Privacy

Rebalic Privacy Policy

Effective July 16, 2026 · Kalman Software LLC

Your financial data stays on your device

Everything you put into Rebalic — accounts, holdings, transactions, imported statements, plans, and settings — is stored in a local SQLite database and configuration files on your computer. There is no Rebalic server. We have no copy, no access, and no way to see any of it. Backups exist only where you save them.

Deleting your data is entirely in your hands: remove the app and its data folder and it's gone. Nothing lingers on our side, because nothing was ever on our side.

What the app sends over the network

Rebalic fetches market data — prices, fund metadata, and reference rates — when you ask it to. Those requests go directly from your machine to the provider; they never pass through a Kalman Software server. A request contains ticker symbols and date ranges. It never contains your holdings, quantities, balances, account names, or anything about you.

• Tiingo — the default price source. You supply your own API key, and requests are governed by Tiingo's privacy policy.
• Yahoo Finance — an optional source that is off by default and used only if you switch it on for personal use.
• tsp.gov — official Thrift Savings Plan fund prices (a public file; no key, no account).
• treasury.gov — the U.S. Treasury yield curve (also public).

That's the complete list. The app has no auto-update pinger, no crash reporter, no usage analytics, and it never "phones home."

Buying a license

Checkout runs through Lemon Squeezy, our merchant of record. They collect what a purchase requires — your name, email address, and payment details — under their privacy policy; we never see your payment card. From a completed order we receive your name, email address, and order details, which we use to generate your license key, email it to you, and provide support. License emails are delivered via Resend.

The license key is verified offline, on your machine. Activating Rebalic contacts no server, and the app never reports usage, trial status, or anything else back to us.

This website

The site is a set of static pages served by Cloudflare, whose infrastructure keeps standard, short-lived server logs (IP address, user agent). We run no analytics scripts and set no tracking cookies. Fonts are served from this domain, so the pages make no third-party requests at all. If you email us — to join the early-access list or for support — we keep your email to reply and to send the one launch note you asked for. The Windows-waitlist form works the same way: the address you enter is stored on our Cloudflare infrastructure and emailed to us, used solely for that launch note. No lists are shared or sold; say the word and you're removed.

Microsoft Store installs

If you install Rebalic from the Microsoft Store, Microsoft handles the download and updates and shows us aggregate acquisition statistics. Microsoft's own collection is governed by the Microsoft Privacy Statement. The app itself behaves identically: local data, no telemetry.

Children

Rebalic is a financial planning tool for adults. It is not directed at children under 13, and we do not knowingly collect information from them.

Your rights

Because your portfolio data never reaches us, access and deletion of it are yours by construction. For the little we do hold — purchase records and email correspondence — email us and we'll show you what exists, correct it, or delete it, subject to records we must keep for tax and accounting. Lemon Squeezy retains transaction records as merchant of record under its own policy.

Changes to this policy

If the app's data practices ever change — for example, an optional feature that needs a network service — we'll update this page, change the date at the top, and say so plainly in the release notes. We won't quietly widen what's collected.

Contact

Kalman Software LLC · [email protected]