ReccoBill Privacy Policy

The short version.Your bank statements are read on your phone and never uploaded. ReccoBill has no accounts, no sign-in, no analytics and no advertising, and B&E Media has no server that receives anything about you. The only thing the app downloads is a public list of merchant names. Payments for a paid plan are handled by Google Play, not by us.

This policy covers the ReccoBill Android app. The B&E Media Privacy Policy covers this website and anything not described here.

Data summary

What you give ReccoBill

• Bank statements you choose from your phone: a CSV export from your bank, a statement PDF from your bank, or a PayPal activity statement.
• Anything you type in: subscriptions you add by hand, names, amounts, dates, categories, notes, and names you give to merchants ReccoBill could not identify.

What happens to it

Statements are read entirely on your device. ReccoBill looks for charges that repeat and shows you what it found; nothing is added until you accept it. The statement file itself is not copied, kept or sent anywhere.

What it keeps, in its private storage on your phone, is the register you build: each subscription or regular payment, its amounts, the dates of the charges behind it, the bank descriptor, and the account it was charged to as the statement labels it (which can include the account number, so transfers between your own accounts are not mistaken for spending). We cannot see any of it.

Where copies can exist

• Not in Google Drive.ReccoBill opts out of Android’s automatic cloud backup, so the register is never uploaded by the system on your behalf.
• A new phone.If you move to a new Android phone with Android’s own phone-to-phone transfer, the register can be copied across as part of that transfer, which you start yourself.
• Backups and spreadsheets you export.These go to your phone’s share menu and only where you send them — Drive, email, a folder. They are not encrypted, so anyone who can open that place can read them. A temporary copy is written to the app’s private cache to hand to the share menu; Android may keep it there until the cache is cleared.
• Notifications.Renewal reminders are scheduled and shown by your phone. They include the subscription’s name and amount, and depending on your lock-screen settings may be visible without unlocking.

What leaves your phone

The merchant name list. ReccoBill downloads a public list of bank descriptors and the services they belong to from reccobill.web.app, hosted on Google’s Firebase Hosting. It is an ordinary file download over HTTPS and sends nothing about you or your register. As with any web request, the hosting service necessarily sees your IP address and basic request details such as the time; we do not use these to identify or locate you.

Purchases. If you buy Plus, the purchase is made through Google Play. Google collects and processes your payment details under Google’s privacy policy; ReccoBill never sees them. The app asks Google Play which plan you have and remembers the answer on your phone. We receive no account, name or email from the purchase.

Merchant names you choose to share — not active yet. You may tick a box to share a name you gave a merchant, so other people’s imports recognise the same biller. There is no server receiving these yet, so ticking the box today records your answer and sends nothing. If a future version starts sending them, exactly two things would be sent: the bank descriptor with reference numbers stripped, and the name you gave it, with a random identifier generated on your device so repeat submissions can be told apart. No such identifier exists in this version.

Never sent, under any circumstances:

• your statements, or any part of them beyond a shared descriptor above
• any amount, balance, date, or account number
• which subscriptions you have
• your name, email, phone number, contacts or location

No accounts, no tracking

ReccoBill has no login and no user accounts. It contains no analytics, no advertising, no crash reporting to third parties, and no social or marketing trackers. It never connects to your bank and cannot move money.

It asks Android for these permissions, and only these:

• Internet— to download the merchant name list and to reach Google Play for purchases.
• Notifications and Alarms & reminders — so a renewal reminder arrives on the day it is due.
• Run at startup— to put reminders back after the phone restarts.

Keeping and deleting your data

Your register stays on your phone until you delete it. You can delete any entry in the app, clear everything from Android’s settings (Apps → ReccoBill → Storage → Clear storage), or uninstall the app, which removes it. Exported backups are yours to delete wherever you put them. Because we hold no copy of your data there is nothing on our side to access, correct or delete, and ReccoBill does not appear on the account deletion page for that reason.

AI features

This version has no AI features and sends nothing to any AI service. If a future paid plan adds them, this policy will say exactly what is sent, to whom, and for how long it is kept, before that version is released, and those features will ask before sending anything.

Children

ReccoBill is a personal finance tool for adults. It is not directed at children and collects nothing about them.

Changes

If this policy changes, the date at the top changes with it. Any change that would send more than is described here will be explained in the app before it takes effect.

Contact

Questions or a request about your data: admin@bandemedia.com.