Privacy policy

Last updated 26 October 2026

Kinance is a budgeting app for individuals and families, run by digitalarc, a sole proprietorship in Colombo, Sri Lanka. digitalarc is the data controller for the information described here. Questions or requests go to [email protected].

We follow Sri Lanka’s Personal Data Protection Act No. 9 of 2022 and, for people in the EU and UK, the GDPR. We don’t sell your data and we don’t show ads. We use Google Analytics to understand how Kinance is used, and the Meta Pixel on our website to see which of our own ads bring people to Kinance, as described below.

What we collect

• Your account: name, email address and profile photo from sign-up, plus your currency and display preferences.
• What you enter: accounts and balances, income and expense entries (descriptions, amounts, categories, dates), budgets, goals, and the workspaces you create or join.
• Kids’ profiles: when a parent or guardian adds a child, we store the name, birth year, chosen avatar, a username and a scrambled (hashed) PIN. We never ask a child for an email address.
• Billing status: your plan, its status and renewal date, and the reference numbers our payment provider gives us. We never see or store card details.
• Technical data: error reports when something breaks, and short-lived counters that stop abuse (for example, too many PIN attempts).
• Usage statistics: which pages are visited and which steps are used (for example “added an entry”, “scanned a receipt”, “finished setup”), with device type, browser and approximate country. These never include amounts, descriptions, names, emails or account details, and search terms and filters are removed from page addresses before anything is sent. Kids mode is never measured.

Why we use it

• To run the service you signed up for: storing your records, sharing them with the workspace members you invite, and showing totals and budgets (contract).
• To bill you and manage your plan (contract).
• To keep the service secure and fix faults (legitimate interest).
• To see which features help and where people get stuck, so we can improve Kinance (legitimate interest; consent where the law requires it).
• To send service emails such as invites, billing notices and account-deletion confirmation (contract). We don’t send marketing email without your consent.

AI features

When you scan a receipt, type an entry in plain words, or ask for a category suggestion, the photo or text is sent to Google’s Gemini service to read it. We don’t keep receipt photos. Google processes this data for us under its API terms.

Bank messages you share with Kinance

You can share or paste a bank or card message (an SMS, a WhatsApp message, an email) to Kinance so it can suggest an entry. Only messages you choose to share reach us; Kinance does not read your messages on its own. We read known bank wording with our own rules; a message we don’t recognise is sent to Google’s Gemini service as above. From the message we keep the amount, the direction, the merchant or payment type, the masked account or card number the bank printed, and the balance if the bank included it, together with the message text while the suggestion is waiting for you. When you add the entry, the message text is deleted; when you dismiss it, the text is kept for 30 days so Kinance can recognise the same message again and respect a “never from this sender” choice, then deleted. A fingerprint of the message (not the text) is kept to avoid duplicates. Nothing is added to your records until you confirm it.

On Android you can also turn on “Read bank alerts automatically” in the app’s settings. Kinance then asks Android for notification access and reads the notifications your phone shows from messaging, email and bank apps. On the phone it keeps only notifications that contain an amount and transaction wording; those are sent to Kinance the same way as a shared message, using a token tied to your account that is cancelled when you turn the setting off or sign out. Other notifications are never stored or sent. You can withdraw notification access at any time in Android settings.

Who processes data for us

Some of these are outside Sri Lanka and the EU. We only use providers that commit, by contract, to protect personal data to the standard these laws require.

Payments

Dodo Payments sells Kinance subscriptions to you as the merchant of record. It handles your card, invoices, tax and refunds under its own privacy policy. We only receive whether a payment succeeded and your plan details.

Who else can see your data

In a shared workspace, the members you invite can see the entries, accounts and budgets in that workspace. Your personal workspace is visible only to you. Parents in a family workspace can see their kids’ entries. We don’t share your data with anyone else unless the law requires it.

How long we keep it

We keep your data for as long as you have an account. When you delete your account it is removed immediately from the live database, and it disappears from our backups within 14 days. Entries you made in someone else’s shared workspace stay with that workspace, because they are part of its shared records.

Your rights

• See and correct your data at any time in the app.
• Download a copy of everything you added in Settings → Your data.
• Delete your account in Settings → Danger zone. This also cancels your subscription.
• Object to or ask us to limit how we use your data, or withdraw consent you gave.

For anything the app doesn’t cover, email [email protected]. We reply within 30 days. You can also complain to the Data Protection Authority of Sri Lanka, or to your local data protection authority if you live in the EU or UK.

Children

Kinance accounts are for adults. Kids use Kinance only through a profile created by their parent or guardian, who agrees to this policy for them and can remove the profile at any time.

• A kid’s profile holds only their first name, birth year, avatar, username, hashed PIN and the money they log.
• Kids never give an email address, phone number, location or photo, and kids mode has no receipt scanning.
• Kids mode shows no ads, has no analytics and no links out of the app, and nothing a kid logs is shared outside their family workspace.
• The parent or guardian can see everything their kid logs, reset the PIN, and delete the profile and its data at any time.

The Android app

The Kinance app for Android uses the same account and the same data as the website, under this policy. In addition:

• The camera is used only when you choose to scan a receipt. The photo is sent to be read (see processors above) and is not stored.
• The app keeps your sign-in token in your phone’s secure storage. On the phone it also keeps your chosen workspace, a copy of recently viewed screens for up to a day so they open without a connection, and entries you add while offline until they are sent. Signing out removes all of these.
• If you allow notifications, the app registers a push token for your phone. We send notices (the same ones you see in the app’s alerts) through Expo’s push service and Google Firebase Cloud Messaging, which deliver them to your phone. The token is deleted when you sign out. You can turn groups of notices off in Settings. The daily reminder is scheduled on your phone and nothing about it is sent to us.
• App lock uses your phone’s own fingerprint, face or screen lock. Kinance never receives your biometric data.
• The app contains no advertising or analytics software.
• You can download your data and delete your account from Settings in the app, or on the website.

Cookies and local storage

The app needs sign-in cookies from Clerk, a cookie that remembers an invite link you opened, and your device’s local storage to remember your chosen currency and workspace.

We also use Google Analytics cookies (named _ga) to count visits and see how the app is used. Advertising features, Google Signals and ad personalisation are switched off. In the EU, the UK and Switzerland these cookies are only set after you choose Allow on our banner; until then Google receives cookieless signals only. You can change your mind by clearing this site’s data in your browser, or block Google Analytics everywhere with Google’s opt-out add-on.

On our website pages, the sign-up page and the setup steps after it, we use the Meta Pixel (cookies named _fbp and _fbc) to see which of our Facebook and Instagram ads lead people to sign up, start a trial or choose a plan. It reports the page visited and those three steps, never amounts, entries or anything inside your budget, and it never runs on the app’s money screens or in kids mode. When you choose a plan, we tell Meta the plan price and a scrambled (hashed) copy of your email address so it can match the sale to the ad. In the EU, the UK and Switzerland the pixel only loads after you choose Allow on our banner, and we only report a plan to Meta if the pixel ran in your browser. You can also turn off ad tracking in your Meta ad preferences.

Security

Data travels over HTTPS. The app runs with limited permissions, passwords are handled by Clerk and never reach us, kids’ PINs are stored only in hashed form, and access to production systems is restricted.

Changes

If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect.