Privacy Policy
Last updated: October 2026
Reign is a household expense tracking app. This privacy policy explains how we collect, use, and protect your personal data when you use our service — and what we will never do with it: we will never sell your financial data.
Who's Behind Reign
Reign is a product of NullPointer d.o.o., a small Croatian company registered at Rudera Boskovica 2, 51500 Krk, Croatia. NullPointer d.o.o. is the legal entity responsible for your data — the data controller under GDPR Article 4. If you have a question about your data or want to exercise any of the rights described below, reach out to us at [email protected] and we'll respond personally.
Data We Collect
We collect the following information to provide our service: email address, display name, receipt images (sent to Anthropic for text extraction), transaction data (amounts, merchants, dates, categories), OCR-extracted text from receipts, and wallet metadata (wallet names, currencies, balances). When you invite someone to a shared space, we share their email address with Resend to deliver the invitation. When you forward a receipt to your space's Reign email address, Resend receives the email for us, and we fetch its sender, subject, message, and attachments from Resend to find and read the receipt. Resend also sends our account emails to your email address: sign-in and password emails, and the email that says your data export is ready or could not be prepared. When you ask us to delete your account, Resend sends us a notice with your email address and account ID. When the app encounters an error or slow response, we automatically send technical information to Sentry — our error tracking service — so we can diagnose crashes and improve reliability. This includes browser or app version, the path within the app where the error occurred, and details about the error itself. We disable default personal-data attachment and scrub sensitive details before sending reports. On the native iOS and Android apps, you can choose to allow push notifications. We store the device token your phone provides and use Apple's Push Notification service or Google's Firebase Cloud Messaging to deliver notifications. These providers receive the device token and notification content to deliver the message. You can manage your choices in Notifications in Settings and your phone's settings.
How We Use Your Data
Your data is used solely for: personal expense tracking, receipt OCR processing to extract transaction details, shared household finance management within spaces you create or join, and subscription management.
Legal Basis for Processing
When we process your personal data we rely on one of the following legal bases, as required by GDPR. Contractual necessity: we need the data to provide the service you signed up for — for example, storing your transactions or scanning your receipts. Legitimate interests: we need the data to keep Reign secure, prevent fraud, and improve the product, in ways that don't override your rights. Legal obligations: some data we have to keep to comply with tax, accounting, or regulatory requirements. Consent: where we ask you to explicitly opt in, such as when connecting a third-party service, you can withdraw your consent at any time.
Third-Party Services
We use the following third-party services to operate Reign: Supabase for database hosting, authentication and data storage; Railway for application hosting; Stripe for payment processing on the web; RevenueCat for managing Plus subscriptions in the iOS and Android apps; Anthropic for receipt scanning and optional import assistance; Resend for sending invite and account emails and receiving the receipts you forward by email; Sentry for error tracking and performance monitoring; Featurebase for in-app support conversations and feature feedback; Apple's Push Notification service and Google's Firebase Cloud Messaging for native push delivery; and Plausible Analytics for privacy- respecting website analytics across our marketing site and web app. What each service receives, where it processes your data, and the safeguards on every transfer are described in the Where Your Data Lives section below. Your data is never sold to third parties.
Where Your Data Lives
We maintain a transfer impact assessment for the services we have assessed. Most of your data never leaves the European Union: your financial data lives in Frankfurt, support conversations stay in the EEA, and website analytics stay in the EU. Some services process data in the United States, including payments, subscription management, error tracking, receipt scanning, and email (invites, account emails, and receipts by email). For each of these we rely on the European Commission's Standard Contractual Clauses and, where available, verified data-protection certifications, and we review every transfer at least once a year and whenever a service changes how it handles data.
Supabase: where your data is stored
Your financial data, receipts, and account information are stored with Supabase in the European Union (Frankfurt, Germany). Supabase is a US-based company, but your data stays on European servers and is protected by European data-protection agreements. We review this arrangement at least once a year.
Featurebase: support and feedback
When you message support or share feedback, the conversation is handled by Featurebase, a European company. Your name, email, plan tier, and the messages you choose to send are stored in the European Economic Area. Your financial data is never shared with Featurebase.
Plausible: website analytics
Our analytics run on Plausible, hosted in the European Union. It records page visits, referral sources, browser and operating-system information, approximate location and the custom events we configure. It does not use analytics cookies or track visitors across websites. Plausible uses the IP address and browser information to derive location and a daily visitor identifier; it does not store raw IP addresses or raw User-Agent strings. Its salt changes each day, so the identifier does not follow you across days. See Plausible's data policy for its current practices.
Stripe: payment processing
When you subscribe to Reign Plus on the web, we share the minimum needed with Stripe to process your payment: your email and a payment token, never your actual card number. Stripe processes payments in the United States, is certified under the EU-US Data Privacy Framework, and holds PCI DSS Level 1, the strictest payment-security certification. Your card details are handled entirely by Stripe and never touch our servers.
RevenueCat: Plus subscriptions in the iOS and Android apps
If you subscribe to Plus through the iOS or Android app, RevenueCat manages your subscription. It receives purchase records tied to your app user ID, never your card details, which stay with Apple or Google. RevenueCat processes this data in the United States under the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.
Anthropic: receipt reading
When you snap a receipt or forward one by email, the photo, PDF, or email is sent to Anthropic's Claude AI to read and extract the details: merchant, amount, date, and items. It is processed in the United States. Anthropic's commercial-data policy says API inputs and outputs are not used for model training by default. Its published API retention policy describes deletion within 30 days under standard terms, with exceptions for different agreements, certain services, safety enforcement and legal requirements. That standard policy is not a promise of zero retention. We review this transfer regularly and are working to minimise the data each photo contains before it is sent.
Anthropic: import assistance (optional)
When you import a spreadsheet of past transactions, you can ask Anthropic's Claude AI to suggest categories. "Suggest with AI", on the import's Categories page, sends the names of the merchants your own history doesn't already cover and your space's category names. After that press it can also suggest icons for the categories the import creates. Amounts, dates and the rest of your file are never sent, and suggestions from your own history always come first. Nothing goes to AI until you press the button. Each press is your choice for that import, and we record when you last pressed it; to stop using it, don't press it. In older versions of the app, an "AI suggestions" switch on the import screen turns this on and off instead, and we record when you turn it on or off. A press also turns that switch on in older versions of the app, which then ask whenever their Categories step opens; turn it off there to stop them.
When Reign doesn't recognise a file's columns, "Read it with AI" asks the same AI which column is which. It sends the column names and up to ten rows of the file (the first five, and rows that show each kind of row the file has), with the list of Reign's own fields. Every digit in the rows is replaced by # before anything leaves your device, so a date or an amount keeps its shape but not its value; words, such as a shop's name in a description, go as written. In a column name, a run of four or more digits is replaced the same way. You can see exactly what is sent before you press. Nothing from the columns or rows is kept: we record that you asked, how many columns and rows were sent, whether it worked, and a code that identifies the file's layout. Reading is free and limited to 10 readings in any 24 hours; one that fails doesn't count. You can always set the columns yourself instead.
Both use Anthropic's API under the same published commercial-data and retention policies described for receipt reading above.
Sentry: keeping Reign reliable
When the app hits an error, we automatically send technical details to Sentry so we can find and fix the problem: browser or app information, the page you were on, and details about the error. We scrub financial information before it leaves the app, and we've cut what we send to the minimum needed to diagnose issues. Sentry processes this data in the United States under European data-protection agreements.
Resend: invite emails, account emails, and receipts by email
When you invite someone to a shared space, Resend delivers the invitation email. For an invitation, the only information shared is the invitee's email address, your display name, and the space name. When you forward a receipt to your space's Reign email address, Resend receives the email for us, and we fetch its sender, subject, message, and attachments from Resend to read the receipt. Resend also sends your sign-in and password emails, and the email that says your data export is ready or could not be prepared, to your email address. When you ask us to delete your account, Resend sends us a notice with your email address and account ID. Resend processes all of this in the United States under the European Commission's Standard Contractual Clauses, and we're evaluating European alternatives to keep email delivery closer to home.
The full transfer impact assessment behind this section is available on request. Write to us at [email protected].
Data Retention
Your data is retained for as long as your account is active. You can request account deletion from Settings > Profile after any active Plus subscription has ended. Once you request deletion, your personal data is permanently purged within 30 days. In shared spaces, transactions you logged on other members' wallets and liabilities assigned to you are also deleted. Your identity is removed from any remaining shared records. If you enable Delete photos after reading in Profile, Reign deletes the stored photo when the receipt is saved. The store, total and items remain in the expense. Deleted data cannot be recovered.
Your Rights
Under the GDPR and similar data protection laws, you have the right to access the data we hold about you (Art. 15), correct inaccurate data (Art. 16), request deletion or the right to be forgotten (Art. 17), restrict processing (Art. 18), receive your data in a machine-readable format and port it elsewhere (Art. 20), object to processing (Art. 21), request a human to review any decisions made solely by automated means that significantly affect you (Art. 22), and withdraw any consent you have given at any time. Inside Reign you can already exercise several of these rights directly: request a ZIP archive of your recorded data as CSV files, with a JSON manifest and the receipt images still available, request complete account deletion, and manage your privacy preferences in Settings. You also have the right to lodge a complaint with a data-protection supervisory authority. NullPointer d.o.o. is registered in Croatia, so Croatia's national authority — AZOP (Agencija za zaštitu osobnih podataka, azop.hr) — is the lead supervisor for our processing; if you live elsewhere in the EEA, you can also contact your own country's data-protection authority. For any other rights request, contact us at [email protected].
What You Control
Beyond your legal rights, here's what you can manage directly in the Reign app today: delete your account and all associated data from Settings > Profile, choose whether receipt photos are deleted when their expense is saved using Delete photos after reading in Settings > Profile, and choose whether Anthropic Claude helps with a spreadsheet import: nothing is sent unless you press "Suggest with AI" or "Read it with AI" on the import screen (Settings > Import); older versions of the app keep the "AI suggestions" switch there. These are the controls built into Reign right now. When we add more, we'll describe them here.
Security
All data is encrypted in transit using TLS 1.2 or higher, as enforced by our infrastructure providers, and encrypted at rest. You sign in through Supabase authentication; your session is stored on your device and sent to our servers only as a signed authorization token. We do not use advertising cookies or behavioural tracking cookies; the third-party services we rely on are listed in the Third-Party Services section above.
Cookies
Reign does not use advertising or behavioural tracking cookies. The web app keeps your sign-in session in your browser's local storage, not in cookies, and uses a small number of functional cookies, such as remembering your theme preference. Some of the third-party services we use (for example Stripe for payment processing) may set their own session-scoped cookies when their functionality is invoked; see the Third-Party Services section for the full list.
Children's Privacy
Reign is designed for adults managing household finances. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us at [email protected] and we'll promptly delete their data.
GDPR & CCPA Compliance
Reign is designed to comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You may exercise your data subject rights — including access, correction, deletion, and portability — through the Settings page or by contacting us.
Contact
For privacy inquiries or to exercise your data rights, contact us at [email protected].