Privacy Policy

Information we collect

Account data: email and authentication identifiers from Supabase Auth (including Google sign-in if enabled).

Financial data you enter: transactions, goals, budgets, recurring bills, notifications, and related preferences stored in our database (Supabase).

AI inputs: receipt images, audio recordings, and chat messages you submit for recognition or assistant features.

Usage data: daily AI quota counters and technical logs needed to operate and secure the service.

How we use information

To provide bookkeeping, goals, reports, budgets, and AI-assisted features you request.

To process Plus membership and add-on purchases via our payment partner (Creem) and apply entitlements to your account.

To enforce rate limits, prevent abuse, and improve reliability.

We do not sell your personal information.

Service providers

Hosting: Vercel (application delivery).

Database & auth: Supabase.

AI recognition & chat: OpenAI-compatible gateways (e.g. DMXAPI) configured on our servers—your images/audio/prompts are sent only when you use those features.

Payments: Creem checkout and webhooks for membership and credit packs.

Exchange rates: Frankfurter (public FX API) for display conversions.

Retention & security

We retain account and financial records while your account is active. You may request deletion by contacting support@919145.xyz.

Data is protected by access controls, HTTPS, and row-level security in the database. No method of transmission is 100% secure.

AI uploads are processed to return structured results; we do not use them for unrelated advertising.

Your choices

You can sign out, export reports where available, and stop using AI features that upload media.

Browser local settings (language, PWA install) stay on your device.

Where required by law, you may request access, correction, or deletion of personal data via support@919145.xyz.

Geographic restrictions & compliance

Kash is not offered to individuals or entities in jurisdictions subject to comprehensive sanctions, embargoes, or similar restrictions under applicable law (including U.S., EU, UK, UN, or other programs), or in disputed or high-risk territories where we choose not to operate.

We may use technical signals (e.g. IP, payment, or account indicators) to restrict access. We are not obligated to provide service where doing so would violate export-control, sanctions, or anti-boycott rules.

If we learn you accessed the service from a restricted location or in breach of law, we may delete or disable your account and data without notice. We have no duty to retain data for such users and disclaim liability for doing so.

Children & changes

Kash is not directed at children under 13 (or the minimum age in your jurisdiction).

We may update this policy; the “Last updated” date will change. Continued use after changes means you accept the revised policy.