Kaya — Your money, in perspective

1. Information We Collect

Kaya collects information you provide directly, including your email address when you create an account, account identifiers, and financial data you enter such as transactions, budgets, account balances, and investment holdings. Saved transactions can include merchants and purchase details; category notes contain text you choose to enter. Retirement and CPF inputs can include your age, birth year and citizenship status as well as financial amounts. Kaya and the service providers described below process this information to operate the features you use.

2. How We Use Your Information

We use your information to provide account access, synchronize saved records between devices, calculate budgets and projections, and generate financial insights and reports.

3. Data Storage & Security

Kaya uses Supabase for sign-in and cloud storage of account and financial records. Account access controls and database rules separate users' records. The web app also keeps copies in your browser, and the iPhone app keeps records on your device so you can access saved information when your connection is unavailable. These local copies do not turn off cloud synchronization or processing by online features.

4. Third-Party Services

Supabase handles account authentication and saved records. If you choose Google or Apple sign-in, that provider also processes your sign-in. Market-data requests send the requested investment symbols to price-data providers.

AI features use Anthropic. Requests pass through Kaya's server and can include financial context such as merchant names, amounts, account summaries, portfolio information and conversation messages. Receipt and statement extraction sends the files you upload for AI processing. Check uploads for personal information before submitting them.

When enabled for the service, PostHog processes usage events linked to an account identifier, Sentry processes error reports that can include an account identifier, and Resend processes email addresses and messages for reminder emails. These services are separate from the account database.

If you allow advertising in Cookie settings, OpenAI Ads measures views of our public landing page and signed-in app pages to help attribute advertising results. Its Pixel processes browser and device information, network information such as IP address, page URL and referrer, and advertising cookies, including attribution and browser-reference cookies. Page URLs can include record identifiers. Kaya does not explicitly supply account identifiers, email, or financial records in Pixel event fields. Automatic advanced matching is enabled for this Pixel: it can detect customer information on a page, such as email, hash that information in your browser, and send the hashes to OpenAI to help match advertising results. This measurement and matching require your advertising permission. An earlier landing-page-only permission does not enable this expanded measurement. Reject advertising to keep the Pixel off. You can change your choice using Cookie settings at the bottom of the page. Withdrawing permission tells the Pixel to stop future measurement and remove its attribution and browser-reference cookies; it does not erase information already sent.

5. Your Data Controls and Deletion

You can edit records in the app and use Download my data in web Settings to save an export. Choose Delete account in Settings to remove your Kaya sign-in and saved account records from the active account database. Removal is complete when the app confirms that deletion succeeded. Follow any instructions shown for clearing remaining local data or disconnecting Sign in with Apple.

Downloaded exports and copies on other devices are separate from the active account database. Backups, operational logs, temporary processing caches and records held by service providers may remain after account deletion. The in-app deletion action does not erase all of those copies.

6. Contact