1. Introduction
Kashy ("we", "our", or "Kashy") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our application and services.
This policy complies with the General Data Protection Law (LGPD - Law No. 13.709/2018) and other applicable legislation.
2. Data We Collect
2.1 Data provided by you
- Registration data: name, email address, and password
- Financial data: budgets, categories, transactions, debts, savings goals, and contributions
- Profile data: profile photo (optional), language preferences, currency, and timezone
- Partner data: email of invited partner (when applicable)
2.2 Data collected automatically
- Device data: device type, operating system, and application version
- Usage data: information about how you interact with the application
- Authentication tokens: to keep your session active securely
3. How We Use Your Data
We use your personal data for the following purposes:
- Service provision: manage your budget, transactions, debts, and financial goals
- Authentication: keep your account secure and allow access to the application
- Partner functionality: allow sharing of financial data with your partner
- Communication: send verification emails, password reset, and important notifications
- Service improvement: analyze usage to improve user experience
4. Legal Basis for Processing
The processing of your personal data is based on the following legal bases of the LGPD:
- Consent (Art. 7, I): by accepting this policy during registration
- Contract execution (Art. 7, V): for the provision of contracted services
- Legitimate interest (Art. 7, IX): for service improvement and security
5. Storage and Security
- Your data is stored on secure servers with encryption
- Passwords are stored with hash (bcrypt) and never in plain text
- We use HTTPS for all communications between the application and our servers
- Authentication tokens have limited validity
- Profile photos are stored securely with controlled access
6. Data Sharing
We do not sell, rent, or share your personal data with third parties, except:
- Partner: when you invite a partner to share budget access
- Legal obligation: when required by law or court order
- Service providers: essential services for operation (hosting, transactional email), under confidentiality agreements
7. Your Rights (LGPD)
According to the LGPD, you have the right to:
- Access: know what personal data we hold about you
- Correction: correct incomplete or outdated data
- Deletion: request deletion of your personal data
- Portability: receive your data in a structured format
- Consent revocation: withdraw your consent at any time
- Information: be informed about the sharing of your data
To exercise your rights, contact us by email: [email protected]
8. Account and Data Deletion
You can request deletion of your account at any time directly through the application, in the Settings section. When you delete your account:
- Your account will be deactivated immediately
- Your data will be permanently removed after 30 days
- Partner links will be undone
- All access tokens will be revoked
9. Data Retention
- Active account: data is kept while your account is active
- Deleted account: data is kept for 30 days after deletion (recovery period) and then permanently removed
- Anonymized data: may be kept for statistical purposes
10. Cookies and Similar Technologies
The Kashy mobile application does not use cookies. We only use authentication tokens stored securely on the device to maintain your session.
11. Minors
Kashy is not intended for persons under 18 years of age. We do not intentionally collect data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through the application or by email. Continued use of the service after changes constitutes acceptance of the updated policy.
13. Contact
For questions, requests, or complaints about this Privacy Policy or the processing of your personal data: