What happens to your data

Who is responsible for your data

The controller, in the GDPR's sense, is the company below. It decides what is collected and why, and it is who you write to about any of it.

If you only leave us an email address

The form at the bottom of the home page collects one thing: your email address. We use it to write to you occasionally about RATIO and its early-access updates — no newsletter, no third-party marketing lists, no profiling. Reply to any of those messages, or write to the address below, and we drop you from it.

When you send it, Cloudflare Turnstile checks that a person is sending the form, and the address is kept in PostHog, in the EU, as the one answer to that form. It is not attached to a profile of you, and nothing else about your visit is stored with it.

If you create a RATIO account

We collect your email address and a password, which is stored only as a hash — we never see it. You can also sign in with Google, in which case we receive your name, email address and profile picture from Google instead of a password. Other providers are not available yet; if that changes, this page changes with it.

When you create an account, we ask you to confirm that you are 18 or over and live in the EEA or Switzerland, where RATIO is offered, and to accept the Terms of Use. We keep that confirmation, the version of the Terms you accepted and the date, for as long as the account exists. When the Terms change, we ask you to accept the new version, and keep that too.

The portfolio data you put into RATIO

When you import a broker statement, we store what it contains: your brokerage accounts and their tax type, the instruments you hold, every buy, sell, dividend and tax withholding with its date and amount, and the prices and exchange rates used to value them. That is financial information about you, and we treat it as such.

It is used for one purpose: computing and showing your own figures back to you. We do not sell it, share it with other companies, use it for advertising, or train anything on it. Nobody at RATIO reads your portfolio in the ordinary course of running the service; access to the production database is limited to fixing faults, and each account's rows are isolated at the database level so one signed-in user cannot read another's.

The valuables you record

When you add a watch, a piece of jewellery, a painting, a car or anything else of value, we store what you enter: its name, kind and description, an identifier such as a serial number if you give one, your share of it, how and when you acquired it, what it cost, your notes, and every valuation you record with its date and amount. If you mark it sold, lost, stolen or written off, we store that date and what it brought in, with the costs and tax you enter.

It is held the same way as the rest of your data: used only to show your own figures back to you, isolated so no other user can read it, never shared or sold, and deleted with your account. What you enter about a valuable is never sent outside RATIO.

If you connect an AI app

You can let an AI app you use, such as Claude or ChatGPT, read your records in RATIO, so that you can ask it about them, and, only if you allow it, add a few kinds of record for you. Nothing is connected unless you connect it: the app sends you to RATIO, you sign in, and RATIO's own page shows which app is asking and where its answers go, and asks you to allow it or not.

What the app can read: your own records, as the app shows them to you — your accounts, trades, holdings and their value, dividends and cash, your properties, leases, rent, costs and valuations, your valuables and their valuations, and the My Ratio figures — together with public exchange rates and inflation figures, each with its source.

What it can add, only if you allow it: RATIO's page also asks whether the app may add records, and that box starts unticked. If you tick it, the app can add three kinds of record when you ask it to: a rent payment, a property cost and a new valuable. Each one comes back first as a preview for you to check, and is added only by a second, separate step. RATIO adds at most 50 a day across all your connected apps, and notes that each was added through an AI app. What it cannot: change or delete any of your records, change your settings, or read anyone else's data.

A property's street and postal code, and a valuable's identifier, such as a serial number, are left out: the app cannot read them. What you wrote in a note or a description is part of your records and is included. The app works only through RATIO's own tools: the access it holds opens nothing else, and cannot sign in to your account or change your password or your email.

What you then share with the app is handled by the company that provides it, under its own privacy policy and wherever it runs its service, which may be outside the EU. RATIO hands over your records at your request; what the app says about them is that app's, not RATIO's.

What RATIO keeps: a log of each read and each record added — which app, which kind of record (say, your dividends), when, how long it took and whether it worked — never what was asked or what was answered. You can see it in RATIO under Edit profile, Connected AI apps, and it is kept for 90 days. The same facts, again without the question or the answer, go to our analytics in PostHog so that we can see how the connection is used and when it fails. RATIO answers at most 60 requests a minute for you, whichever app asks.

To disconnect an app, choose Edit profile in RATIO's profile menu and then Disconnect beside the app, under Connected AI apps. RATIO stops answering it at once, and the access it held ends there. Deleting your account ends every connection and removes the log with everything else.

Where it is stored

In a Supabase project hosted in the EU (Frankfurt, eu-central-1), which provides our database and sign-in. The app itself is served by Cloudflare, which also sees the usual request data any web host does — IP address, browser, the page requested.

Other services involved

• Supabase — database, authentication and server-side functions. EU-hosted.
• Cloudflare — hosting and CDN, plus Turnstile on the sign-in and sign-up forms and on the email form on the home page, which checks that a human is submitting them without the tracking a traditional CAPTCHA uses; see Turnstile's privacy addendum.
• Google — if you choose to sign in with Google instead of a password, we receive your name, email address and profile picture from Google. We never see your Google password.
• PostHog — analytics (below), and the place an address left through the email form is kept, as that form's answer. EU-hosted; see their privacy policy.
• Market data sources — to value your holdings we fetch prices from Yahoo Finance and the National Bank of Poland's exchange rates. These requests carry the instrument or the currency pair, never anything about you or how much of it you hold.
• OpenAI — used to fill in dividend information that the other sources do not carry. What is sent is always about the security itself: a ticker, a company name, and — depending on what's already known — either the text of a public page about that company, or facts like its sector, currency and already-known dividend dates and per-share amounts. No personal data goes to it, and nothing about your holdings, your amounts or your account — the request would look identical if a stranger had asked about the same company.
• OpenStreetMap — draws the map on a property's page. Your browser asks OpenStreetMap where the property's postal code is, sending what is in its postal code, city and country fields and nothing else: never the street field, and nothing else you recorded about the property. The map's tiles for that area come from OpenStreetMap too. As with any website, it sees your browser's IP address. The answer is kept on your device, so the question is asked once per address, and it is cleared when you sign out.

What leaves the EU

Your account and your portfolio stay in the EU: the database is in Frankfurt and does not travel. Several of the services above are US companies, so requests to them may be handled outside the EU — Cloudflare, which serves the site and checks that the sign-in and email forms are being filled by a person; OpenAI, which reads public company announcements; Yahoo Finance, which prices are fetched from; and Google, if you choose to sign in with it. All operate under the European Commission's standard contractual clauses or an equivalent safeguard. OpenStreetMap, which draws a property's map, is run from the United Kingdom, which the European Commission recognises as protecting personal data to an equivalent standard. None of them receives your portfolio: what reaches Cloudflare is the ordinary traffic any website sees, what reaches OpenAI is a company name and a public page, what reaches Yahoo Finance is an instrument symbol, what reaches OpenStreetMap is a postal code, a city and a country, and what reaches Google is only what Google sign-in itself requires. The one exception is yours to make: if you connect an AI app, the records it reads go to that app's provider, wherever it runs, because you asked RATIO to hand them over.

Cookies and analytics

No advertising cookies, no third-party trackers, no cross-site profiling, and no cookie banner — because there is nothing to ask you about. The app keeps your sign-in session and a few display preferences in your own browser's storage, which is what lets you stay signed in; clearing your browser data removes them and signs you out.

Website and RATIO app analytics run on PostHog, hosted in the European Union. It measures how the interface is used — which screens are reached, where taps and clicks land, how far pages are scrolled, which pages are slow and where something breaks — so that the interface can be improved. On the website nothing whatsoever is stored on your device for this: no cookie, no browser storage, which is why you have never been shown a consent banner here and will not be. In the app the measurements are tied to your account rather than to anything stored on your device, so that a change can be judged against how the app is actually used over time.

What it never receives is your money. Event names describe the part of the app you touched, never what was on it: no holdings, no amounts, no account names, no broker. Page addresses have account identifiers removed before they are sent, anything you copy is not captured, and where sessions are recorded to diagnose a problem, all text is masked and charts and maps are excluded from the recording, which is kept for 30 days. PostHog is named in the processor list above, and nothing collected here is sold, or used for advertising, or shared with anyone outside it.

How long we keep it

Your portfolio data stays for as long as your account exists. Delete the account and it goes, along with everything in it; backups roll off within 30 days. You can do it yourself, in the app, without asking anyone — here is how. An email address left through the form, with no account behind it, is kept until you ask us to drop it.

Why we are allowed to hold it

Every use of your data needs a legal basis, and there are three here. Your account and everything in your portfolio are processed to perform the contract you entered into by signing up — without them there is no service. The email address you leave through the form on the front page is processed on your consent, which you can withdraw at any time by replying to any message or writing to us. Keeping the service secure and working — spam checks on the sign-in and email forms, server logs — rests on our legitimate interest in running a service that is not broken into.

No decisions are made about you

There is no automated decision-making and no profiling in RATIO. Nothing scores you, sorts you, or decides anything about you — the arithmetic runs over your portfolio, not over you. We say so explicitly because the GDPR asks, and because silence on the point reads worse than the answer.

Your rights, and how to use them

RATIO is built in the EU and you have the rights the GDPR gives you: to see the data we hold about you, to correct it, to take it elsewhere, and to have it deleted. Email privacy [at] ratio.software and we will do it — whether that is a bare email address on the mailing list or a full account with a portfolio in it. Deletion is the one you do not have to ask for: it is built into the app, under Profile.

If you think we have handled your data badly, tell us first — but you do not have to go through us. You can complain directly to the Polish supervisory authority, the Urząd Ochrony Danych Osobowych, or to the equivalent authority in the country you live in.

If this page changes

The date at the top moves when it does. RATIO is early and the product is still growing, so this page gets rewritten as what we store changes, rather than being left to drift.