KanakkuKanakku privacy policy
Kanakku turns your bank messages into a short list of expenses for you to check. This page says what Kanakku keeps, where, for how long, who else sees it, and how to get it deleted. If something here is unclear, write to privacy@mykanakku.app.
Who runs Kanakku
Kanakku is run by John Thomas, a person in India, not a company. He decides how your data is used and is responsible for it. The way to reach him about your data is privacy@mykanakku.app.
Kanakku is for people 18 or older.
What Kanakku keeps
About you
- Your email address and name, so you can sign in.
From your bank messages (only if you allow it)
- Only messages from banks and card companies. Never OTPs, offers or personal messages.
- The full text of each bank message.
- What Kanakku reads from it: amount, date, bank, whether money came in or went out, balance, who you paid, the reference number and the account's last digits.
What you add
- Expenses and income, with their descriptions, notes, categories and dates.
- Groups, pots, budgets, month-end checks, recurring bills, accounts and cards (last digits only), investments and settings.
- Names of people you split with. Only names: Kanakku never reads your phone's contacts and doesn't keep other people's phone numbers or email addresses.
From Splitwise (only if you connect it)
- See "Splitwise" below.
What Kanakku doesn't do: no ads, no tracking, no analytics, no location. Your data is never sold.
Why
- To show you your spending, budget and money. That's what Kanakku is for.
- To split expenses with the people you choose, and keep Splitwise up to date if you connect it.
- To send you sign-up and email-change emails.
Nothing else.
When bank messages are read
- When you first allow it: your last 90 days of bank messages.
- After that: each new bank message as it arrives, plus a check every few hours for any missed in the last 3 days.
- When you ask: "Add older", or when you paste or share a message into Kanakku.
- Nothing is added until you check it. Categories are suggested on your phone; nothing is sent anywhere for that.
- If you choose to download "on-device AI", Google's AI runs on your phone to read messages Kanakku couldn't read otherwise. Kanakku doesn't send your messages to Google for this. Google's own terms cover the download.
Where it's kept
- Kanakku's server: run by Supabase, in Sydney, Australia. Your expenses, bank messages and everything above are kept there, so they're on your other devices and in your groups.
- Splitwise: if you connect it, Splitwise is a separate company. It works from the United States and other countries.
- Sign-up emails: sent by Resend, an email company in the United States. It gets your email address and the email.
- On your phone: expenses saved without internet and what the Add screen needs, locked (encrypted) so only your account can open them. They're deleted from the phone when you sign out, and never go into your phone's backup.
India's law allows keeping data outside India unless the Government blocks a country. As far as we know (November 2026), no country has been blocked.
How long it's kept
| What | How long |
|---|---|
| Full text of a bank message | Removed 30 days after it reaches Kanakku |
| Who you paid, reference number, account's last digits | Removed 180 days after you review the message. Messages you never review, and card bill payments, keep them for now |
| Amount, date, bank, in or out, balance from a bank message | Until you delete it or your account |
| Expenses you added, with their descriptions (a description can include who you paid) | Until you delete them or your account |
| Saved categories (they keep a word from the shop's or person's name, like "swiggy") | Until you delete them or your account |
| Edit history: a full copy of each change to your expenses, income, investments and month-end checks | 2 years, or until you delete your account |
| A record of each save (no amounts or text) | 30 days |
| Everything else | Until you delete it or your account |
| Backups | Kanakku doesn't keep backups of the server: none are switched on. Once something is deleted, it can't be brought back. For a few days it can still sit in the database's own files until they're tidied up, where nobody can read it through Kanakku |
| Our host's technical logs (times, which requests were made, sign-ins, errors) | Kept briefly by our host, then deleted |
| Resend's record of emails sent to you (address, subject, time) | As long as Resend keeps it |
Who else sees it
- People in your groups see the expenses you share with them and their shares.
- Splitwise gets what you add to a Splitwise group.
- Companies that run parts of Kanakku for us: Supabase (the server) and Resend (sign-up emails). They get your data because of that job.
- Nobody else, unless the law makes us.
Splitwise
- You connect Splitwise with your own Splitwise code. It's kept locked away (encrypted) and used only to bring in and add your expenses.
- Kanakku copies your Splitwise groups, the names and Splitwise ids of the people in them, your Splitwise friends, the expenses with everyone's shares, and balances.
- What you add to a Splitwise group in Kanakku goes to Splitwise.
- Splitwise has its own privacy policy: splitwise.com/privacy.
- Deleting your Kanakku account doesn't change anything in Splitwise.
- To stop it: delete your Kanakku account. Or remove Kanakku's access in Splitwise's settings. Kanakku then can't reach your Splitwise any more (it may show an error), and what it already copied stays until you delete your account.
How it's protected
- Each person can only read their own data and their groups' shared expenses. This is checked on the server for every request.
- Everything travels encrypted between your phone and the server.
- Your Splitwise code is locked away. Copies on your phone are encrypted with a key that never leaves the phone.
- The data stored on the server's disks is encrypted by our host (Supabase).
- Bank message notifications show the amount and who was paid, also on the lock screen, unless your phone is set to hide notification content.
Your rights, and how to use them
- See your data: Privacy & data → Download my data. You get one file with everything that's yours.
- Correct it: edit any expense, income or setting in the app. For anything you can't edit, write to us.
- Delete it: Privacy & data → Delete my account. It's deleted at once. If you can't use the app, write to privacy@mykanakku.app from the email you sign in with. We reply within 7 days and help you sign in once and delete it in the app.
- Stop reading bank messages: turn off Kanakku's SMS permission in your phone's settings. Messages already in Kanakku stay until you delete your account.
- Name someone to act for you if you die or can't act yourself: write to us with their name and email.
- Another language: this policy is in English. If you need help in another Indian language, write to us and we'll do our best.
- Complain: write to privacy@mykanakku.app. We answer within 30 days. If you're not happy with the answer, you can complain to the Data Protection Board of India.
What stays after you delete your account
- Deleted: your account and everything that's only yours, including your edit history, bank messages, Splitwise code, personal expenses, and groups and pots kept in Kanakku only, with their expenses.
- Stays: groups that update from Splitwise stay for the other people in them, with your name on the expenses you shared. Nothing changes in Splitwise itself.
- Stays: if a friend added your name to their own group, it stays in their account (it's their record).
- Stays: Resend's record of emails sent to you (see "How long it's kept"). There are no backups to clear.
Other people's names
When you split with someone, Kanakku keeps their name (and, from Splitwise, their Splitwise id) in your account only. Nobody else can see your list. If you think Kanakku has your name through someone else and want it removed, write to us.
Children
Kanakku is only for people 18 or older. If we learn that someone under 18 has an account, we'll make sure it's deleted.
If something goes wrong
If your data is leaked or someone gets into it who shouldn't, we'll email you without delay: what happened, what it means for you, what we've done and what you can do. We'll also report it as India's law requires.
Changes to this policy
We'll email you before a change that matters, and the date at the top will change.