Privacy Policy

The short version

Karcha is a private place for your money. We only collect what we need to run the app, we never sell your data, and we never use it for advertising. Your spending is isolated to your account, and only people you personally invite can ever see it.

What we collect

Account details from Google when you sign in: your name, email address and profile photo.

The data you create in the app: expenses, spaces, categories, notes, budgets and the spaces you choose to share.

Receipt images you upload (when you use receipt scanning), stored privately and processed only to read the amount and merchant.

Basic technical information such as logs and device type, used to keep the service secure and working.

How we use it

We use your data only to provide Karcha: to save and sync your spending, generate your insights, and enable the sharing you set up. We do not sell your data, and we do not use it to target ads.

Where it lives and how it is protected

Karcha runs on Supabase (database and storage) and Vercel (hosting). Every record is protected by row-level security, which means it is tied to your account and unreadable by other users. Data is encrypted in transit over HTTPS. Receipt images are kept in a private bucket that only you can access.

Third parties

Google for sign-in.

Supabase for the database and file storage.

Vercel for hosting.

OpenAI, used only when you scan a receipt, to read the text from that one image. Images are not used to train models.

We share data with these providers only as needed to operate the service.

Sharing with people you invite

Sharing is always something you start. When you invite a partner to a space or your whole account, they can see the data in that scope until you remove them. You can revoke access at any time from Settings.

Your rights

You can view and edit your data anytime in the app, export it, and delete it. Deleting your account removes your spending data from our systems. For any request, email hello@mkpadda.com.

Cookies

We use only the essential cookies needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

Children

Karcha is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

If we update this policy, we will post the new version here with a fresh date.

Contact

Questions about privacy? Email hello@mkpadda.com.