Your money, your data
kira is a personal and shared expense tracker. This policy explains what the app collects, why, who it's shared with, and the control you have over it — in plain language, no fine-print games.
Questions? Email hongkarsern3@gmail.com.
The short version. We don't sell your data. We don't run ads or track you across other apps. Your Face ID never leaves your phone, and we never see your card details. Everything below is the detail behind those promises.
kira is provided by Hong Kar Sern, an individual developer based in Malaysia. For the purposes of Malaysia's Personal Data Protection Act 2010 (PDPA) and, where it applies, the EU/UK GDPR, we are the data controller for the personal data described here. By creating an account, you agree to this policy.
We collect only what the app needs to work.
| Data | Purpose |
|---|---|
| Email address | Account creation, sign-in, recovery, and transactional email |
| Password | Authentication — stored only as a secure hash by our auth provider; we never see it |
| Display name | Shown on your profile and to members of groups and households you join |
| Profile avatar | Optional; shown on your profile and in shared groups |
| Transactions | Amounts, categories, notes, dates, and currency you enter to track spending |
| Budgets & recurring expenses | Budget limits and scheduled expenses you configure |
| Groups, expenses & splits | Shared expenses and balances between you and people you split costs with |
| Households & shared budgets | Budgets shared with a partner or household member you invite |
| Friends | People you connect with to split expenses |
| Receipt images | Optional photos you attach to an expense, stored so you can view them later |
| Custom categories & rules | Personalising how your spending is organised |
| Data | Purpose |
|---|---|
| User ID | A random identifier that links your data to your account |
| Push notification token | Sending budget alerts and group activity — only if you enable notifications |
| Device locale | Showing the app in your language and currency format |
| Crash & error diagnostics | Detecting and fixing bugs (via Sentry) |
| Product usage events | Understanding which features are used, to improve the app (via PostHog) |
| Subscription status | Managing Pro access and entitlements (via RevenueCat) |
Biometric data (Face ID, Touch ID, or fingerprint). If you enable app lock, unlocking is handled entirely by your device's operating system. We never receive, see, or store your biometric data.
Purchases of kira Pro are processed by the Apple App Store or Google Play, and entitlements are managed by RevenueCat. We do not collect or store your credit card or payment details — the app store you purchased through handles those. We receive only your subscription status (active or expired) and a purchase identifier.
We share data only with the service providers that operate the app on our behalf, and only as needed to run the service.
| Provider | Role | Data |
|---|---|---|
| Supabase | Backend database, authentication & file storage | All account and app data in Section 2, plus email and receipts |
| Sentry | Crash & error reporting | Diagnostic data, user ID |
| PostHog | Product analytics (United States) | Usage events, user ID, Pro status |
| RevenueCat | Subscription management | User ID, purchase / subscription status |
| Apple / Google | In-app purchase processing | Payment details (handled by them, not us) |
| Expo | Push notification delivery | Push token |
Other users see limited data by design. When you join a group or household or add a friend, those people can see your display name, avatar, and the shared expenses, splits, and balances relevant to that group or household. They cannot see your private transactions, budgets, or receipts.
We may also disclose information if required by law, or to protect the rights, safety, or property of our users or the app.
We keep your data for as long as your account exists. If you delete your account, your personal data — transactions, budgets, receipts, and friends — is permanently deleted. Data you contributed to shared groups may remain visible to other members where it's needed for their own records (for example, a settled balance).
Diagnostic and aggregated analytics data may be retained by our providers for a limited period under their own retention policies.
Depending on where you live, you have the right to:
To exercise any of these, use the in-app controls or email hongkarsern3@gmail.com. We'll respond within the timeframe required by applicable law.
You can delete your account at any time from Settings → Profile → Delete Account in the app. This permanently erases your expenses, budgets, receipts, and friends, and cannot be undone. You may also request deletion by emailing us.
Data is transmitted over encrypted connections (HTTPS/TLS) and stored by our providers with access controls and row-level security, so each user can only reach their own data and the data explicitly shared with them. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
kira is not directed to children under 13, or the minimum age of digital consent in your country. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
Your data may be processed on servers located outside your country, including the United States. Where required, we rely on our providers' appropriate safeguards for such transfers.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top and, where appropriate, notified in the app.