Written to be read, not survived.

The short version

Reccurra keeps a record of what you spend so it can tell you about it. That record lives in your account and is not shared with anyone, sold to anyone, or used to build a profile of you. Two outside services see parts of it in order to do a job you asked for. You can take all of it with you, or delete all of it, at any time, without asking anyone.

The one thing people usually assume and should not: this is not end-to-end encrypted. Someone with administrative access to the database could read your records.

What is stored

Only what you or your bank’s emails put there: subscriptions, purchases, the names you give your accounts, budgets, settings, and your email address, because it is how you sign in. Never a full card number, and never anything that could be used to make a payment.

Not stored: bank login details, payment credentials of any kind, location, contacts, advertising identifiers, device fingerprints, or analytics of how you use the app. Your password is never stored — sign-in is handled by Supabase Auth, which keeps a one-way hash.

Who can see your data

You. Every record is tied to your account and the database enforces that in the storage layer itself, not merely in the app. Two service providers see the parts they process:

And, honestly: an administrator of this project. The server has to be able to total your spending while your phone is switched off in order to warn you about a budget. Nobody reads your records as a matter of course, and there is no tooling to browse them, but you are entitled to know the possibility exists.

What you can do

Take it with you as CSV, a spreadsheet, or complete JSON that can be read back in. Correct any field. Delete any record, or the whole account, from Settings — immediate and permanent, so export first. Object or ask at the address below.

Children

Reccurra is not intended for anyone under 16 and is not directed at children.