How Rasid keeps your data safe

Gmail: read-only, billing mail only

• One read-only permission. Rasid asks Google for one scope, gmail.readonly. It cannot send, delete, change or label your mail.
• Billing mail only. It searches for receipts, invoices, statements, renewal notices and price notices, not your personal mail.
• Figures, not emails. From a billing email, Rasid keeps the sender's domain, the date and the facts it works out, such as the amount, currency and due date. It never stores the subject or the body.
• Your token stays on your phone. The Google access token is kept in the iPhone's Keychain, never written to Rasid's database and never logged. It lasts about an hour.
• Yours to revoke. Disconnect Gmail in Rasid's Settings, or remove Rasid in your Google Account under Security, and access stops.

No bank login, ever

Rasid never asks for a bank login, card number, CVV or OTP, and it does not connect to bank accounts through open banking or any other route. Everything it knows comes from billing email and the files you give it.

Card numbers and the files you import

• Masked before AI. Before billing text from Gmail or a shared Google Sheet goes to Rasid's AI provider, card numbers, account numbers and phone numbers are masked. The masking is pattern-based, so treat it as a strong reduction, not a guarantee.
• Only the last four digits. From a card statement bill, Rasid keeps the card's last four digits as the statement prints them, never the full number.
• Files are not kept. A spreadsheet, PDF statement, screenshot or tenancy contract you import is read and then not kept. Rasid keeps only the records you confirm.
• A file you upload goes as it is. A statement or image you upload is sent to the AI provider without masking, so crop or redact anything you'd rather not send.

AI, only with your yes

Rasid uses Anthropic's Claude on its own servers to read billing text. Nothing goes to Anthropic until you agree in the app, and Rasid asks separately for email, files, the Assistant and Discover. You can turn each off in Settings. Anthropic may not use your data to train models.

How it's stored

• Your data sits in Google Cloud Firestore, and the database's access rules restrict every record to you, signed in.
• Traffic between the app, Rasid's servers and other services is encrypted with HTTPS.
• Third-party API keys live in Firebase Secret Manager and never ship in the app.
• You can lock the app with Face ID or Touch ID.
• No ads, no advertising partners, and no analytics or tracking SDK in the app. Rasid does not sell data.

No system is perfectly secure, and Rasid does not claim otherwise. If Rasid learns of a breach affecting your data, it will tell you.

Export and delete your data

• Export. In Settings, under Your data, Export data saves your active subscriptions, with a spending summary and categories, as a CSV or JSON file. For a copy of anything else, email hello@rasid.app.
• Delete. In Settings, Delete Account removes your account and every record under it straight away, and revokes Rasid's Google access. See delete your account for what goes and what stays.

Related pages

• Privacy policy
• Delete your account and data
• About Rasid
• Bills and subscriptions in one place