Varuno privacy policy
This policy describes how Varuno, the personal finance app by Varman Labs, handles data. It is written to match what the app actually does, and it discloses what does leave your device rather than only what doesn’t. Where a legal detail is still being finalised, a visible placeholder appears instead of an invented answer.
The short version
Your financial records live in an encrypted database on your device. Your account stores only identity metadata: name, email, country, base currency. Two — and only two — services ever receive anything from the app: the account service and an exchange-rate service. Neither receives a balance, transaction, salary figure, document image or scanned text.
Data stored on your device
Wallets, transactions, transfers, categories, budgets, bills, goals, salary records, retirement contributions, investment records and app settings are stored in a SQLite database on your device, encrypted with AES-256. The encryption key is stored in the iOS Keychain. Each account on a device has its own database file and key.
If you opt in to keeping copies of imported documents, the processed (redacted) pages are stored in the app’s private storage on the device. They are viewable and deletable under Settings → Data → Local Storage, and are removed with the app.
Data stored with your account
The account service (Supabase, hosted in the ap-southeast-1 region) holds:
- your email address and password, in its authentication system
- a profile row: name, country, base currency, and an onboarding flag
Access to your profile row is restricted to your own authenticated account by row-level security policy, defined and forced in the database migration.
Complete list of network connections
- Supabase — sign-in, email verification, password reset, profile, account deletion. Receives the account data above, plus your IP address inherently.
- open.er-api.com — daily mid-market exchange rates. Receives your base currency code and your IP address inherently.
Both connections use TLS. There are no other endpoints. Payslip and receipt text recognition runs on-device via Google ML Kit’s on-device library; nothing from those documents is transmitted.
What Varuno does not contain
No analytics SDK, no advertising, no crash reporter, no payment processing. The app’s internal logging convention is to log error types, never data.
Documents you import
Import working copies are EXIF-scrubbed on arrival, and the import workspace is deleted when the session ends — however it ends — with an additional 12-hour sweep for abandoned sessions. “Deleted” here means the files are removed and unlinked from the app’s storage; Varuno deliberately avoids claims about physical storage erasure that flash memory cannot honour.
Exports and backups
Files you export are readable JSON and are not protected by your passcode or Face ID. The app warns you at export time; treat these files as the sensitive documents they are. They leave the device only when you move them.
Deleting your data
Account deletion (Settings → Danger Zone) removes the server-side account and profile via a deletion service, and destroys the local vault key-first. Full steps: Delete your account. Residual server-side retention timelines are pending confirmation: [DELETION_TIMELINES_REQUIRED].
Legal details pending confirmation
- Data controller / legal entity:
[LEGAL_ENTITY_REQUIRED] - Registered address:
[COMPANY_ADDRESS_REQUIRED] - Privacy contact:
[PRIVACY_EMAIL_REQUIRED] - Governing framework (expected PDPA-first with GDPR awareness):
[JURISDICTION_REQUIRED] - Minimum age requirement:
[MINIMUM_AGE_REQUIRED]
Until the privacy contact above is live, privacy requests can be made through the contact form using the “Privacy request” type.