Ruzylo Cloud, LLC operates Last Statement. This sheet says what we collect, what we do not, and how to make us delete it. The short version is that a debt tool which cannot see your accounts is a debt tool that cannot leak them, and that was the design decision, not an omission.
What we never touch
There is no bank connection in Last Statement. No login to a financial institution, no credential field, no read-only token, and no account-aggregation service acting on your behalf. We could not connect to your bank if we wanted to, because the code to do it does not exist in the product.
The balances, rates, minimums and payoff schedule you build are held on your device. They are not synced to us, not backed up to us, and not readable by us. We cannot restore them if you lose the device, and we cannot produce them if somebody asks us to — those two facts are the same fact.
What we collect
- Your email address, and only if you put it on the register or buy something. Nothing else on this site asks for it, and the calculator asks for nothing at all.
- An authentication identifier, if you choose to sign in with Apple — an opaque identifier only. We never receive your real Apple ID or your email through it unless you choose to share it.
- Payment records, held by Stripe, who process the charge. We never see or store your card number. We see that a purchase happened, and to what email address the key was sent.
- Server logs — IP address, user agent, requested path — generated by the fact of a web request existing. They are kept for thirty days and then deleted.
Statements you hand it
If you use the statement reader, the document is processed to extract balances, interest rates, minimums and due dates, and is not retained afterwards. Where the processing happens on your device, nothing leaves it at all; where a server is involved, the file is read and discarded rather than stored.
We do not sell financial data, share it with data brokers, or use anything you give us to train an AI model. That is a commitment in this sheet, which means changing it requires the notice described below rather than a quiet edit.
What we do not do
- We do not sell or rent personal data, to anyone, at any price.
- We do not run third-party advertising or tracking pixels on this site.
- We do not take referral or affiliate money from lenders, refinancers, or balance-transfer card issuers — so nothing in the product has a commercial reason to point you at a loan.
- We do not pull your credit report or your score, and we do not sell credit repair.
Where the little we hold lives
Email addresses and purchase records are stored on Google Cloud in the us-central1 region, under our account. Payment data lives with Stripe under Stripe's own terms. That is the complete list of places anything of yours sits at our end.
Your rights
Write to [email protected] and you may ask for a copy of what we hold, a correction, a deletion, or an export in JSON or CSV. We answer copies and exports within thirty days and complete deletions within thirty days, except for records we are legally required to keep — billing records under tax law being the usual case.
You do not need to justify the request, and asking for deletion will not cost you access to something you bought.
Children
Last Statement is not intended for anyone under 13, or under 16 in the European Union. We do not knowingly collect their data; if we learn we have, we delete it.
Changes
If this sheet changes materially, we email everyone on the register and post the change here with a new effective date. A privacy policy that can be rewritten silently is not a policy, it is a preference.
Contact
Ruzylo Cloud, LLC · [email protected]. A person reads it.