Draft for review — do not publish before filling in the highlighted fields and having an attorney review it.
Privacy Policy
Last updated: September 19, 2026
This policy explains what data REGRA Finance collects, how it is used and what your rights are. The data controller is [LEGAL_COMPANY] ([LEGAL_STATE], USA). Contact: [LEGAL_EMAIL].
1. What we collect
- Sign-up: name, email, language and password (stored only with one-way encryption — no one can read it).
- Data you enter: entries, accounts, cards, balances, exchange rates and goals.
- Subscription: your PayPal subscription ID and status, payment amounts and dates. We never receive or store your card number.
- Referrals: who referred whom, an anonymous count of visits to referral links, and the PayPal email used to pay commissions.
- Technical data: IP address and time of sign-in attempts, used for security and to limit password attempts.
2. How we use it
To run the app, bill subscriptions, calculate and pay commissions, protect accounts, send necessary emails (such as password resets and referral notices) and, if enabled, measure advertising results.
3. Who we share it with
- PayPal — processes subscription and commission payments.
- Hostinger — hosts the website and database.
- Meta (Pixel) — if enabled and you accept it in the cookie notice, receives browsing and sign-up events to measure ads. We never send your financial data.
We do not sell your data.
4. Cookies
rf.sid— keeps you signed in (up to 30 days).rf_ref— remembers who referred you (up to 60 days).rf_lang— remembers your language.regra_consent(browser storage) — keeps your answer to the cookie notice, for 6 months._fbp— Meta Pixel, only if it is enabled and you accept advertising in the cookie notice.
5. How long we keep it
For as long as your account exists. When you delete your account, your financial data is erased immediately and your profile is anonymized; we keep only the minimum needed for payment and commission records for as long as the law requires.
6. Your rights
You can view and correct your data in the app and delete your account under My account. To request a copy of your data or ask questions, write to [LEGAL_EMAIL]. Depending on where you live — for example, Brazil (LGPD) or California (CCPA) — you may have additional rights, which we will honor through the same email.
7. Security
Always-encrypted connections (https), one-way encrypted passwords, each account isolated from others and limits on sign-in attempts. No system is flawless; if something happens to your data, we will let you know.
8. Minors
The app is not intended for anyone under 18.
9. Changes to this policy
We will notify you by email or in the app before material changes.