Revnance
Data & security

We do not connect to your bank

It is the most common question and at the same time the most important product decision. Below is the full reasoning and exactly what we store.

Why having no integration is an advantage

Recurring payments by definition do not change — rent is the same every month, so is a subscription. Counting them needs no transaction feed; a list you fill in once is enough. A bank integration would solve a problem that is not here, and introduce four new ones.

You hand over no transaction history

Purchases, locations, payee names — none of it reaches us, because we have no way of seeing it.

No re-consent every 90 days

PSD2 access expires. Apps built on it keep asking you to log into your bank again.

Works for any account

A big bank, a credit union, a company card, a payment from a parent, cash for rent — you enter all of it the same way.

A breach here is not a financial breach

The worst case is a list of service names and amounts. Unpleasant, but it opens nobody a path to your money.

What this decision costs you: filling the list in the first time takes about half an hour, and once a month you spend five minutes confirming changes. We think that is a fair trade — but we say it plainly before you sign up.
What we store
  • Service names and categories
  • Amounts, cycles and charge dates
  • Asset valuations you enter yourself
  • Email address and password hash
  • Receipt photos you attach to warranties, stored privately
What we never have
  • Account or card numbers
  • Bank logins or passwords
  • Transaction history or bank balances
  • Anything from your mailbox

How it is protected

Servers in the European Union

The database and files live in Frankfurt, in a data center certified to ISO 27001. Website hosting and email sending are run by US companies, under the EU standard contractual clauses.

Encryption

TLS 1.3 in transit, AES-256 on disk and in backups.

Passwords

Argon2id hash with salt. The password cannot be recovered from it — not by us either. You can also turn on two-step sign-in: a code from an app on your phone on top of the password.

Backups

Daily, kept 30 days, encrypted with a separate key.

Team access

We reach into account data only at your explicit request in a ticket, and it is logged.

Revenue model

Subscription only. We do not sell data and have no advertisers.

Other questions

Can I export my data and delete my account?

Yes, both in your account in the panel (Account → Data and privacy), without contacting us. The export is a JSON file with the full history, including price changes. Deletion removes data irreversibly within 24 hours; backups expire after 30 days.

What if you shut the company down?

We commit to 90 days notice and to keeping export working until the last day. The JSON format is documented, so the data can be loaded elsewhere — you are not left with nothing.

Is my data processed by AI models?

Only when you ask for it. Suggestions in “Save money” come from stated rules computed on your account, and Ask answers prepared questions from your own data inside the app — neither uses a language model. The one exception is the “Check with AI” button in “Save money”: when you press it, the server sends your active items (names, plans, categories, amounts, billing periods, usage, plan limits, renewal dates and what you tick under “More options” — without names or your card) to Claude, Anthropic's model, and shows its suggestions. Your email address, notes and income are not sent, and Anthropic does not use data sent through its API to train models.

Who is behind this?

A two-person team in Wrocław. Direct contact: kontakt@revnance.pl — we reply on working days within 24 hours.

It goes with you: the same account, the same figures, on the phone.