Privacy Policy
Last updated: September 13, 2026
Who operates Kassafy
Kassafy is operated by 3LOC. For any privacy question, contact vivian@3loc.ltd.
What we collect
- Your name and email, and either a bcrypt-hashed password or your Google identity via Auth0 — whichever you use to sign in.
- Receipt photos and PDFs you upload, and what we read from them: merchant, date, total, currency, and line items.
- Cash expenses you record.
- Bank statement files you upload on the website, and the transactions parsed from them.
- Your household's categories, accounts, and members.
Why we collect it
Only to provide the service: importing and categorizing your household's spending so you can see it in one place. We do not run ads, analytics, or tracking of any kind, and we do not sell data.
Who processes it
- AWS (eu-west-1, Ireland) — hosting, our PostgreSQL database, and S3 file storage.
- Auth0 and Google — sign-in.
- Google Gemini — reads your receipts and bank statements, and categorizes transactions.
- OpenRouter, routing to Anthropic Claude — a fallback for reading receipts when Gemini is unavailable.
- Resend — sends household invitation emails.
- openexchangerates.org — provides currency exchange rates only; no personal data is sent.
- The website loads fonts from Google Fonts and the Tailwind CSS CDN.
Cookies
We use one cookie: a session cookie that keeps you signed in. We set no other cookies.
The iOS app
The Kassafy iOS app stores your session token in the device Keychain. It asks for camera access to photograph receipts, and Photos access to attach receipt images you already have.
Retention and deletion
We keep your data for as long as your account exists. Settings → "Start Over" deletes your household's data; it stays recoverable for 30 days, after which it is permanently purged, including any files stored in S3. To delete your account entirely, email vivian@3loc.ltd.
Your rights
Under GDPR you have the right to access, correct, delete, or port your data, and to lodge a complaint with a supervisory authority. To exercise any of these, email vivian@3loc.ltd.