RataPrivacy policy
Rata helps family and friends share costs. It is free. It has no ads, and it does not track you. This page tells you which data Rata keeps, where it goes, and how you delete it.
Your groups are locked on your phone
Each group has its own key. The key is only in the invite link and on the devices of the group members. Your phone locks (encrypts) each expense, payment, note and bill photo before it leaves the phone. Our server keeps only the locked data, so it cannot read names, amounts, notes, UPI IDs or photos. Only people with the invite link can read the group.
What leaves your device
| Data | Why | How long |
|---|---|---|
| Locked group data (expenses, payments, notes, bill photos) | Sync between the members of the group | Until the group is deleted |
| Your Google account ID | Sign-in. The server checks your Google sign-in and puts only the account ID in a sign-in cookie. | The cookie ends after 30 days or when you sign out |
| Your Gmail address and name | Google sends them with the sign-in. The server checks them and does not keep them. | Not kept |
| A push token and your member number in a group (app only, when you allow notifications) | Payment reminders. The text of a reminder has no names or amounts. | Until you remove the group or sign out |
| Request logs (IP address, time, address of the request) | Our host, Cloudflare, keeps these to run the service and stop abuse | A few days |
Your name and email stay on your device. The names that you type for group members stay in the locked group data.
The website
The website at rata.fyi is a set of static pages. It sets no cookies and runs no scripts.
What Rata does not do
- Rata does not sell data, and it does not share data for ads.
- Rata has no ads and no tracking or analytics tools.
- Rata does not move money. To pay, it opens your UPI app (for example Google Pay). Rata does not see the payment.
Services that Rata uses
- Cloudflare hosts the app and keeps the locked group data.
- Google gives the sign-in and, in the app, push notifications (Firebase Cloud Messaging).
- The European Central Bank gives the daily currency rates. Rata gets them on its server, so your device does not call the bank.
Delete your data
- Remove a group from the group settings. This deletes it from your device.
- Sign out from your account on the Home screen. This ends the sign-in cookie and deletes the push token.
- Uninstall the app or clear the site data in your browser to delete all data on the device.
- To delete a group from the server, or for any other request, write to hello@rata.fyi. Tell us the request, and we reply.
Children
Rata is not for children under 13.
Changes
When this policy changes, we change the date at the top and add a line to What's new.