RitchaThe short version
- The free tier has no account. No name, no email, no password.
- Your accounts, amounts, budgets and forecast are stored on your phone, and synced through your own iCloud if you use it.
- To get prices and exchange rates, the app sends our server ticker symbols (like AAPL) and currency codes (like NGN). Nothing else about you.
- No analytics, no ads, no tracking, on the app or on this site.
Who we are
Ritcha is published by Ritcha Labs, which is responsible for the data described here. You can reach us at [email protected].
The app (free tier)
On your phone
Accounts, transactions, budgets, repeating items, valuations, holdings, the forecast and net worth. Statement files (CSV, OFX, QIF) are read on your phone and are not uploaded anywhere.
In your iCloud
If you are signed in to iCloud, this data syncs through the private iCloud database of your Apple ID. We cannot read it. If you are not signed in, it stays on the phone only.
What leaves your phone
Only what is needed to fetch prices and exchange rates: ticker symbols, currency codes and date ranges, plus Apple’s App Attest proof that the request comes from the genuine app. No account, name, email, balance, amount, transaction or device identifier is sent.
Every field, with examples, is on the page What leaves your phone.
Our server fetches prices and rates from our market-data providers. They receive lists of symbols and currencies from our server, never anything about you.
What our server keeps
- A table of App Attest keys: a random key per install, its public key, a counter and a date.
- A cache of prices and exchange rates.
Nothing links an install’s key to the symbols it asked for. Request logging is off. To stop abuse, the server counts each install key’s requests per day; that count holds no symbols. Our hosting provider processes connection data, such as your IP address, in transit.
No analytics, ads or tracking
The app has no third-party analytics, advertising, attribution or crash-reporting code, and does not track you. The only crash data is Apple’s own, and only if you chose to share analytics with app developers in your iPhone’s settings. This website loads nothing from other sites and sets no cookies.
The website and the waitlist
If you join the waitlist we store your email address, when you joined, when you confirmed, which form or link brought you (a short code such as x or share), your answer to the optional question if you give one, when we last emailed you, and scrambled versions of the tokens in your confirm and unsubscribe links. The confirm one is removed when you answer the optional question, or within two hours of confirming. Nothing else.
- We use your address to confirm it, then to email you at most once a month before launch, once on launch day, and now and then after that with news about Ritcha. Every email has an unsubscribe link. Addresses not confirmed within 7 days are deleted.
- After you confirm, one optional question asks what you would use Ritcha for. We use the answers to learn which of Ritcha’s three jobs people come for. Skipping it stores nothing.
- The unsubscribe link in every email deletes your address, and your answer with it.
- To stop abuse, we keep a scrambled form of your IP address for at most about two hours.
- Emails are sent through our email provider. They carry no tracking pixels and no tracked links. Our hosting provider processes connection data, such as your IP address, in transit.
Deleting your data
Delete the app, and remove its data from iCloud in Settings → your name → iCloud. Any export file you made is yours to keep or delete. To leave the waitlist, use the link in any of our emails, or write to us.
Children
Ritcha is not directed at children.
Paid tiers and changes
Plus and Investor are not available yet. Before they are, this policy will be updated to describe exactly what they do. If anything here changes, the date at the top changes too.