Privacy Policy
What Kasyafi collects, why we use it, who may process it, and the choices available to you.
Effective and last updated: August 24, 2026
Scope and who we are
This Privacy Policy explains how Kasyafi collects, uses, discloses, and protects information when you use our website, account features, financial-planning tools, and document-processing features.
Kasyafi is the personal information controller for information collected directly through the service. Some providers process information for us to operate specific features.
Information we collect
Account and authentication information
We collect your name, email address, email-verification status, authentication provider, account timestamps, and security information associated with sessions, such as IP address, browser or device information, and session identifiers.
Financial information you choose to provide
We store the records you enter to calculate your plan, such as account names and balances, income, bills, debts, payment dates, planned purchases, safety buffers, notes, forecasts, recommendations, and calculation snapshots.
Documents and extracted information
If you upload a statement or other supported document, we collect the file, filename, file type, size, integrity hash, extracted fields, confidence information, review status, and records you approve for import. Documents may contain information such as issuer names, partial account references, balances, due dates, and payment amounts.
Service and advertising information
We may collect request logs, security events, error information, and basic device or browser information needed to operate and protect the service. On eligible public pages, Google Analytics may measure visits and interactions, and Google AdSense and its advertising partners may receive the page URL, IP address, browser information, cookie identifiers, and ad interaction or measurement data. These Google services are not loaded on authenticated financial pages.
How we use information
We use information to:
- Create and secure your account, authenticate requests, and provide support.
- Store your financial records and generate forecasts, affordability checks, debt plans, reminders, and recommendations.
- Process documents, show extracted fields for your review, and import only the records you approve.
- Send verification, password-reset, security, and service communications.
- Detect abuse, troubleshoot failures, enforce our terms, and improve reliability.
- Display, measure, protect, and—where you have made the required choice—personalize advertising on eligible public pages.
- Comply with legal obligations and respond to lawful requests.
Kasyafi does not use your private balances, debts, income, uploaded statements, or financial hardship information to target advertising. Advertising systems do not influence Safe to Spend, debt priority, affordability results, emergency guidance, or any other Kasyafi recommendation.
Reasons for processing
Depending on your location and the activity, we process information because it is necessary to provide the service you requested, because you consented, because we have a legitimate interest in securing and improving the service, or because the law requires it.
You may withdraw consent for optional processing at any time. Withdrawal does not affect processing that occurred before withdrawal and may limit features that depend on that information.
Retention and deletion
We keep account and financial information while your account is active and as needed to provide the service. Authentication sessions are configured to expire, but security records, provider logs, and backups may be retained for a reasonable period for security, continuity, dispute resolution, or legal compliance.
You can delete individual records and documents through available account controls. Where offered, deleting a document file can be separate from deleting financial records you already approved for import. Permanent account deletion removes account-linked application data from the active database, subject to limited backup and legal-retention exceptions.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, user-scoped database operations, validation, private document storage, secure session controls, and restricted browser permissions.
No storage or transmission method is completely secure. Use a unique password, protect access to your email account, and contact us if you suspect unauthorized access.
Your rights and choices
Depending on applicable law, you may have rights to be informed, access information, correct inaccurate information, object to or restrict processing, withdraw consent, obtain a portable copy, and request deletion. You may also have the right to complain to the Philippine National Privacy Commission or your local data-protection authority.
Account controls provide data export, record management, and account deletion where available. For other privacy requests, email privacy@kasyafi.com. We may need to verify your identity before completing a request.
International processing
Our providers may process information in countries other than where you live. When required, we use contractual, organizational, or other safeguards intended to protect information during international processing.
Children
Kasyafi is intended for people who are at least 18 years old. We do not knowingly offer accounts to children or knowingly collect personal information from children. Contact us if you believe a child has provided information.
Changes and contact
We may update this policy to reflect changes in the service, providers, or legal requirements. We will update the date above and provide additional notice when a change is material and applicable law requires it.
Questions or requests may be sent to privacy@kasyafi.com.