Privacy Policy

Recurno ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application.

The data controller for the personal data described here is Recurno, registered in The Netherlands.

You can reach us about anything in this policy at support@recurno.com.

We collect information you voluntarily provide when you create an account, including:

• Email address
• Account preferences and settings
• Subscription information you add to the platform
• Household member information
• Custom categories you create

We use your information to:

• Provide and maintain our service
• Process transactions and send related information
• Send administrative information and updates
• Send the renewal reminders you have enabled
• Respond to your inquiries and support requests
• Monitor and analyze usage trends

Where the GDPR applies, we rely on the following legal bases. Performance of a contract, for everything needed to run the account you signed up for, including billing and renewal reminders. Legitimate interests, for keeping the service secure and understanding how it is used in aggregate. Consent, where we ask for it explicitly, which you can withdraw at any time. Legal obligation, for records we are required to keep, such as invoices.

If you are in the EU, the EEA or the UK, you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, and receive a portable copy of it. Two of those you can exercise yourself, immediately, without asking us:

• Export: Settings gives you a CSV of your subscriptions and a full JSON copy of everything on your account.
• Deletion: Settings deletes your account, the data attached to it, and cancels any active billing in the same step.
• Everything else: write to support@recurno.com and we will answer within 30 days.

We use a small number of processors to run the service. They receive only what their function requires:

• Google Firebase, for authentication and database storage.
• Stripe, for subscription billing. Card details go to Stripe directly and are never stored by us.
• Vercel, for application hosting.
• Zoho, for sending transactional email such as renewal reminders.
• DeepSeek, only if you are on Pro and use an AI feature. In that case the names, costs, billing cycles, categories and household labels of your tracked subscriptions are sent so the model can respond. Your email address and payment details are not.

Our processors operate in the European Union and the United States, so some of your data is transferred outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision, depending on the processor.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is encrypted in transit and at rest using industry-standard security protocols.

We keep your data for as long as your account exists. Deleting your account removes it, and the deletion is immediate rather than queued. Billing records that tax law requires us to keep are retained by Stripe for the statutory period, and we cannot delete those on request.

We do not use advertising or analytics cookies, and we do not track you across other sites. Your browser stores what is needed to keep you signed in, plus a few preferences such as your display currency, language, sound setting and theme. Clearing your browser storage resets those and signs you out.

We do not sell your personal data, and we do not share it with advertisers or data brokers. The subscription price is the entire business model.

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date and will ask for your consent if the changes are material.

If you have questions about this Privacy Policy, please contact us at support@recurno.com. If you are in the EU, the EEA or the UK and you are not satisfied with our answer, you have the right to complain to your local data protection authority.