Privacy policy
Last updated 8 October 2026
The short version
- Your statements are read on your iPhone or Mac. We never see your amounts, dates, names, merchants or account numbers.
- Your iPhone and Mac stay in step through your own iCloud, encrypted. It goes to your iCloud account, not to us.
- Rekon never asks for your bank login and never connects to your bank.
- Our server keeps nothing. No accounts, no database, no copies.
- We don't sell data, show ads or use tracking cookies.
Who we are
Rekon is an iPhone and Mac app that shows where your money went by reading the statements you give it. This policy covers the Rekon app, the Rekon server it talks to, and this website. "We" means the team that makes Rekon.
Your statements
Rekon reads the PDF statements and transaction histories you add, on your device. The PDF files stay on the device you added them on. What Rekon reads from them (transactions, balances, categories and budgets) is stored on that device and, if you use iCloud, in your own iCloud account, as described below. None of it is uploaded to us.
On iPhone you can also share a PDF to Rekon from another app. It is kept in a folder only Rekon can open until Rekon reads it, then removed.
iCloud sync between your devices
When you're signed in to iCloud, Rekon keeps your iPhone and Mac in step through Apple's CloudKit, in the private database of your own iCloud account. It syncs what Rekon read from your statements, the categories and rules you set, and the statement layouts Rekon has learned. It does not sync the PDF files or anything you write in a problem report.
- It's yours, not ours. The data is stored in your iCloud account and counts against your iCloud storage. Only devices signed in to your Apple ID can read it. We have no access to it; Apple gives us only overall usage figures, such as how much storage the app uses in total.
- Encrypted before it leaves. Rekon puts every value in CloudKit's encrypted fields, which your device encrypts before upload, with keys kept in your iCloud Keychain. With Advanced Data Protection turned on, only you hold the keys.
- Your control. Removing a statement removes it from all your devices. To stop syncing, turn iCloud off for Rekon in your device's settings. To delete what Rekon stored in iCloud, go to Settings, then your name, iCloud, Manage Account Storage, Rekon.
Apple handles this data under Apple's privacy policy.
When Rekon meets a new statement layout
The first time Rekon sees a layout it doesn't know, it needs help working out which column is which. It sends our server a layout fingerprint. Before anything leaves your device, every digit becomes 9 and every name, merchant and reference becomes X. Only the words a statement prints for itself, such as column headings, stay readable. For example:
DATE DESCRIPTION AMOUNT BALANCE 99/99 XXXXX XXXXXX 99.99 DR 9,999.99 99/99 TRANSFER FROM X XXXXX 999.99 CR 9,999.99
Rekon checks that nothing unmasked is left before sending, and our server checks again and refuses anything that still contains real numbers.
Our server passes the layout fingerprint to an AI model from Anthropic, which replies with how to read the layout. Anthropic handles it under its commercial terms, which do not allow it to train models on this data. See Anthropic's privacy policy.
Our server holds a layout fingerprint and its reply in memory only while the job runs, and for at most 15 minutes after the reply is ready. It is never written to disk or logged. Once Rekon has learned a layout, it reads later statements in that layout with no connection to our server at all.
What else the app sends with that request
- A check that the request comes from a genuine copy of Rekon. Apple's App Attest confirms this with a key made for this install. It isn't linked to you, your Apple ID or your device's serial number. We use it only to stop abuse, and keep it in memory only.
- A random install number (development builds only). Your device makes it up when Rekon is installed. It isn't linked to you, your Apple ID or your device's serial number. We use it only to stop one install from flooding the server, and keep it in memory only.
- A notification token, so Apple can tell the app when the reply is ready. It is kept only with that one request and dropped with it.
- Your internet address, which every connection carries. We use it only for rate limiting, keep it in memory, and never log it.
The beta sign-up
When you sign up for the beta on this website, our server passes your email address to Apple's App Store Connect, which adds you as a TestFlight tester and emails you the invite. We don't store your address, log it or add it to a mailing list. From then on Apple holds it under Apple's privacy policy. As a tester you can stop testing in the TestFlight app at any time. To be removed from the tester list entirely, email us at the address below.
While you test, TestFlight lets Apple share some information with us: your email, the date you accepted the invite, how often you open the beta, crash reports, and any feedback or screenshots you choose to send. We use it only to fix and improve Rekon. Crash reports come from Apple, not from your statements.
This website
This website uses no cookies and no analytics. It loads its fonts from Google Fonts, so Google receives your internet address when the page loads; see Google's privacy policy.
Where things are processed
Our server runs on a cloud hosting provider. Like any host, it carries the connection, but our server doesn't log request contents, install numbers or internet addresses. Anthropic and Apple may process data in the United States and other countries.
What we never do
- Ask for your bank password, connect to your bank, or use a bank data aggregator.
- Receive your statements or anything read from them. Sync goes to your own iCloud account, never to us.
- Sell, rent or share your information for advertising.
- Build a profile of you. There are no Rekon accounts.
Your choices
Everything Rekon knows about your money lives on your devices and in your own iCloud, so you control it. Remove a statement in the app and it is gone from all your devices; delete Rekon and remove its data from your iCloud storage (see above) and nothing is left. We hold nothing about you that we could hand back or delete. The one exception is your tester record, which Apple holds; email us and we'll remove it.
Children
Rekon is not meant for children under 13, and we don't knowingly accept beta sign-ups from them.
Changes
If we change how Rekon handles data, we'll update this page and the date at the top before the change takes effect. A change that sends anything new off your device will be announced in the app first.
Contact
Questions or requests: twisaksana@gmail.com