Privacy Policy

1. Data stored locally

The following information is stored in the app's private storage on your device unless you choose to export, share, back up, or send it:

• Expense records, including amounts, currencies, dates, categories, notes, places, ratings, deposits, visa details, laundry timing, and cash/card payment method
• Payment card labels you enter, such as card name, color, billing currency, and optional last four digits; Kapunka is not designed to store full card numbers, CVV codes, or online banking passwords
• Cash wallet and safe records, including safe location/passkey notes if you choose to enter them
• Trip setup details, home/local currencies, city lists, packing checklists, visa reminders, notification preferences, and app settings
• Detected wallet payments, pending charges, local notification history, and the on-device Android detection log used for troubleshooting payment detection
• Imported bank statements, parsed statement transactions, scanned receipt images, OCR text, receipt items, and receipt notes
• Photos attached to expenses and photos or videos attached to cool places or trip recaps

2. Accounts and sign-in

You can use Kapunka as a guest, or you can sign in with Apple, Google, or phone/SMS where available. Account services are provided through Supabase and the relevant identity provider.

Account data may include your email address or phone number, provider identifier, authentication session data, consent records for these policies, optional newsletter opt-in, referral records, and your Kapunka access tier. We use this to authenticate you, prevent abuse, provide account-related features, and manage entitlements.

We do not store your trip expenses, receipts, notes, card labels, cash balances, or trip media in Supabase as part of ordinary app use.

3. Google Drive backup

Google Drive backup is optional. If you connect Google Drive and enable backup, Kapunka stores a JSON backup file in your Google Drive app-data folder using the drive.appdata scope. This folder is private to Kapunka within your Google account and is not your general Drive file area.

Backups may include expenses, settings, detected charges, cool places, backup timestamps, and related metadata. Current backups are not intended to upload receipt image files, cool-place video files, or locally stored media bytes, although legacy inline image data or file references may appear in older data. Google processes Drive and account data under Google's own terms and privacy policy.

You can disconnect Google Drive in Settings. Disconnecting stops future backups but does not automatically delete existing files from your Google account.

4. Device permissions

Kapunka asks for permissions only when a feature needs them:

• Location: used for place picking, auto-capturing a suggested expense location, nearby place search, local currency detection, maps, and country detection. Kapunka does not track your location in the background.
• Camera and photo library: used when you scan receipts or attach selected photos/videos. Kapunka does not browse your library in the background.
• Notifications: used for local reminders, detected-payment alerts, checklist reminders, visa reminders, laundry reminders, and low-wallet alerts.
• Android notification access: optional, used to detect payments from supported wallet apps. Matching wallet-payment content can be stored locally for review; non-payment content is ignored or discarded except limited on-device troubleshooting logs for wallet-looking notifications.
• Files/document picker: used when you import or export backup files, bank statements, receipts, or PDFs selected by you. The optional flight playlist feature only accesses the music folder you point it at.

5. Maps, places, rates, and parsing

Some features use network services. Place search can send your search text, approximate location, language, and map requests to Apple Maps search (on iOS), Google Maps and Google Places (on Android, proxied through our servers), Photon/Komoot, OpenStreetMap tile providers, Mapbox (for map recap views), or device geocoding services.

Exchange rates may be fetched from open.er-api.com and Frankfurter. These services receive ordinary request data such as IP address and requested currency/date, but Kapunka does not send your expense list to them.

OCR, PDF reading, bank statement parsing, duplicate matching, and receipt parsing are designed to run on-device. The files you choose for those tools are not uploaded to us for parsing.

6. Usage statistics

Kapunka collects a small amount of aggregate usage information through Expo's EAS Insights service: app launches, app version, platform, and coarse device/region information. This helps us see whether updates are stable and which versions are in use.

These statistics are aggregate, are not used to build profiles, and are not intended to include expense amounts, notes, card numbers, receipt text, cash balances, detailed locations, photos, videos, statements, or detected payment content.

We do not use advertising networks, sell personal information, or share personal information for cross-context behavioral advertising.

7. Support

If you contact support by Telegram, email, or another channel, we receive the information you send. Telegram support may also provide your Telegram user ID, username, full name, message type, attachments you choose to send, app version, platform, language, entry point, and an app-generated support ID.

Support tickets are used to respond to you, investigate issues, prevent abuse, and improve support quality. Do not send passwords, full card numbers, banking credentials, or other highly sensitive information in support messages.

8. Third-party services

Kapunka may interact with these third-party services depending on the features you use:

• Supabase for authentication, sessions, profiles, entitlements, consent records, referrals, and phone OTP
• Apple and Google for sign-in; Google also for Google Drive backup and Google Maps/Places
• Expo (EAS Insights) for aggregate usage statistics and app updates
• Telegram and email providers for support communications
• Apple Maps, Photon/Komoot, OpenStreetMap, Mapbox, device geocoding providers, and maps apps for place and map features
• open.er-api.com and Frankfurter for exchange-rate data
• Apple App Store, Google Play, and payment processors for purchases, subscriptions, refunds, and store-related records where applicable

9. Retention and deletion

Local trip data remains on your device until you delete it in the app, uninstall the app, clear app data, or restore/replace it with another backup. Deleting the app usually removes local Kapunka data from that device.

Google Drive backups remain in your Google account until you delete them or request deletion where we can assist. Supabase account, profile, referral, consent, and support records are retained as needed to provide the service, prevent fraud, comply with legal obligations, resolve disputes, and enforce our terms. We aim to process deletion requests within 30 days unless a longer period is required or permitted by law.

10. Your choices and rights

You can use Kapunka as a guest, decline permissions, disconnect Google Drive, export or delete local data, delete support messages where the platform allows it, and request deletion of account/support records by contacting us or from the account deletion page. Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of personal information.

11. Security

We use reasonable technical and organizational measures for the services we operate, but no app, device, network, or third-party provider can be guaranteed completely secure. You are responsible for your device security, account credentials, Google/Apple/Telegram accounts, and any backup files you export or share.

12. Children

Kapunka is not directed to children under 13 or to children below the age of digital consent in their location. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. We will update the date above and, where appropriate, provide notice in the app or on the website. Continued use of Kapunka after an update means you accept the updated policy.

14. Contact

Questions, privacy requests, or deletion requests:

privacy@kapunka.app