Privacy notice

• Account: your email address, a hash of your password, and your two-factor settings if you turn them on.
• Verification: the details you submit if you start identity verification.
• Sandbox activity: wallet balances, quotes, transfers and the recipient details you type in, saved recipients (a name and a currency pair), pots, goals and scheduled transfers.
• Refinance requests: the loan details you enter and, only if you tick the consent box, the phone number you give us for refinance partners.
• Wealth and debt entries you add by hand.
• Usage events: which features you use, recorded without amounts — for example, that a transfer was quoted, with its two currency codes.
• Security records: your sign-in history, used to spot suspicious access.

Copilot's standard insights are calculated by Rachan's own rules. They don't involve an AI provider.

Some Copilot features — chat answers, narrated insights and suggested actions — are switched off by default. When they're switched on, Rachan sends a redacted summary of your balances and transactions to a third-party AI processor, Anthropic, to generate the response.

Before anything is sent, we remove your email address, phone numbers, account identifiers, recipient names (replaced with "the recipient") and free-text notes. What's left is figures, currency codes, dates, statuses and short labels.

The Copilot is read-only. It can't move money: a suggested action only pre-fills a form that you review and confirm yourself.

Copilot output is general information, not financial advice.

Each AI request is recorded in an audit log: the redacted summary that was sent, the response, token counts and a fingerprint of the prompt. The log is append-only and has no automatic deletion yet, so we can check what the Copilot said and why.

We don't sell your data. We share it only with the AI processor above (when those Copilot features are on), with refinance partners (the request you submit, and your phone number only with your consent), and with the infrastructure providers that host Rachan.

Account and sandbox activity data is kept while your account is open. AI audit log entries are kept as described above, including after an account is closed.

You can ask for a copy of your data, or ask us to delete your account, through the contact form. You can switch off non-security notifications on the Notifications page.

Questions or requests about your data: Contact us