Privacy Policy
Last updated: 8 November 2026
In short: Renoa stores your data on your device. We run no servers, keep no user database, and cannot see your data.
Who we are
Renoa is an iOS app that helps you track subscriptions and save links and IBANs. This policy explains what the app handles and where it goes.
Data stored on your device
The following are saved only in the app's local storage on your iPhone:
- Subscriptions you add or that are detected from your email: service name, amount, currency, billing cycle, renewal date, status
- Links and IBANs you save, including titles and notes you enter
- Your settings: language, display currency, reminder timing, notification preference
- Your Google account name, email address and profile picture, if you connect Gmail
None of this is transmitted to us. Deleting the app removes it from your device.
Statement import. If you use “Find from a statement”, you paste the text of a card statement, a charge SMS or a receipt e-mail into the app. That text is processed only on your iPhone to find recurring charges; it is not stored and is not sent anywhere. Only the subscriptions you choose to add (service, amount, billing cycle, renewal date) are saved on your device.
Gmail access
If you choose to connect your Google account, Renoa requests the read-only Gmail scope (gmail.readonly).
- The app reads message metadata and bodies only to find subscription receipts and renewal notices.
- Reading happens on your device. Email content travels from Google to your iPhone and is not forwarded anywhere else.
- Only the extracted details (service, amount, date) are saved locally. Message contents are never stored.
- We never send your email to our servers, because we operate none.
- You can disconnect at any time in the Profile tab, or revoke access at myaccount.google.com/permissions.
Limited Use disclosure. Renoa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer this data to others, do not use it for advertising, do not use it to build profiles, and no human reads it.
How we protect your data
Because Renoa stores everything on your own device and operates no servers, the protections that matter are the ones on the device and on the connection.
- Encryption in transit. Every network request the app makes uses HTTPS with TLS 1.2 or higher. The app's App Transport Security settings forbid unencrypted connections, so no data can travel in cleartext.
- Encryption at rest. All app data is written to the app's private container on your iPhone, which iOS encrypts with hardware-backed device encryption whenever the device is locked. No other app can read it.
- Access tokens. Your Google OAuth token is held by Apple's Keychain, the operating system's protected credential store, not in ordinary app storage. Renoa holds no password of yours at any time.
- Data minimisation. From each e-mail the app reads, only what the subscription entry needs is kept: the service name, the amount, the renewal date, the sender address and the message id (the last two so repeat scans do not create duplicates). Message bodies, subject lines and attachments are discarded immediately after parsing and are never written to storage.
- No servers, no copies. We operate no backend, no database and no logging service, so there is no copy of your data outside your device for anyone to breach, subpoena or leak. No employee or contractor of ours can access it, because it never reaches us.
- Least privilege. Renoa requests read-only Gmail access and nothing more. It cannot send, modify, label or delete any message. It requests no other Google API.
- Revocation and deletion. You can disconnect your Google account at any time from the Profile tab, which also offers to erase every subscription that came from e-mail. Deleting the app erases all remaining data. Access can also be revoked at myaccount.google.com/permissions.
- Dependency hygiene. Third-party libraries are pinned to audited versions and updated when security fixes are published.
If you believe you have found a security issue in Renoa, please write to [email protected] and we will respond.
Third-party services
Renoa contacts these services directly from your device:
| Service | Purpose | What is sent |
|---|---|---|
| Google (Gmail API) | Detecting subscriptions | Your authentication token |
| RevenueCat | Validating Renoa Pro | Anonymous purchase id, App Store receipt |
| Apple (App Store) | Payment for Renoa Pro | Handled entirely by Apple |
| open.er-api.com | Currency exchange rates | Nothing about you |
RevenueCat's policy: revenuecat.com/privacy
We use no analytics, advertising or tracking SDKs. Renoa does not track you across apps or websites.
Notifications
Renoa schedules local notifications on your device to remind you before a subscription renews. These are generated on your iPhone. No push server is involved and no notification data leaves your device.
Children
Renoa is not directed at children under 13 and we do not knowingly collect their data.
Your rights
Because your data lives only on your device, you control it directly. Delete individual entries in the app, disconnect your Google account, or delete the app to remove everything.
Changes
If this policy changes we will update this page and the date above.
Contact
Questions: [email protected]