Last updated: 12 November 2026
RONAR is operated by the publisher of ronar.ai. This policy explains what we collect, why, where it lives, and how to get it out (or wipe it) when you ask. It applies to the RONAR iPhone app and the web app at app.ronar.ai. If a line conflicts with applicable law in your jurisdiction, that law wins.
Account. Email + a Supabase-managed password hash. We never see your raw password. If you sign in with Apple, Google or Facebook instead, we receive the name and email address that service shares with us.
Profile. Name, date of birth, locale, currency, theme, time-zone, and any optional fields you enter during onboarding (income, goals, weight target).
Money. Transactions you log manually or import from a CSV statement. Connecting a bank is coming soon: once you connect one through an authorised PSD2 provider, its transactions and balances sync automatically.
Net worth. Any manual assets / liabilities you enter (real estate, crypto, loans), plus daily aggregated balance snapshots from any bank you connect.
Health. If you connect WHOOP, Oura, Fitbit or Strava (each opt-in), we receive the metrics you authorize, such as sleep, steps, recovery and workouts. Apple Health on iPhone, or Health Connect on Android, is read on your device, only with your permission, to show last night's sleep and today's steps and active energy, and on iPhone to check off a sleep habit. Those readings are not uploaded to our servers: we store only the date you connected and the days a habit was checked off.
Habits and tasks. The habits and tasks you create, the days you check off a habit, and the date, time and reminder you give a task. When you add a task to your calendar, your phone's calendar editor opens, and the task goes to the calendar you pick there and from there to that calendar's provider.
Meds & supplements. The list of items you track and which doses you marked taken / skipped.
Sleep. Bedtime / wake reflections you log and pre-bed wind-down session history.
Diet. Logged meals + photos (if you use the photo recognition tab), water intake, weight check-ins.
Daniel voice. Pre-synthesized MP3s of your daily motivation message and any proactive nudge (e.g. "You crossed a net-worth milestone") are stored in Supabase Storage so playback is instant. The audio references you by name and may reference figures derived from your data.
Push subscription. If you allow notifications in your browser, its Web Push endpoint + crypto keys are stored so we can deliver alerts.
Device. User-agent string + the page you submitted feedback from (for triage only).
Location. When you create a Smart Zone, its approximate coordinates (rounded to about 110 m) are stored on our server, in your profile, solely to tell which zone a transaction happened in. They are never sold or shared. Your device also works out the time-of-day theme locally.
We don't sell your data. We don't run third-party ads or behavioral trackers inside the app. We don't share your financial, health, or diet data with anyone for marketing. We don't profile you across other websites. We don't read your inbox, your calendar, or your contacts.
Contract. Most processing (storing your transactions, syncing your bank, generating your insights) is necessary to perform the service you signed up for.
Consent. Optional connections (bank, health, push notifications) and any audio recording playback that uses your name require your explicit toggle. You can revoke from Settings → Connect at any time. The AI features (OpenAI and ElevenLabs) need your permission too: until you allow them, nothing of yours is sent to either, from the app or from our server. Your answer is kept with your account, holds on every device and can be changed in Settings → AI features.
Legitimate interest. Aggregate, de-identified product analytics (which features are used, where errors happen). We never sell or share these and you can opt out by emailing hello@ronar.ai.
All structured data is stored in Supabase (Postgres) in the EU-West region under Row Level Security: your rows can only be read by your own account. Bank connection tokens are encrypted at rest with AES-256-GCM (once you connect a bank; the key is held only in our edge function secrets, never in the database). Voice MP3s live in a private Supabase Storage bucket and are served via expiring signed URLs (one-year TTL) tied to your account, not via public links. Everything is encrypted in transit (TLS 1.2+) and at rest (Supabase + AWS disk encryption). Web push delivery hits the user's browser vendor (Apple, Google, Mozilla) directly; we don't see the payload after sending it.
RONAR uses the following data processors. Each has its own privacy practices linked below.
Some subprocessors (OpenAI, ElevenLabs, Stripe, Vercel CDN edges) operate from the United States. EU-to-US transfers rely on each provider's Standard Contractual Clauses and, where applicable, Data Privacy Framework certification.
We keep your data while your account is active. If you delete the account, the auth row + every linked table (transactions, profile, decisions, weekly_reports, health_snapshots, bank_connections, net_worth_snapshots, manual_assets, manual_liabilities, med_items, med_events, proactive_nudges, morning_reflections, wind_down_messages, diet_logs, daniel_motivations, push_subscriptions, and every other user-keyed table) is removed within 30 days, along with all voice MP3s under your user ID in storage. Bug-report and feedback rows are anonymized (your user ID is nulled) rather than deleted, so we can still triage them. Supabase nightly database backups expire after 7 days under the Pro tier; old backups containing your data therefore age out within that window.
Access & portability. Settings → Data → Export → Download my complete data. Returns a JSON document with every row in every table you own (cryptographic secrets redacted).
Erasure. Settings → Delete account. Or email hello@ronar.ai if you can't sign in.
Rectification. Edit your profile fields in-app at any time. For corrections we can't surface (e.g. a wrong field in an imported transaction), email us.
Withdraw consent. Settings → Connect → disconnect any provider. Settings → Notifications → turn off push.
Object & restrict. Email us; we'll comply or explain why we can't.
Lodge a complaint. If you're in the EU/EEA, you can complain to your national supervisory authority. In the UK, the ICO. In California, the Attorney General's office.
RONAR is not directed at children under 16, and we don't knowingly collect data from them. If you believe a child has signed up, email us and we'll delete the account immediately.
RONAR uses no first-party cookies. Supabase stores your session token in browser localStorage; your locale preference is also in localStorage. Vercel may use a single load-balancer cookie for routing; it carries no personal data.
When we materially change what we collect or who we share it with, we'll update the "Last updated" date above and notify you in-app on next open. Continued use after notice means you accept the change.
Questions, requests, complaints, or to exercise any of the rights above: hello@ronar.ai. We respond within 30 days (GDPR statutory window).
RONAR is provided as-is. We're a personal finance + life-mastery tool, not a money mover, not a lender, not a regulated investment advisor. See our Terms of Service for the full scope.