Your money stays personal.

Who operates rren

rren is a private, single-owner personal finance application operated by Alrazi Bashir in the United States. It helps its owner track spending, budgets, recurring bills, debts, repayment scenarios, assets and net worth in USD. Contact alrazi@alrazibashir.com about this disclosure or data rights.

What is collected and why

The application stores the owner’s email and authentication information, manually entered financial records and notes, and authorized imports. A connected bank can supply account identifiers, names, masked account numbers, types, balances, transaction descriptions, dates, amounts, categories and pending/posted status. These support financial tracking, reconciliation and planning. Provider access tokens and sync cursors are stored privately to maintain authorized read-only connections.

The current Plaid integration requests Transactions. Selecting additional products in the Plaid dashboard does not mean rren collects those products. rren does not request bank passwords through its own forms and does not initiate payments, debt settlements or transfers through Plaid. Separate investment research is retained independently; this disclosure does not imply access to Schwab Accounts and Trading.

Consent and choice

After email sign-in and authenticator verification, the owner must accept this disclosure and the data policy for each live or Sandbox workspace before financial access. rren records the policy version, purposes, workspace, retention choice, owner and acceptance time. Connecting a bank additionally requires the owner’s authorization in Plaid Link. Sandbox contains test records and is separated from real financial records.

Consent can be withdrawn in Security & privacy by requesting workspace deletion. A bank can also be disconnected while preserving imported history. Disconnecting alone is not erasure. Records can be exported before deletion.

Service providers and disclosures

Vercel hosts the application, Supabase supplies authentication and database storage, and Plaid connects authorized financial institutions. Gmail SMTP delivers owner sign-in emails. These providers process relevant information under their own terms and policies; hosting and financial connections may involve processing in the United States. Plaid’s End User Privacy Policy describes its handling of connected data.

rren does not sell financial data or use it for advertising. The current personal-finance coach uses deterministic calculations, not external language-model processing of bank records. Data may be disclosed when legally required or to investigate a security incident. No analytics or marketing use of financial records is authorized by this consent.

Protection and retention

Financial access requires both owner authentication and a verified authenticator session, enforced in backend routes and database policies/RPCs. Traffic uses HTTPS. The managed database encrypts data at rest, and bank tokens receive additional authenticated encryption. Administrative service credentials remain server-side. These controls reduce risk; no system guarantees absolute security.

The data retention and deletion policy states the selectable history periods, audit limits, revocation process and backup limitations. Private downloads remain under the owner’s control. Questions, correction, export, withdrawal and deletion requests can be made through Security & privacy or alrazi@alrazibashir.com.

Changes

Material changes receive a new policy version and require renewed acceptance before financial access. This application is intended for its adult owner, not public enrollment or children. Plaid Production approval and administrative security attestations are separate from this disclosure.