1Data summary
Everything Kaya handles, in one table.
| Data | Why | Where it’s kept | Shared with |
|---|---|---|---|
| Name & email | Sign-in and account recovery | Firebase Authentication | Google (Firebase); Apple, if you use Sign in with Apple |
| Financial entries | Your balances, budgets and reports; backup & restore | Your phone, plus a private cloud backup when signed in | Google (Firebase), as a processor only |
| PIN | Locks the app | Your phone’s secure storage only | No one |
| Profile photo | Your avatar in the app | Your phone only | No one |
| Face ID / fingerprint | Quick unlock | Handled by your phone; Kaya never receives it | No one |
| Currency-rate request | Daily rates for the OFW view | Not stored | ExchangeRate-API (no personal data sent) |
2What we collect
- Account details: your name and email address when you create an account with email, Google, or Apple (Apple sign-in is on iPhone only). If you use Apple’s “Hide My Email”, we only receive the relay address.
- Financial entries: what you type into the app, like wallets and balances, transactions and notes, budgets, savings goals, bills, recurring items, utang and installments, and split-bill records.
Kaya does not connect to your bank or e-wallet and never sees your bank login. Wallet names like GCash or BDO are labels you choose, and balances are numbers you enter.
3What stays on your device
- PIN: stored in your phone’s secure storage (iOS Keychain or Android secure storage). It is never sent to us or to the cloud.
- Face ID / fingerprint: handled entirely by your phone’s operating system. Kaya only learns whether unlocking succeeded.
- Profile photo: optional, and saved only on your phone.
- Reminders: bill and daily reminders are scheduled locally on your phone.
4How we use it
- To sign you in and keep your account secure.
- To back up your entries and restore them when you sign in on another phone.
- To show your balances, budgets, insights, and reports inside the app.
We don’t use your data for advertising or profiling, and we don’t sell it.
5Storage & service providers
When you’re signed in, your entries are backed up to a private record linked to your account. Access is restricted so only your signed-in account can read or change it, and data is encrypted in transit (HTTPS). We use these providers only to run the app:
- Google Firebase (Authentication and Cloud Firestore): sign-in and cloud backup.
- Google Sign-In and Sign in with Apple: only if you choose them.
- ExchangeRate-API (open.er-api.com): daily currency rates. The request contains no personal or financial data.
We don’t share your data with anyone else unless required by law.
6Payments
Kaya is a one-time purchase through the App Store or Google Play. Apple or Google processes the payment under their own privacy policies. We never receive your card or payment details.
7Sharing you control
PDF and CSV reports are created on your phone. They are only shared when you choose to send or save them using your phone’s share sheet.
8Keeping & deleting data
- Your cloud backup is kept for as long as your account exists.
- Delete in the app: Me → Delete account permanently deletes your account, your cloud backup, and the data on that phone.
- Logging out keeps your entries on that phone. Uninstalling the app removes them from that phone.
9Your rights
You can view, edit, export (CSV or PDF), and delete your data in the app at any time. Under the Philippine Data Privacy Act of 2012 (RA 10173) and similar laws, you may also request access to, correction of, or deletion of your personal data by emailing us.
10Children
Kaya is not directed to children under 13, and we don’t knowingly collect their data.
11Changes
If we change this policy, we’ll update this page and the effective date above. Major changes will also be noted in the app’s release notes.
Kaya is developed by Joselito Bacolod. Email us and we’ll get back to you.