ReddUp Privacy Notice

ReddUp is operated by ReddUp, LLC, a Colorado limited liability company. This notice explains how we handle information through the ReddUp website, desktop application, purchases, surveys, email delivery, and optional support and feedback services. ReddUp’s ordinary financial analysis remains local to your computer.

1. Local financial work

ReddUp does not require a ReddUp cloud account for ordinary use. Your imported financial records and locally saved preferences are stored on your device, and ordinary financial analysis runs there. We do not receive them merely because you use the app. Optional bank sync, AI Assist and dashboard sharing use the data paths described below. Purchases, license delivery, update checks, website visits, surveys and feedback also use the network. Ordinary exports and ReddUp Deploy files are created locally. Deploy password protection is optional. Set a password to restrict who can open a .dply file; without one, any Command viewer can open it. This setting does not protect original documents or ordinary exports. Direct Command sharing uses HTTP on a trusted local network, not encrypted internet transport.

If you choose a feature that sends information over the internet, ReddUp identifies that action in the interface or in this notice. You are responsible for deciding what to submit and for having authority to process or share it.

2. Information we handle

Website and connection data

When you visit the website or use a network feature, our infrastructure may process ordinary connection, operational, and security data such as an IP address, request date and time, requested route, browser or app headers, response status, and error, rate-limit, or abuse signals. We use this information to deliver and secure the service, diagnose failures, and prevent misuse.

Browser storage

The website uses local browser storage to remember your light-or-dark appearance choice. The optional survey also stores a copy of your in-progress answers and a random survey session identifier in your browser so you can continue where you left off. This first-party storage is functional rather than advertising-related. Clearing site data in your browser removes the browser copy but does not delete a survey response already sent to us.

Optional embedded videos

ReddUp may offer videos through YouTube’s privacy-enhanced embed domain. Unpublished video placeholders do not contact YouTube. When a real video is available, its player is not requested until you choose to play it. Google or YouTube may then receive your IP address, browser and device information, and information about your interaction with the player, and may use cookies or similar storage under its own privacy practices.

Survey responses

The optional ReddUp survey autosaves responses to a Cloudflare Pages Function and D1 database. A stored response may include a random session identifier; creation and update times; progress and completion status; the last question displayed; your answers; the route taken through conditional questions; ordinary browser or user-agent information; and, only if you choose to provide it, an email address. Do not include account credentials, payment information, or financial records in a survey answer.

If you provide an email address and affirmatively agree to the survey’s email option, we may use it to send the promised thank-you or launch-discount communication through Resend. You may unsubscribe using the link in the email. We retain a minimal opt-out record as needed to honor the request. Survey participation and optional email consent are not required to use ReddUp or buy a license.

Purchases, subscriptions, and offline licenses

Paddle handles paid checkout as ReddUp’s authorized reseller and Merchant of Record. Information entered into Paddle Checkout, including full payment-card details, is submitted to Paddle and is not received or stored by ReddUp. Paddle may provide ReddUp with the billing email, customer and transaction identifiers, product and price selected, subscription and transaction status, and adjustment, refund, or chargeback information needed to fulfill and support the order.

ReddUp stores billing, event, subscription, transaction, adjustment, license-issuance, and delivery-job records in a billing-only Cloudflare D1 database. We use these records to generate the correct offline license, prevent duplicate fulfillment, redeliver a key, support a purchase, respond to a dispute, and suppress fulfillment after a full approved refund or chargeback. The key is emailed to the billing address through Resend. Ordinary activation occurs locally in the app, and ReddUp does not receive your financial files as part of licensing.

Email and direct contact

If you contact us by email, we handle your address, message, attachments, and other information you choose to send. Your email provider and the provider serving our mailbox process those communications under their respective policies. Resend processes recipient addresses, message content, delivery events, and related technical data when it sends a paid license, purchase-related transactional message, or optional survey communication for ReddUp. Transactional messages necessary to deliver or support a purchase do not depend on marketing consent.

If you call our support number or leave a voicemail, ReddUp and Google Voice may handle your telephone number, the date and time of the call, call-routing and duration information, and the voicemail audio, transcript, or other information you choose to provide. We use that information to respond to your request and provide product or license support.

Optional SimpleFIN bank sync

If you choose SimpleFIN bank sync in Pro or Elite, you establish and maintain your own separately paid SimpleFIN Bridge account. Internet access and an available system credential store are required, and supported institutions and available data depend on SimpleFIN. Bank data flows from SimpleFIN directly to ReddUp on your device; ReddUp’s servers are not in that path. The SimpleFIN access URL contains credentials and is stored in your operating system’s credential store or keychain rather than in a ReddUp cloud account. SimpleFIN independently handles the information involved in your Bridge account and connection under its own terms and privacy practices.

Optional AI Assist and Ollama

Optional AI Assist in Pro and Elite requires a running Ollama server and a compatible model. For on-device inference, install Ollama and download a local model; initial downloads require internet access. AI Assist sends your question, relevant conversation context, and ReddUp-computed figures to the Ollama server address you configure. The default address is an Ollama service on the same computer. If you choose a private-network or HTTPS server on another machine, those requested figures and prompts go to that machine and are handled by its operator and configuration. A cloud-backed model may also send them to its provider even when the Ollama server address is local. ReddUp does not run a hosted Ollama service and does not receive the AI Assist request or response.

Optional in-app feedback

An optional in-app feedback submission contains the category and message you enter; attachments you select; an allowlisted technical snapshot; and case-management data such as a random submission ID, dates, status, and attachment type, size, and hash. The feedback email field is optional. If you provide an email address, ReddUp may contact you about your message. Leaving it blank does not prevent submission. The form does not read, update, or transmit the optional Account email stored in Preferences. Authorized operators can view an address explicitly entered with a new or older feedback submission to follow up about that message. Where a form offers a separate AI-review agreement, an affirmative selection also records the agreement version and receipt time; submissions without that record cannot be exported for AI review.

3. Feedback diagnostics and attachments

The technical snapshot is designed to contain product and runtime versions, operating-system family, processor architecture, compatibility revisions, coarse health states, and bounded recent operation names, outcomes, fixed error codes, and app-only code locations. It is designed to exclude financial values, imported records, document contents, request parameters or results, exception messages, user-entered names, filenames, file paths, account data, and transaction data. You can preview it before sending.

Your message and attachments are different: they contain whatever you choose to provide and may contain personal or financial information. Images are re-encoded and reduced, PDFs are rebuilt from visible pages, and text files are normalized before upload. These steps remove source filenames and embedded source-file metadata, but they do not remove information that is visible or written in the file. Please redact unnecessary information and do not send passwords, access keys, or full financial documents.

4. How and why we use information

We use information only as reasonably needed to:

• provide the website and network features you request;
• fulfill purchases, issue and deliver licenses, maintain subscription status, and provide support;
• save and analyze voluntary survey responses and send an optional consented survey email;
• respond to questions, investigate feedback and errors, and improve ReddUp;
• maintain security, prevent abuse and fraud, and resolve payment disputes; and
• meet accounting, tax, consumer-protection, and other legal obligations.

Where applicable law requires a legal basis, we rely on performance of a contract or steps you request before a purchase; our legitimate interests in operating, securing, supporting, and improving ReddUp; consent for optional marketing or optional submissions where required; and compliance with legal obligations. You may withdraw consent for future consent-based processing at any time, without affecting processing that occurred before withdrawal.

We do not sell personal information. We do not use it for targeted advertising, and we do not share it for cross-context behavioral advertising. The ReddUp website does not include third-party advertising trackers.

5. Service providers and independent controllers

Cloudflare provides website delivery, network protection, rate limiting, operator-access controls, Workers, D1 databases, and the private R2 object storage used by the feedback service. Cloudflare therefore processes submissions and ordinary connection metadata on our behalf. ReddUp’s application-level feedback logs are designed to omit email addresses, messages, diagnostics, and attachment contents, although platform security and operational logs may contain ordinary request metadata.

Resend provides email delivery for paid licenses, purchase-related transactional notices, and optional survey communications. It receives the email address, message content, and technical delivery information needed to send and monitor those messages.

Google Voice provides support-phone routing and voicemail. Google may process caller information, call metadata, voicemail content, and related technical information under its Privacy Policy.

Paddle is ReddUp’s authorized reseller and Merchant of Record. ReddUp and Paddle each act as an independent controller for the personal information each processes for its own purposes. Paddle’s handling of checkout, payment, tax, fraud, buyer-support, cancellation, and refund data is explained in the Paddle Privacy Notice. A request made to ReddUp does not automatically delete Paddle’s independently controlled records, and a request made to Paddle does not automatically delete ReddUp’s records.

We may also disclose information when required by law; to protect rights, safety, and security; to investigate fraud; or as part of a merger, financing, reorganization, or sale of the business, subject to applicable safeguards. We do not allow service providers to use ReddUp data for their own advertising.

6. Manual AI-assisted support

Feedback is not automatically sent to an AI service. An authorized ReddUp operator may manually use a personal ChatGPT Pro account and, at times, a personal Claude account to investigate reported issues, address feedback, and improve ReddUp. These are consumer accounts, not OpenAI or Anthropic business, enterprise, or API arrangements. Provider retention and whether submitted content may be used to improve models depend on the provider’s then-current terms, policies, and the operator’s account settings. We do not promise zero retention, business-grade contractual controls, or that provider-held copies disappear when a case is deleted from ReddUp Service Center.

AI review requires a separate, affirmative AI-review agreement. ReddUp records the agreement version and receipt time with the random submission ID. The Service Center disables AI exports for every submission without that current agreement, including submissions sent by app versions that do not offer it. For an authorized submission, the default AI export contains only the allowlisted diagnostics; a customer message, attachment metadata, or attachment bodies are included only when the operator deliberately selects that category. The dedicated contact-email field is never included in AI packets or bundles, whether it came from a new or older submission. All exports are reviewed and handled by the operator, and AI output is advisory rather than an automated decision about you.

You can decline AI review by not granting the separate agreement. Feedback without a recorded agreement remains unavailable for AI export. You may also contact ReddUp by email or phone and state that you do not authorize AI review. After sending feedback, you may withdraw your agreement for future review by emailing [email protected] with the submission ID if available. Withdrawal cannot undo processing that already occurred or guarantee deletion from a provider beyond the controls it offers. You can limit what may be reviewed by keeping your message focused, redacting unnecessary details, and omitting attachments.

7. Retention and deletion

Purchases and email

We retain purchase, license, subscription, delivery, refund, chargeback, and related support records for as long as reasonably needed to fulfill the contract, support the license, prevent duplicate or fraudulent fulfillment, resolve disputes, and meet accounting, tax, and legal obligations. These billing and delivery records do not currently have a fixed automatic deletion schedule. Paddle and email providers retain their independently controlled records under their own policies and legal obligations.

Survey

Survey responses are retained while reasonably useful for product research, consented communications, security, and recordkeeping, or until a verified deletion request, subject to limited legal and security exceptions. Survey records do not currently have a fixed automatic deletion schedule. We may de-identify or aggregate responses so they are no longer reasonably linked to an individual. We keep opt-out information as needed to ensure we do not resume an email you declined.

Feedback service

ReddUp automatically schedules in-app feedback for deletion under this policy:

• An uploading or failed submission becomes eligible for automatic deletion 48 hours after its last update.
• A resolved or archived case becomes eligible for automatic deletion 90 days after it is marked resolved or archived.
• Every other live feedback case becomes eligible for automatic deletion 12 months after receipt.
• When a case is deleted, a minimal tombstone containing its random submission ID and deletion time prevents a delayed retry from recreating it. The tombstone becomes eligible for deletion 12 months after the case deletion and is removed only after its R2 prefix is verified empty.

The deletion process removes attachment bodies from active R2 storage and removes the case, including any feedback contact email, from the active D1 database. A temporary storage failure may require an automatic retry before deletion completes.

Cloudflare D1 automatically maintains point-in-time recovery history for the recovery period applicable to the service, currently up to 30 days depending on the Cloudflare plan. During that period, deleted D1 content may remain recoverable through a restricted, privileged database-wide restore, but it is not available through ordinary Service Center use. Older tombstone states may likewise remain in that recovery history until the applicable window expires.

You may request earlier deletion, subject to reasonable identity verification and limited legal or security exceptions. Deleting a ReddUp case does not automatically delete copies already sent to an AI or email provider; contact us and we will take reasonable steps available under the provider’s controls.

8. International processing

ReddUp is based in the United States. Cloudflare, Paddle, Resend, Google Voice, SimpleFIN, email providers, and the AI providers described above may process information in the United States and other countries where they or their service providers operate. Privacy laws in those locations may differ from the laws where you live, and any transfer is subject to protections required by applicable law. Because optional feedback and AI review can involve provider terms and locations outside your country, do not submit optional content if those arrangements are not acceptable to you; you may decline the in-app agreement and use the support channels described above.

9. Your choices and privacy requests

Surveys, feedback, attachments, and optional survey email are voluntary. You may decline them without losing ordinary use of ReddUp. You can unsubscribe from an optional email using the link in the message. You can remove browser-stored preferences and in-progress survey data by clearing site data in your browser.

Depending on applicable law, you may request access, correction, deletion, portability, or a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a denied request. Email [email protected]. We may request reasonable verification before disclosing, correcting, or deleting information.

For a feedback request, include the submission ID if available, plus the approximate date, category, and the minimum details needed to locate the case. If you provided a feedback email address, you may include it to help locate the case; without an address or submission details, we may be unable to identify or verify it. For a purchase-related request, include the Paddle transaction identifier and billing email, but never a full payment-card number.

Colorado residents may appeal a refusal by replying with “Privacy appeal”; we will explain our decision and available complaint options. You may also complain to an appropriate privacy or data-protection authority. To exercise rights regarding information Paddle controls, use Paddle’s privacy-request process described in its Privacy Notice.

10. Children

ReddUp is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 through the website or network services. If you believe a child submitted personal information, contact us so we can investigate and take appropriate action. A minor should use ReddUp only with the involvement of a parent or legal guardian and as permitted by applicable law.

11. Security

We use measures designed to protect information, including HTTPS, private storage, restricted operator access, bounded data contracts, signature verification for purchase events, and deletion reconciliation for feedback. No internet service, email system, or storage method can guarantee absolute security. Keep license keys, devices, and local backups secure, and notify us if you believe a ReddUp-related communication or key has been compromised.

12. Changes to this notice

We may update this notice as ReddUp, our providers, or applicable law changes. We will update the effective date on this page and provide additional notice when required by law. Materially different processing that requires consent will not begin on the basis of an outdated consent.

13. Contact