What We Collect (When You Create an Account)

If you create an account to sync data across devices, we store:

• Your email address (for login)
• Your financial data (assets, scenarios, calculations) — encrypted in our database
• Basic usage analytics (which pages you visit, not what you enter)

We use Supabase for authentication and data storage. They're GDPR-compliant and encrypt data at rest.

What We Don't Do

• We don't sell your data to anyone
• We don't share your data with third parties (except Supabase, our hosting provider)
• We don't show ads or use tracking cookies
• We don't use your data to train AI models
• We don't require your real name or personal details

Data You Control

You can:

• Use RebaseNest completely offline (as a guest)
• Delete your account and all associated data at any time
• Export your scenarios before deleting
• Switch between guest and account modes without losing data

Security

We use industry-standard practices:

• HTTPS encryption for all data in transit
• Encrypted storage for account data
• One-time password (OTP) authentication (no passwords stored)
• Regular security audits of our infrastructure

Analytics

We use Vercel Analytics to understand how the app is used (which pages are popular, where users get stuck). This is anonymous—we don't see your financial data, only page views and performance metrics.

Cookies

We use minimal cookies:

• Session cookies for authentication (if you log in)
• LocalStorage for guest session IDs
• No tracking cookies, no advertising cookies

Changes to This Policy

If we make significant changes to how we handle your data, we'll notify you via email (if you have an account) or through a notice in the app. The date at the bottom of this page shows when it was last updated.

Questions?

If you have concerns about your privacy or how we handle data, please reach out. We're a small team and we take this seriously.