Privacy Policy

1. Who we are

ReddUp is made by ReddUp, LLC, a Colorado limited liability company. For anything in this policy, contact feedback@reddupapp.com.

2. The ReddUp app: your data stays on your device

Everything you import or create in ReddUp, including transactions, budgets, reports, property records, and learned categorizations, is stored in files on your own computer. There is no ReddUp account, no sign-up, and no cloud copy. We never receive, store, process, or see your financial data, and the app contains no analytics, telemetry, or tracking of any kind.

The complete list of network connections the app makes:

• Update check. On launch, the app fetches a small public file from reddupapp.com to learn the latest released version number. The request carries normal technical request information plus the app’s own version where needed for the comparison. It does not include an account identifier, usage history, imported files, transactions, budgets, or anything about your finances.
• Bank sync via SimpleFIN (optional, off by default). If you set it up, your device talks directly to the SimpleFIN bridge — an independent service with its own terms and privacy practices that you sign up and pay for yourself. Your bank authorization and transactions flow between your device, SimpleFIN, and your bank. None of it passes through ReddUp, LLC — we are not in that path and receive nothing.
• Local AI (optional, off by default). ReddUp’s AI features run through Ollama, software that executes models on your own machine. Your data is processed locally and is not sent to us or to any AI cloud service.
• Sharing you initiate. Deploying a dashboard to another device on your local network, exporting files, or sending feedback (which opens your email app with a pre-addressed draft) happens only when you choose it, to destinations you choose.

That’s the whole list.

3. Sign-in and recovery codes

The app’s optional sign-in screen and its recovery code work entirely on your device; the code is generated locally and verified locally. The recovery QR encodes a link to reddupapp.com/recover with your code in the link’s #fragment. Browsers do not send that fragment to the server, so even when you open that page, your code stays on your device. The page loads nothing external and sends nothing anywhere.

Honest scope: the sign-in screen controls access to the app; it is not disk encryption. Anyone with full access to your computer’s files could read them, so if at-rest protection matters to you, turn on your operating system’s disk encryption (FileVault on macOS, BitLocker or Device Encryption on Windows).

4. This website

• No analytics, no ad trackers, no external fonts, no tracking cookies. Your theme choice (dark or soft) is kept in your browser’s local storage and never transmitted.
• Hosting. The site is served by Cloudflare, whose edge infrastructure processes standard technical request data (such as IP addresses) transiently to deliver pages and protect against abuse, under Cloudflare’s privacy policy. We do not build advertising profiles or product-usage records from it.
• The survey (optional). If you take our product survey, we store your answers and progress, and, only if you enter it and consent, your email address, in a database hosted on Cloudflare (U.S.). We use survey responses solely to improve ReddUp, and a consented email solely to send a thank-you note (delivered via Resend, an email service) with a working unsubscribe link. We don’t sell or share this — or anything else — with advertisers or data brokers.

5. Purchases

Purchases are processed by Paddle, our merchant of record. Paddle collects the payment and billing details a purchase requires under Paddle’s privacy policy; we never see your card number. From a completed purchase we receive what fulfillment needs, such as your email address, transaction status, and the product purchased, which we use to deliver your license key, provide support, and meet tax and accounting obligations. License keys are verified by the app offline; entering one does not contact our servers.

6. Email

If you email us (including via the app’s Submit Feedback, which sends from your own email account), we receive your address and what you wrote, and keep it as long as needed to help you and improve the product. Our mailbox is hosted on Google Workspace/Gmail infrastructure.

7. What we never do

• We never receive or store your financial data.
• We never sell or rent anyone’s personal information.
• We never add tracking, analytics, or advertising identifiers to the app.
• We never require an account to use software you bought.

8. Your rights and choices

Depending on where you live (for example under the EU/UK GDPR or the Colorado Privacy Act), you may have rights to access, correct, delete, or export personal data an organization holds about you. Because of ReddUp’s design, what we could hold is limited to: survey responses, purchase fulfillment records, and email correspondence. Write to feedback@reddupapp.com and we’ll honor verified requests; for payment records, Paddle is the data controller of the checkout transaction. Your app data needs no request: it’s already yours, on your device.

9. Children

ReddUp and this website are not directed at children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

If the app’s network behavior or this site’s data practices ever change, we will update this page in the same release and adjust the “Last updated” date above. Material changes will also be called out in release notes.

11. Contact

feedback@reddupapp.com — ReddUp, LLC, Colorado, USA.