Privacy Policy

Last updated: February 16, 2026

1. Introduction

Welcome to Kacha. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our expense management service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number (optional)
  • Profile Information: Display name, profile picture, preferences
  • Receipt Data: Uploaded receipt images, merchant names, amounts, dates, categories
  • Expense Reports: Report titles, descriptions, workspace assignments

2.2 Information Automatically Collected

  • Usage Data: Pages visited, features used, time spent in app
  • Device Information: Device type, operating system, app version
  • Log Data: IP address, browser type, timestamps

3. How We Use Your Information

We use your information to:

  • Provide and maintain our expense management service
  • Process and store your receipts and expense data
  • Generate expense reports
  • Authenticate your account and prevent fraud
  • Send you service-related communications
  • Improve our service through analytics
  • Comply with legal obligations

4. Data Storage and Security

Storage: Your data is stored securely using Supabase (PostgreSQL database) and Clerk (authentication). Receipt images are stored in encrypted cloud storage.

Security: We implement industry-standard security measures including:

  • Encryption in transit (HTTPS/TLS)
  • Encrypted data storage
  • Row-level security policies
  • Regular security audits
  • Access controls and authentication

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in these circumstances:

  • Service Providers: Third-party services that help us operate (Supabase, Clerk, Google Cloud for AI processing)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share your data

6. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and data via Settings → Security → Close Account
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

7. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Your personal data is permanently deleted immediately
  • Receipt images are removed from storage
  • Anonymized analytics data may be retained for service improvement
  • Legal or compliance data may be retained as required by law

8. Children's Privacy

Kacha is not intended for users under 18 years of age. We do not knowingly collect data from children.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through the app. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or our data practices, please contact us: