Cookie Policy

1. What Are Cookies

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website or use a web application. They allow the website to recognise your device and store information about your preferences or past actions.

Cookies can be "session cookies" (which are deleted when you close your browser) or "persistent cookies" (which remain on your device until they expire or you manually delete them). Cookies can be set by the website you are visiting ("first-party cookies") or by third-party services that the website uses ("third-party cookies").

In addition to cookies, we may use similar technologies such as local storage and session storage for similar purposes. References to "cookies" in this policy include these similar technologies.

2. How Reallo Uses Cookies

In the Reallo app we use only essential cookies, plus settings stored on your own device. The app does not use analytics cookies, advertising cookies, retargeting cookies, social media tracking pixels, or any form of cross-site tracking. Our public website at www.reallo.co.nz is different: see section 4.

Essential Cookies (Always Active): These cookies are strictly necessary for the Service to function. Without them, core features like logging in and maintaining your session would not work. Essential cookies include authentication tokens that keep you logged in as you navigate between pages, session identifiers that maintain your active session, CSRF tokens that protect against cross-site request forgery attacks, and security cookies that detect and prevent fraudulent activity. You cannot opt out of essential cookies because the Service cannot function without them. These cookies are first-party only and are session-based or short-lived.

Preference Settings (Stored On Your Device): We remember some of your choices, such as display settings and whether you have dismissed certain notifications or prompts, using your browser's local storage. This information stays on your device: it is not a tracking technology, and it is not sent to us or to anyone else. You can clear it at any time by clearing your browser's site data for Reallo.

2a. Cookies on this website (reallo.co.nz)

Section 2 describes the Reallo app. Our public website at reallo.co.nz, which you can browse without an account, additionally uses analytics and advertising cookies and similar technologies: PostHog for analytics, and Google Tag Manager, which loads Google Analytics and the Meta and TikTok pixels. They measure site usage, where visitors come from and how our ads perform. They are not used in the app, are never linked to your bank data, and never receive your email address or name.

You can opt out by blocking or deleting these cookies through your browser's cookie settings, as described in section 5. Blocking them does not affect the website's content or the app.

3. Open Banking and Authentication Tokens

When you connect your bank account through Reallo, Akahu (our bank connectivity provider) issues Reallo an access token and a refresh token that let us read your bank data on your behalf. They are not stored as cookies on your device. They are held in Reallo's database, each encrypted with AES-256-GCM before it is stored, and are deleted when you disconnect. You can revoke this access at any time by disconnecting your bank in the Reallo app, or from your Akahu dashboard at my.akahu.nz. Either way we stop fetching data and delete the transaction data we hold for you, as described in the Privacy Policy.

4. Third-Party Cookies

The Reallo app uses no advertising networks, social media embeds, or other third-party services that place tracking cookies on your device.

Our public website at www.reallo.co.nz does. Google Tag Manager loads Google Analytics and the Meta and TikTok pixels, and PostHog provides our analytics. The Meta and TikTok pixels set cookies to measure how our ads perform. We do not share your email address or name with Meta or TikTok, or with our analytics tools. You can opt out of these cookies through your browser's cookie settings, as described in section 5.

5. Managing Your Cookie Preferences

Because the Reallo app sets only essential cookies, there is no in-app cookie consent to manage: essential cookies cannot be disabled as they are required for the Service to function, and the app has no analytics or advertising cookies to opt out of.

On our public website, you opt out of the analytics and advertising cookies described in section 4 through your browser's cookie settings: block or delete cookies for reallo.co.nz, or block third-party cookies.

Through your browser: Most browsers allow you to view, manage, and delete cookies through their settings. You can typically find cookie settings under Privacy, Security, or Advanced settings in your browser. Common browsers include Chrome (Settings > Privacy and Security > Cookies), Firefox (Settings > Privacy & Security > Cookies), Safari (Preferences > Privacy > Cookies), and Edge (Settings > Cookies and Site Permissions).

Please note that blocking or deleting essential cookies will prevent the Service from functioning correctly. You may be unable to log in or maintain an active session if essential cookies are blocked.

6. Cookie Retention Periods

Your sign-in session is kept by two short-lived cookies: an access cookie that lasts 15 minutes and a refresh cookie that lasts 7 days and renews while you keep using Reallo. Signing out clears both. When you confirm a sign-in code we've emailed you, a separate trusted-device cookie remembers that device for up to 400 days, the longest browsers allow, so you aren't asked for an emailed code on that device every time. Resetting your password or turning two-factor authentication off revokes every trusted device, and you can clear the cookie yourself at any time through your browser's site data.

Preference settings in your browser's local storage persist until you clear your browser's site data for Reallo.

7. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites requesting that they do not track the user's browsing activity. The Reallo app does not track your browsing activity in the first place: it sets no analytics or advertising cookies, whether or not a DNT signal is present. On our public website, use your browser's cookie settings to opt out, as described in section 5.

8. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via email or through a notice within the Service at least 14 days before they take effect. The "Last updated" date at the top of this policy reflects the most recent revision.

9. Contact

If you have questions about our use of cookies or this Cookie Policy, please contact us at:

Reallo Ltd
Email: developer@reallo.co.nz
Location: Auckland, New Zealand

For broader questions about how we handle your personal data, please refer to our Privacy Policy.