Privacy Policy
Last updated: May 2025
1. What data we collect
Account data: Your email address, used to log in and contact you about your account.
Financial data you provide: Transaction details, amounts, merchants, categories, and notes that you log through chat, screenshots, or PDF uploads.
Usage data: Anonymous interaction events (e.g., which features you use) to help us improve the app. These are never tied to your financial data.
We do not collect your bank credentials, passwords, or biometric data.
2. How we use your data
We use your data to:
- Run the Kushim service and keep your transactions organized
- Process your natural-language inputs using AI models
- Send you account-related emails (receipts, alerts, updates)
- Improve the product using aggregated, anonymized usage patterns
We do not use your financial data to train AI models. We do not use it for advertising.
3. AI processing
When you log a transaction through chat, share a screenshot, or upload a bank statement, the content is processed by an AI model to extract transaction details. This processing happens on our secure infrastructure.
We use third-party AI providers (currently Anthropic / Claude) under strict data processing agreements. Your financial data is never used to train their models. Inputs are processed in real time and not retained by the AI provider beyond what is required for the immediate request.
4. Data storage and security
Your data is stored in India on infrastructure hosted by Supabase and Railway. We use encryption in transit (TLS) and at rest (AES-256). Access to your data is restricted to you and essential backend services.
We do not store your bank account passwords, PINs, or card numbers.
5. Data sharing
We do not sell, rent, or share your personal or financial data with any third party for commercial purposes. Period.
We share data only in these narrow circumstances:
- Service providers: Infrastructure partners (Supabase, Railway, Razorpay for payments) who process data on our behalf under strict agreements.
- Legal requirements: If required by law or a valid court order.
- Your request: If you explicitly ask us to export or transfer your data.
6. Data retention and deletion
We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, then is permanently and irreversibly deleted.
You can request deletion of your account and all associated data at any time by emailing [email protected]. Deletion happens within 7 business days.
7. Your rights
You have the right to:
- Access a copy of all data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to certain types of processing
- Export your transaction data in CSV format
To exercise these rights, email [email protected].
8. Cookies and analytics
Our website uses minimal analytics (PostHog and Google Analytics) to understand how visitors interact with kushim.money. These tools collect anonymized data such as page visits and button clicks. They do not receive your financial transaction data.
You can opt out of analytics by enabling “Do Not Track” in your browser settings.
9. Changes to this policy
We will notify you by email if we make material changes to this policy. Continued use of Kushim after notification constitutes acceptance of the updated policy.
10. Contact
Questions? Email [email protected].
Or write to: Kushim, India.