Privacy Policy

2. Information We Collect

2.1 Account information

You need an account to use Kashaa. You can sign in with Google, with Apple, or with an email address and a password. With Google, we store the name and email address Google shares with us, and the account ID Google assigns you. With Apple, we store your email address (or the relay address Apple gives us if you hide your email), the name you choose to share, and the user ID Apple assigns you. We never see your Google or Apple password. With an email address, we store that address and a one-way hash of your password (bcrypt), never the password itself. If you reset your password, we store a hashed copy of the 6-digit code we email you, and the code expires after 15 minutes. We also sync your profile name and your settings, such as your currency and theme.

Each phone you sign in on gets a session token, which we store only as a hash. A session ends by itself after 90 days without use. It also ends when you log out, use Sign Out Other Devices in Settings, change or reset your password, sign in with Google or Apple in a way that takes over a password account, or delete your account. We keep a record of ended sessions until you delete your account.

2.2 Financial information you enter

Everything else in Kashaa is information you type in: account names and balances, transactions, categories, budgets, debts and notes. Kashaa has no connection to your bank, GCash, Maya or any other financial institution, and never collects your real account numbers, card numbers or e-wallet logins. This information is stored on your phone, inside the App's private storage, and synced to our server so it is backed up and available when you sign in on another phone.

2.3 Information about other people

The people in your Debts tab (payees) can include another person's name, email address and notes. You are responsible for having the right to enter information about them. We process it only to provide the Service to you - we never contact them, and they do not need a Kashaa account.

2.4 Subscription information

Kashaa Pro is bought through the Apple App Store or Google Play. We receive your subscription status (whether you are subscribed, and when it renews or expires) through RevenueCat, which links your purchase to your Kashaa account ID. We never receive your payment card details - Apple or Google handle payment.

2.5 Device, network and log information

When the App connects to our server, the server sees your IP address. It uses the address only to limit how many requests can come from one place, keeps it in memory for that purpose, and does not log it or store it in our database. Our server does not store your device model or operating system. Our server logs record events such as sign-ins, password changes, voice requests, subscription updates, errors and account deletion, together with your account ID. They do not include your email address, your IP address or the content of your records. We keep them for a limited period for security and debugging. Our crash-reporting and analytics providers receive your IP address and device details directly from the App, as described in sections 2.6 and 2.7.

2.6 Crash reports

When the App crashes or hits an error, a report is sent to Sentry with technical details such as the error, app version and device type. Sentry is set not to store your IP address, and we do not add your name, email address, amounts, notes or the names in your Debts tab to reports. Some errors, such as a failed save on your phone, carry the values involved in their error message, so a report can occasionally include an amount, a note or a name.

2.7 Product usage analytics

We use PostHog to see which features get used, for example that a transaction was added or a budget was created. These analytics are linked to your Kashaa account ID, not your name or email. With each event, PostHog also receives your IP address, which it uses to estimate your approximate location (such as your country and city), and your device model, operating system, app version, language and time zone. Events never include your amounts, notes, balances or budget figures, or the names of your accounts, categories or the people in your Debts tab, and we do not record your screen. We use analytics only to improve Kashaa, never for advertising or cross-app tracking.

2.8 Voice entry

Voice entry is an optional Kashaa Pro feature, and the one part of Kashaa that needs an internet connection. It asks for access to your microphone and your phone's speech recognition. Your phone turns your speech into text on the device - the recording itself never leaves your phone, and the App does not save it. The text (which includes any amounts you say), together with the names of your categories (listed with your most-used first) and accounts, is sent through our server to OpenAI, which drafts the entries for you to check. We also send OpenAI a hashed, non-reversible identifier derived from your account ID, which it uses to detect abuse. None of your saved records, balances or history are sent.

We ask for your permission before voice entry is used for the first time. The App remembers your answer on that phone, including after you log out, and there is not yet a setting to take it back (see section 9). Nothing is sent unless you tap the microphone. OpenAI does not use this data to train its models and may keep it for up to 30 days for abuse monitoring. To enforce the limit of 30 voice notes in any 24 hours, our server keeps one small row per request (account, time, status, processing time and amount of text processed). It never keeps what you said or what came back. Rows older than 30 days are removed the next time you use voice entry, and all of them are removed when you delete your account.

2.9 Cookies

This website sets no cookies and runs no analytics. When you sign in with Google or Apple, our server sets one cookie that lasts 10 minutes, to protect the sign-in from forgery. It is used for nothing else.

2.10 What we do not collect

We do not collect bank or e-wallet login credentials, card numbers, government ID numbers, voice recordings or biometric data. Kashaa has no ads and no advertising or tracking SDKs, and we do not sell or rent your personal information to anyone.

3. How We Use Your Information

We use the information above to:

• -Provide the Service: store and sync your data across your phones.
• -Sign you in and keep your account secure, including password resets and security notices.
• -Process and verify your Kashaa Pro subscription.
• -Turn your voice notes into draft entries, if you use voice entry.
• -Prevent abuse, fraud and overload, including rate limiting.
• -Diagnose and fix crashes and bugs, and understand which features are used so we can improve them.
• -Send service messages by email, such as password reset codes, password-changed notices and important changes to these policies.
• -Comply with the law and respond to lawful requests.

We do not use your data for advertising and we do not share it with advertisers or data brokers.

4. Legal Basis for Processing

Under the Data Privacy Act, we process your personal information on these bases:

• -Contract: to provide the Service you signed up for - your account, sync, subscriptions and service emails.
• -Legitimate interests: to keep Kashaa secure, prevent abuse, fix crashes and improve the App through product analytics linked to your account ID, in ways that do not override your rights.
• -Consent: for voice entry, which we ask for in the App before first use, and for the microphone and speech permissions your phone asks you to grant.
• -Legal obligation: where the law requires us to keep or disclose information.

5. Who We Share Information With

We use a small number of service providers to run Kashaa. They process data on our behalf, only to provide their service to us, and we do not sell your data to any of them:

• -Railway - hosts our server and database, which store your account and synced data.
• -Google and Apple - sign-in, if you choose them, and subscription payments through their app stores.
• -RevenueCat - manages and verifies subscriptions, linked to your Kashaa account ID.
• -PostHog - product analytics, hosted in the United States.
• -Sentry - crash and error reports, hosted in the United States.
• -OpenAI - drafts entries from voice-entry text, only if you use voice entry (section 2.8).
• -ZeptoMail by Zoho - sends our emails, such as password reset codes and security notices; it receives your email address and the message content, and keeps its own delivery logs.

We may also disclose information if required by law, court order or a lawful government request, or to protect the rights and safety of our users or others. If Kashaa is ever sold or transferred to another operator, your information may move with it, subject to this Policy, and we will tell you.

6. Transfers Outside the Philippines

Railway, PostHog, Sentry, RevenueCat, OpenAI and ZeptoMail may store or process data outside the Philippines, including in the United States. When data leaves the Philippines, we remain responsible for it under the Data Privacy Act, and we take reasonable steps to make sure it receives a comparable level of protection.

7. Security

Data travels between the App and our server over encrypted connections (HTTPS/TLS). Passwords are stored only as hashes. On your phone, your data sits in the App's private storage. The App does not add its own encryption to it; it relies on your phone's built-in encryption and lock screen, so keep your phone locked. If your phone backs up app data, for example to iCloud, those backups may include Kashaa's data. We apply reasonable organizational, physical and technical measures to protect your information, but no system is perfectly secure.

If a personal data breach occurs that is likely to put you at real risk of harm, we will notify the National Privacy Commission and affected users as the law requires - within 72 hours of learning of it, as set out in NPC Circular No. 16-03.

8. Retention and Deletion

We keep your data for as long as your account exists. Uninstalling the App does not delete your account or your synced data.

When you delete a record, account, category, budget or person in the App, it disappears from the App, but our server keeps it, marked as deleted. Deleted items stay on our server until you delete your account.

You can delete your account in the App's Settings. This immediately and permanently deletes your account and all your data from our database, including records, accounts, categories, budgets, debts, preferences, sessions, password reset codes and voice usage rows, and it wipes the copy on the phone you delete it from. It cannot be undone. Other phones signed in to the account keep their copy until you log out on each of them, and they stop syncing. Some information is not removed by this step:

• -Subscription and purchase records held by Apple, Google and RevenueCat, which they keep under their own policies.
• -Analytics data in PostHog and crash reports in Sentry, which are kept for those services' retention periods.
• -Voice-entry text held by OpenAI for up to 30 days.
• -Email delivery logs kept by ZeptoMail.
• -Your voice-entry permission, which stays saved on the phone where you gave it.
• -Server logs, kept for a limited period for security and debugging.
• -Backups of our database, from which your data is removed as backups rotate out on our hosting provider's schedule.
• -Records we must keep to comply with the law.

Deleting your account does not cancel a Kashaa Pro subscription. Cancel it in your App Store or Google Play account settings to stop future charges. To ask us to delete your analytics or crash data too, contact us.

9. Your Rights

Under the Data Privacy Act, you have the right to:

• -Be informed about how your data is collected and processed - this Policy.
• -Access the personal data we hold about you.
• -Correct inaccurate or outdated data.
• -Have your data erased or blocked, subject to legal retention requirements.
• -Object to processing, including processing based on our legitimate interests.
• -Data portability - receive a copy of your data in a commonly used electronic format.
• -Withdraw your consent at any time, without affecting processing done before you withdrew it.
• -Be compensated for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your data.
• -Lodge a complaint with the National Privacy Commission.

To exercise any of these rights, write to our Data Protection Officer at support@kashaa.app. We may need to confirm your identity first, and we will respond within 30 days. You can correct most of your data yourself in the App and delete everything in Settings. The App has no setting yet to withdraw consent for voice entry. To withdraw it, stop using voice entry (nothing is sent unless you tap the microphone) and tell us. The App has no export feature, so to get a copy of your data, write to us and we will send it.

10. Children

Kashaa is a general-audience app and is not directed at children. If you are under 18, please use Kashaa only with the permission of a parent or legal guardian. We do not knowingly collect personal information from a child under 13, or under the minimum age set by the law where they live, without a parent's or guardian's consent. If you believe a child has created an account without that consent, contact us and we will delete it.

11. Users Outside the Philippines

Kashaa is operated from the Philippines and built for people there. If you use it from elsewhere, your information is processed in the Philippines and the other countries named in section 6. If you are in the European Union, the United Kingdom, California or another place whose privacy law gives you similar rights - such as access, correction, deletion, portability or objection - you can exercise them through the same contact above. We do not sell or share your personal information for targeted advertising.

12. Changes to This Policy

We may update this Policy as Kashaa or the law changes. We will update the “Last updated” date at the top of this page and, for material changes, notify you by email or in the App where possible.

13. Contact Us

For questions, concerns or requests about this Policy or your personal information, including requests to our Data Protection Officer, contact:

If we have not resolved your concern, you can contact the National Privacy Commission at privacy.gov.ph.