Your money, on your iPhone.
Ranna was built so that nobody but you can read your money. Here’s how, in plain words.
Everything lives on your phone
Your payments, accounts, budgets, bills, plans, goals and money owed are kept in a database on your iPhone, encrypted with a key that never leaves it. You can also lock Ranna with Face ID.
Your bank texts are read on the phone
A Shortcut you set up once hands Ranna each bank text, Wallet tap or receipt. Ranna reads it right there: with rules it learns from your bank’s first text or, if you turn it on, with smart reading, a small language model that runs on your iPhone. Voice works the same way. Nothing is sent anywhere to be read.
A backup locked with your own key
Automatic backup makes a copy every night, but locks it on your phone first, with a 28-character recovery key that only you have. Ranna keeps the key in your iCloud Keychain, so a new iPhone finds it by itself. Our server, in the European Union, keeps the newest copy and one older one, and can’t open either.
Because we can’t open your backup, we can’t reset your key either. Keep it somewhere safe.
Families, locked for the family
A family shares through a locked box on our server. Each change is locked with a key only the family’s phones have, and signed by the phone that made it, so nobody can read it on the way or pretend to be someone else.
- Joining needs the invite link, a four-digit check code that shows on both phones, and a yes from whoever runs the family.
- Something shared with only some people is locked for their phones alone. The others can’t open it, not even its amount.
- Someone who leaves or is removed keeps what was shared while they were in, and gets nothing new: the family moves to a new key.
Only the real Ranna gets in
Every request to our server proves it comes from a genuine copy of Ranna on a real iPhone, with Apple’s App Attest. Scripts and copies are turned away.
What our server can and can’t see
- It can see random numbers for backups and families, how big each locked copy is, and when it arrived.
- It can’t see names, amounts, shops, budgets, bank texts, or who is in a family.
- If it ever stopped, every phone would keep all of its data.
Nothing to sell
No account, no email, no phone number. No ads, no trackers and no analytics in the app, and no cookies on this website. Ranna is paid for by the people who buy Ranna Pro.
The details, including how long anything is kept, are in the privacy policy.