Legal

PRIVACY POLICY

Last updated: June 22, 2026

This Privacy Policy explains how REYES ("we", "us") collects, uses, and protects your information when you use our website and app. By using REYES, you agree to this policy. For details on the controls we have in place, see our Trust & Security page.

1. Information we collect

• Account info: name, email, phone (optional), and authentication identifiers.
• Profile data you enter: household, income, taxes, debts, goals, vehicles, properties, and similar information you choose to add.
• Linked accounts: if you connect a bank or credit account, we receive account metadata, balances, and transactions through our aggregator.
• Documents you upload: tax forms, IDs, statements, and receipts you store in your Vault.
• Usage data: anonymous, aggregate events about how the app is used (page views, feature usage, errors) — only if you have not opted out.
• Device data: IP address, browser, OS, and timestamps needed for security and fraud prevention.

2. How we use it

• To operate and improve REYES features (refund finder, credit tools, privacy sweep, Captain, etc.).
• To personalize recommendations and surface money-back opportunities for you.
• To send transactional emails (sign-in, receipts, alerts) and — only if you opt in — product updates.
• To detect abuse, prevent fraud, and meet our legal obligations.

3. We do not sell your data

REYES does not sell personal information and does not share it with advertisers. We use first-party, privacy-respecting analytics. You can disable analytics in Privacy settings.

4. Who we share with

• Subprocessors we rely on to run the service: managed cloud hosting, authentication, email delivery, payment processing, and bank-account aggregation. Each is bound by a data processing agreement.
• Law enforcement only when we are legally required to respond.
• Successor entities in the event of a merger or acquisition; you will be notified.

5. Storage and security

Data is encrypted in transit (TLS) and at rest. Sensitive fields like SSN and account numbers are stored with additional protection and revealed only on confirmed actions. See Trust & Security for current controls.

6. Your rights

• Access, export, or correct your data from Settings.
• Delete your account at any time — initiates a 30-day deletion window.
• Opt out of analytics from Privacy settings.
• Residents of California, the EEA, and the UK have additional rights (CCPA / GDPR). Contact us to exercise them.

7. Retention

We keep your data while your account is active. After account deletion, personal data is removed within 30 days, except records we are legally required to retain (e.g. tax and payment records).

8. Children

REYES is not intended for users under 18. We do not knowingly collect data from children.

9. Changes

We will post material changes here and, where required, notify you by email.

10. Contact

Questions? Email privacy@reyes.app.