Privacy Policy

Last updated: 28 April 2026

Rekod is built by Deploid ("we", "us", "our"). We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

• Email address — when you join the waitlist via our landing page.
• Expense data — the text you type to log expenses. This is processed on-device and stored locally on your phone. If you enable Cloud Backup, an encrypted copy is stored on our servers.
• Device info — basic telemetry (OS version, app version, crash logs) to help us fix bugs. No advertising identifiers.
• Photos (optional) — if you attach a screenshot when submitting a support ticket via the Help Centre. Photos are uploaded only when you explicitly choose to attach them and are used solely for support purposes.
• Usage analytics — we collect anonymised interaction data such as screens viewed, features used (e.g. expense logging, savings goals, AI categorisation), onboarding progress, and app lifecycle events. This data is linked to your account if you are signed in.

2. How We Use Your Data

• To provide and improve the Rekod app experience.
• To process your natural-language expense entries using AI. The text is sent to the AI model for categorisation and returned — we do not store the raw text on external servers beyond the request lifecycle.
• To understand how features are used, identify bugs, and improve app stability through product analytics.
• To personalise your experience (e.g. rolling out new features gradually).
• To send you product updates if you joined the waitlist. You can unsubscribe at any time.

3. Your Data Stays on Your Device

Your expense data lives on your device. We cannot see your expenses unless you explicitly enable Cloud Backup, and even then the data is encrypted before it leaves your phone. We do not have access to your encryption key.

4. Cloud Backup

If you enable Cloud Backup, your data is encrypted on-device before being uploaded. Backups are stored on Supabase-hosted infrastructure in Southeast Asia. You can delete your backup at any time from the app settings.

5. Third-Party Services

• Groq — AI categorisation of expenses using Groq's Llama model. Your expense text is sent to Groq's API for processing and is not retained beyond the request. Subject to Groq's privacy policy.
• Supabase — Cloud Backup storage and authentication.
• PostHog — Product analytics (including autocapture of screen views and taps), error tracking, and feature flags. Usage data and device info are sent to PostHog's US-hosted servers and linked to your account when you are signed in. Subject to PostHog's privacy policy.
• Formspree — Waitlist form submissions on this website.

6. Data Retention

Local data stays on your device until you delete the app or clear app data. Cloud Backups are retained until you delete them. Waitlist emails are retained until you unsubscribe or request deletion.

7. Your Rights

You can request a copy of your data, ask us to delete it, or withdraw consent at any time by emailing us at hello@deploid.dev. Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to access and correct your personal data.

8. Children

Rekod is not directed at children under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email.

10. Contact

Questions? Reach us at hello@deploid.dev.