settings.
- Ads: change your consent in the app's ad privacy settings, or reset or limit the advertising ID in your phone's settings.
- Notifications: turn them off in the app or in your phone's settings.
- Subscriptions: manage or cancel in your App Store or Google Play account. Deleting your account doesn't cancel a subscription.
9. Security
Data moves over encrypted connections (HTTPS). Access to cloud data is limited to your account and, for groups, to that group's members by database rules on our server. No system is perfect: protect your phone and sign-in, and only invite people you trust to a group.
10. Children
RatePocket isn't meant for children. Don't use it if you're under 13, or under the age your country requires to agree to data processing without a parent (up to 16 in some EU countries). If you think a child has given us personal data, contact us and we'll delete it.
11. This website
This site doesn't use analytics, advertising cookies or trackers, and it loads its fonts from our own server. It's hosted by Cloudflare, which processes technical data such as IP addresses to deliver and protect the site and may set strictly necessary security cookies.
12. Changes and contact
We'll update this policy when the app or the law changes, and change the date at the top. Questions or requests: support.tradali@gmail.com.