Your data.
Clear information.

Scope and controller

This preliminary version distinguishes the presentation website from the Ravnu app. It is not an approved privacy policy for a production service.

The legal identity, address and contact details of the data controller are not confirmed in the project materials. These details and, where applicable, the data protection officer's contact details must be included in the final version.

On this website

The website does not require an account or accept payments. Its support form collects your name, email, subject, messages and acceptance of the conditions. Calculator inputs are processed in your browser; the website code does not send them to a server or save them in persistent storage.

Support data is used to reply and retain conversation history. A private session and an email link let you resume the conversation for 30 days. After 2 minutes away, unread replies may be sent by email. Resolved conversations are deleted after 90 days; encrypted backups are retained for 30 days on the VPS. You can contact [email protected] with requests about your data.

No external advertising services or tracking cookies are integrated. Aggregate website counts are described in the statistics section. Fonts and images are served as website files. When you open an external link, that destination's rules apply.

The server delivering the page may process technical request data, such as IP address, date and requested resource. The website is hosted on Cloudflare Pages; support is served separately at api.ravnu.com. The purposes and retention periods of technical logs and the identities of the controllers need to be confirmed for the final policy. See also the page on cookies and storage.

In the app

The app implementation processes account identifiers, registered device information and financial records entered by the user. Goals, transactions and preferences support its organisation features.

The app uses authenticated API access. This does not mean data is processed only on the device or that end-to-end encryption exists. The actual production security measures must be described and verified before launch.

SPARK and providers

When you use SPARK, submitted messages and images may be sent to the configured AI provider. The project currently uses a Groq integration. The financial context preference controls the inclusion of that context, not the sending of the message or image you choose to submit.

The project also includes external market data services and a Stripe payment integration for the app. The final list of providers, their roles, locations, transfers and safeguards must be confirmed. None of these operations is performed by this website's simulator.

Purposes and retention

App data supports account management, records, budgets, goals and requested analyses. The legal basis for each processing activity, what is required or optional, and retention periods or criteria still need to be identified.

No unconfirmed deletion period is stated. The implementation includes account export and deletion mechanisms, but the final policy must clarify their effects on shared data, backups and records retained by providers.

Your rights

Depending on the processing and applicable legal conditions, the GDPR provides rights of access, rectification, erasure, restriction, objection and portability. Where processing relies on consent, it can be withdrawn without affecting the lawfulness of earlier processing.

The final version must provide an effective contact for exercising these rights. You can read the CNPD information and lodge a complaint with the competent supervisory authority.

Before publication

This text needs to be completed and reviewed by the controller and qualified legal support. Missing information cannot be replaced by a general assurance of compliance.

Reference: data protection information obligations — European Commission.