Privacy Policy

Last updated: 2026-10-07

1. Introduction

Kakeibo (“we”, “us”, “our”) operates a personal-finance service available through our web application and mobile app (the “Service”). This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights you have over your data.

The Service is operated by AlphaBlue Thailand and is available at kakei.io.

By creating an account or using Kakeibo, you agree to the practices described here. If you do not agree, please do not use the Service. This policy should be read together with our Terms of Service.

2. Information we collect

Account information

  • Email address (required to sign in)
  • Display name (optional, used to attribute transactions in shared teams)
  • Language preference and base currency (used to localize emails and amounts)

Authentication data

We do not store passwords. Sign-in is passwordless. We hold:

  • One-time codes (OTP) sent to your email — short-lived and single-use
  • Magic-link tokens — short-lived and single-use
  • Web session and CSRF data used to keep the browser session secure
  • Personal access tokens for the mobile app — revocable when you sign out or we invalidate them

Financial data you create

  • Transactions (amount, date, description, category, currency, exchange rate)
  • Accounts (name, type, balance)
  • Categories and tags
  • File attachments uploaded to transactions (for example, receipts)
  • Team memberships, roles, and account-sharing settings

Payment information

If you subscribe to a paid plan, we use Stripe to process payments. We do not store full card numbers. Stripe stores your payment method details and provides us with billing metadata such as a customer reference, card brand, last 4 digits, expiry, and billing country.

Usage and device data

  • IP address, browser, device type, operating system
  • Cookies, session storage, and local storage needed to operate the app and preserve your preferences, such as session state, CSRF protection, locale preference, invitation handoff, active team selection, and transaction view mode

3. How we use your information

  • Provide and operate the Service, including sign-in, synchronization, and dashboards
  • Send transactional emails such as sign-in codes, magic links, invitations, and billing notices
  • Detect and prevent abuse, fraud, unauthorized access, and other security incidents
  • Provide support, troubleshoot issues, and maintain service reliability
  • Comply with legal obligations

We do not sell or rent your information. We do not use your financial data to train machine-learning or AI models.

4. How we share information

We share data only with:

  • Service providers that help us operate, such as hosting providers, email delivery providers, file-storage providers, and payment processors. They may process your data only as needed to provide services to us.
  • People you authorize — anyone you invite into a shared team can see the accounts and transactions you have explicitly shared with that team. Private accounts remain private.
  • Legal authorities when required by valid legal process, or to protect rights, safety, or property.

In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity with notice to you and the same privacy commitments.

5. Where we store data

Kakeibo uses a split infrastructure. Our backend runs on self-managed server infrastructure, our web frontends are served through Cloudflare, uploaded receipt files are stored through Cloudflare R2, and payment data is handled by Stripe. We use TLS to protect data in transit. Some data may therefore be processed in the countries where these providers operate.

6. How long we keep data

  • Active accounts: indefinitely, until you delete them.
  • Deleted accounts: we may retain data for a limited period to complete the deletion workflow, prevent abuse, resolve disputes, or comply with legal obligations such as tax and billing retention requirements.
  • Authentication data: OTP and magic-link tokens expire automatically; web sessions end when they expire or you sign out; mobile access tokens remain valid until revoked or deleted.

7. Your rights

You can:

  • Access your data through the dashboard and settings.
  • Export your data in a structured format through Settings; we will send a download link to your email.
  • Correct inaccurate information directly in the app.
  • Delete your account through the self-service Settings flow described below.
  • Object to specific processing or withdraw consent by contacting us.

If you reside in the EEA, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, or CCPA — including the right to lodge a complaint with your local data-protection authority.

Account deletion and retained records

Request account deletion in Settings in the web dashboard or mobile app. Confirm with a dedicated email code. No support ticket, survey, payment or staff approval is required. Exporting your data first is optional.

The default cancellation period is seven days (168 hours). Ordinary account access is disabled when the request is accepted. You can return using email verification to view status, explicitly cancel before the displayed deadline, or choose Skip waiting and start deletion with a second confirmation. Signing in alone does not cancel deletion.

Skipping the wait ends cancellation immediately and queues permanent cleanup; it does not mean your files have already been removed. After the seven-day cancellation period ends, or after you choose Skip waiting, live-system cleanup normally finishes within 24 hours. Data and uploaded files are cleared asynchronously. Delayed requests remain in processing, failures retry automatically, and we email a completion notice when required live-system cleanup has finished.

Before requesting deletion, leave shared households. If you own a household with other members, transfer ownership to an existing member and leave using the actions on the deletion screen. A household you own alone is deleted with your account. Cancelling deletion does not undo transfers or household departures.

Personal bookkeeping records and uploads are deleted. Other members' necessary shared household ledger dates, amounts, currencies and reporting context remain, with your identity replaced by Deleted member. Your private source links, attachments and unnecessary personal text are removed. Other members' own private records are not deleted.

Future Kakeibo billing is stopped through the payment provider from request acceptance. Account deletion does not automatically refund earlier payments; the existing sales and refund policy applies. Cancelling deletion does not automatically restart renewal or restore revoked credentials.

Minimal payment and deletion records may be retained for applicable legal obligations and to prevent deleted data from being reactivated during recovery. Backups do not disappear immediately; restricted backup copies expire under the applicable retention schedule. Before a restored system resumes service, retained deletion facts are reapplied. Ordinary marketing, login and reminder messages are stopped during deletion; deletion-verification and completion messages remain available.

8. Children

Kakeibo is not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with information, contact us at [email protected] and we will delete it.

9. International transfers

If you are located outside the countries where our infrastructure or service providers operate, your data may be transferred internationally. Where required, we will rely on contractual or other lawful safeguards for those transfers.

10. Cookies

We use essential browser storage needed to operate the Service:

  • Authentication session cookie for the web app
  • CSRF protection cookie for secure web requests
  • Locale preference and other UX preferences such as transaction view mode
  • Temporary browser storage that helps complete invitation and team-selection flows

We do not run third-party analytics, advertising, or cross-site tracking. We may add privacy-respecting analytics in the future and will update this policy if we do.

11. Changes to this policy

We may update this Privacy Policy. If changes are material, we will notify you by email and/or via an in-app notice at least 90 days before they take effect.

12. Contact

Questions, requests, or complaints: