Privacy Policy

This Privacy Policy explains what information Kinpatha ("we," "us") collects when you use our shared household finance application at kinpatha.com (the "Service"), how we use and disclose it, and the choices you have.

Our privacy principles

Kinpatha is built to help you understand your finances, not to monetize your personal financial information through advertising or data sales. We do not sell your personal information or financial data. Kinpatha does not display third-party advertisements, and we do not use your personal or financial information for targeted advertising. We intend to fund the product through optional paid Pro features as they launch.

Information we collect

• Account and authentication information

  Name, email address, password credentials (stored as a salted hash, not in plain text), and information returned by a sign-in provider if you choose to use one.

• Household and financial information

  Household membership, transactions, income, categories, budgets, accounts, balances, dated investment allocation snapshots and holdings, credit cards, loans, assets, liabilities, and other information you or a household member records in the Service.

• Product-interest information

  If you join the Kinpatha Pro interest list, we record that choice with your account.

• Contact form submissions

  The name, email address, and message you submit. We deliver it to our support inbox and retain the correspondence for as long as reasonably needed to handle your request.

• Usage and technical information

  On our production website, analytics and service infrastructure may process page paths, interactions, browser or device details, IP address, and similar technical information. Kinpatha removes query strings and redacts access-bearing URL values from analytics page paths.

How we use your information

We use information to authenticate users; provide household finance features; display shared household data to authorized members; operate and improve Kinpatha; send transactional email; respond to support requests; measure product usage and Pro interest; and monitor security, reliability, and misuse.

Sale of personal information and advertising

Kinpatha does not sell personal information or financial information to advertisers, data brokers, or other third parties. Our intended model is a useful free product with an optional paid Pro subscription—not an ad-supported product or an ad-free upgrade.

Service providers and other disclosures

We may disclose information to service providers when reasonably necessary to host and operate Kinpatha, store data, authenticate users, send transactional email, protect public forms from abuse, analyze service usage, monitor security and reliability, or provide support. Current infrastructure includes Amazon Web Services for website and API hosting, operational logs, and transactional email; Neon for managed PostgreSQL hosting; optional Google or Facebook sign-in; Cloudflare Turnstile on public account and support forms; Stripe for Kinpatha Pro subscription payments made on the website; Apple and Google for Kinpatha Pro subscriptions purchased as in-app purchases in the mobile app; OpenAI and Anthropic for AI-generated summaries in select Pro reports; and Google Analytics on the production site. These providers process information on our behalf or at your direction for their respective functions.

Stripe processes your payment details (such as card information) directly for Kinpatha Pro subscriptions purchased on the website, and Apple or Google does so for a subscription purchased in the mobile app; Kinpatha never receives or stores your full card number, payment method, or billing address through any of them. For an in-app purchase, we receive and retain the store's own transaction and subscription identifiers (an anonymous per-household token we generate, and the store's transaction id or purchase token) so we can recognize renewals and confirm your household's subscription is genuine—never your name, payment details, or anything else the store holds about you as a customer. When you run a Pro report that uses AI (this is indicated in the report itself), the minimum derived financial figures needed to produce that report's summary—never your name, email, account numbers, institution names, notes, or unrelated transactions—are sent to OpenAI or Anthropic to generate it. Kinpatha may use the other provider when the primary provider is unavailable; the same minimized report context is used either way. For investment allocation summaries, this context includes aggregate balances, asset-class percentages, coverage, and concentration percentages, but not holding names or symbols. If you opt in to alert emails, those messages only ever say how many new alerts you have and name your household—never amounts, merchants, categories, or account details. Pro households with monitoring enabled also get a weekly AI-written summary of that week's alerts, built only from figures Kinpatha already calculated—never merchant or account names. We will review and update this policy before introducing a new processor that materially changes how personal or financial information is handled.

We may also disclose information when required to comply with law, protect rights and safety, investigate misuse, or complete a business transaction subject to appropriate safeguards. We may share information at your direction—for example, with household members you invite. Service-provider processing, legal disclosure, and user-directed sharing are different from selling personal information.

Household sharing

Kinpatha is collaborative. Information recorded in a household may be visible to other authorized members of that household. Invite only people with whom you intend to share the household's financial picture.

Browser storage and analytics

Kinpatha uses browser storage to maintain authentication and application state. Google Analytics may use cookies or similar technologies on the production site to measure page views and a small set of product events. We strip query strings, replace access-bearing route values, and do not intentionally send names, email addresses, household names, financial records, or form contents in analytics events. Advertising signals and ad personalization are disabled in our Google tag configuration. We do not add advertising pixels or retargeting trackers.

AI help when importing statements

Statement import can optionally use OpenAI or Anthropic to suggest categories and to work out the columns of a CSV file we can't read. It is off unless a household owner turns it on in the household settings. When it is on, we send the merchant names from the file after removing account and reference numbers, emails, phone numbers and household member names, whether each line was money in or out, and your category names. For an unreadable CSV we send its column headings and a few sample rows with every letter and digit replaced by a placeholder. We never send amounts, dates, account names, member names, database identifiers or the file itself. AI suggestions are labelled, and you review every line before anything is saved.

Ask Kinpatha

Ask Kinpatha lets a household member type a question about the household's own finances and get a short answer. When you ask a question, we send OpenAI or Anthropic the question text, category names (so a question like "dining out" can be matched to your category), the aggregated figures needed to answer it (amounts, dates, and percentages), and, if you're continuing a conversation, the recent questions and answers in that thread. We never send member names, emails, household name, account names or numbers, transaction payees, notes, or any database identifiers to the provider; accounts are referred to only by an anonymous label such as "Credit card 2," and the real name is substituted back in afterward, outside the model. Ask Kinpatha conversations are shared with every member of your household, the same as other household data, and are kept for as long as the household exists; they can be archived but not deleted individually, and are not currently included in the data export described below. Ask Kinpatha's answers are informational analysis of your own recorded data, not financial, tax, or legal advice.

Accessing and exporting your data

You can download a copy of your own data at any time from Settings—your profile plus every household you belong to, including accounts, balance history, categories, transactions, budgets, and recurring income, as a JSON file. Because Kinpatha households are shared, your export includes records your household members entered too, not only your own—see "Household sharing" above.

Data retention and deletion

We retain your account and household financial data for as long as your account is active and as reasonably needed to operate the Service. You can permanently delete your account from Settings. Deletion erases your profile, login methods, sessions, notification settings, memberships, and other personal account data. A household with no remaining member and its financial data are also erased. Records in a household that still has other members remain for those members, with your identity removed from creator fields. We may retain limited records where needed for security, legal, or operational purposes—for example, an email delivery-suppression record after a bounce or complaint—and deleted data may remain temporarily in backups until those backups expire.

Security

Connections to the Service are encrypted in transit using HTTPS. Passwords are stored as salted hashes rather than plain text. No method of storage or transmission is completely secure, and we continue to review safeguards as the private beta develops.

Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do.

Contact us

Questions about this policy or your data? Reach out via our contact page, or read our plain-language Security & Privacy summary.