Privacy Policy
Last updated: 27 September 2026 · Version 2.0
This policy explains what personal data Kesefy (“we”) collects when you use kesefy.app and the tools that go with it (the “Service”), why, who we share it with, how long we keep it, and the rights you have. It is written to meet the EU General Data Protection Regulation (GDPR), the Israeli Protection of Privacy Law 5741-1981 including Amendment 13, and US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).
1. Who we are
- Controller: Giora Glovatsky, trading as GioFoundry, operating Kesefy from Israel.
- Address: Israel; the postal address is given on request by email.
- Email for privacy matters and rights requests: support@kesefy.app.
- No data protection officer is required at our size; the email above reaches the person responsible.
2. What we collect, why, and on what basis
| Data | Where it comes from | Why we use it | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| Account: email, display name, a hashed password, or the name, email and picture your Google account shares when you sign in with Google | You, or Google with your authorization | Create and secure your account, sign you in, answer you | Contract (art. 6(1)(b)) | Life of the account |
| Your financial records: accounts and balances, transactions, categories, budgets, goals, debts, reimbursements, trips, investments, deposits, assets, coupons and warranties, and the notes and receipts you attach | You: typed in, imported from a file or card statement you upload, or posted by a tool you run (the iPhone Shortcut, the statement job) | Show your finances back to you: balances, reports, forecasts, reminders | Contract; your explicit consent to our holding financial data, given when you create the account | Until you delete the record or your account |
| Card statements you upload (PDF or Excel) | You, or the statement tool on your own computer | Read the transactions on them and reconcile them with what you recorded | Contract | The file is read in memory and not kept; the transactions from it are kept like any other |
| People you mention: names of people who owe you or whom you owe, people you split trips with, and, if you enter them, their emails; guests you invite by link | You | Track reimbursements, shared budgets and trip splits | Legitimate interest of you and us in running those features (art. 6(1)(f)); you confirm you may share it | Until you remove them or delete your account |
| Text you send to AI features: the Ask AI assistant, Smart Import, category suggestions for a payee | You | Produce the answer, the draft import or the suggestion you asked for | Contract | Kesefy keeps the assistant conversation you can see; our AI provider’s retention is described in section 4 |
| Billing: whether you have a trial or a subscription, its status and dates, and an identifier from our payment provider. Card numbers never reach us | You and Lemon Squeezy | Know what you may use; keep accounting records | Contract; legal obligation (tax and accounting law) | Subscription records for 7 years as the law requires |
| Technical data: IP address, browser and device type, timestamps and error logs | Your device, automatically | Keep the Service secure and working, limit abuse, debug problems | Legitimate interest: security and reliability | Hosting logs for up to 30 days; rate-limit counters for minutes |
| A personal token you can create in Settings for the iPhone Shortcut and the statement tool | Generated for you | Let those tools post to your account without a browser | Contract | Until you regenerate it; only a hash is stored |
| Support email you send us | You | Answer you | Legitimate interest: customer service | 24 months |
We collect nothing beyond this. We do not sell personal data, do not share it for advertising, and do not profile you for any purpose other than the features you use.
If you refuse to provide data. An email and a password (or a Google sign-in) are required to have an account; without them we cannot create one. Everything else is what you choose to record.
Sensitive data. Your financial records are treated as especially sensitive information under Israeli law and are held with the measures in section 8. We do not ask for health, biometric, religious, political or precise location data, or for government ID numbers. The optional statement tool keeps your ID number on your own computer only; it never reaches us.
If someone else entered your details. A Kesefy user may have added your name, and perhaps your email, to record money owed between you or to split a trip. We got it from that user, we use it only for that purpose, and you can ask us at support@kesefy.app to see, correct or delete it or to object. We tell users they must have your permission before adding you.
3. Cookies and browser storage
We use only what is needed to keep you signed in and to remember your own settings, as listed in the Cookie Policy. There are no analytics or advertising cookies, so there is nothing to consent to and no banner. If your browser sends the Global Privacy Control signal there is nothing to opt out of; we never sell or share data.
4. Who we share data with
These providers process data on our behalf, only to provide their part of the Service:
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting and running the application | Frankfurt, Germany (EU); Vercel is certified under the EU-US Data Privacy Framework |
| MongoDB, Inc. (Atlas) | The database that holds your records | Frankfurt, Germany (EU) |
| Cloudflare, Inc. (R2) | Storing receipts and attachments, and daily backups of your data | Western Europe (EU); Cloudflare is certified under the EU-US Data Privacy Framework |
| Google LLC | Sign in with Google, if you use it; the Gemini API for the AI features, which receives only the text those features work on | United States; EU-US Data Privacy Framework |
| Lemon Squeezy, LLC | Checkout, payment, invoices and taxes for paid plans, as merchant of record: your purchase contract for the subscription is with them | United States |
AI features send only the text they need, for the moment they need it: what you type to the assistant, the spreadsheet or statement you ask Smart Import to read, a payee name for a category suggestion. We do not use your data to train models. Kesefy uses the Gemini API through a paid, billing-enabled project, and under Google’s API terms prompts sent through a paid project are not used to improve Google’s products. Only the text a feature needs is sent, never your account or your full records. We may also disclose data if the law requires it, to protect the Service from abuse, or to a successor if Kesefy changes hands, with notice to you.
5. International transfers
Your records live in the European Union. Israel is recognised by the EU as providing adequate protection, and the EU is recognised by Israel, so data moves between them lawfully. Where a provider in the United States is involved (Google, Lemon Squeezy, and Cloudflare’s or Vercel’s US operations), the transfer rests on the EU-US Data Privacy Framework where the provider is certified and otherwise on the European Commission’s standard contractual clauses in the provider’s terms. Israeli law: we inform you here that data is transferred abroad under these safeguards.
6. How long we keep data
- Your records: while your account exists. Delete any record at any time in the app.
- Your account: until you delete it in Settings or ask us to. Deletion removes your records, attachments and backups; subscription records that tax law requires us to keep are kept for 7 years, separated from anything else.
- Backups: a rolling 30 days, then overwritten.
- Hosting and security logs: up to 30 days.
- Support correspondence: 24 months.
7. Your rights
Wherever you live you can access, correct, export and delete your data, restrict or object to processing, and withdraw consent without affecting what was done before. Under the GDPR you may also complain to a supervisory authority; under Israeli law to the Privacy Protection Authority; under the CCPA you may ask what we collect and have it deleted, and we will never discriminate for exercising a right.
- Export: Settings → Export downloads everything as one file.
- Delete: Settings → Delete account removes everything, at once.
- Anything else: support@kesefy.app. We answer within 30 days (45 for CCPA requests) and may ask you to confirm it is you.
8. Security
Connections are encrypted (HTTPS with HSTS). Passwords are stored as bcrypt hashes and personal tokens as SHA-256 hashes. Data is encrypted at rest by our hosting and storage providers. Sign-in and the API are rate limited. Only the operator has access to production, from named accounts. No system is perfectly secure; if a breach ever puts your data at risk we will tell you and the authorities the law names, without undue delay.
9. Children
The Service is for adults. You must be 18 or older to create an account, and we do not knowingly collect data from anyone younger. If you believe a child has an account, tell us and we will delete it.
10. Automated decisions
Kesefy suggests categories and matches statement rows to what you recorded. These are suggestions and bookkeeping, always visible and always yours to change; no decision with legal or similar effect on you is made automatically.
11. Changes
We may update this policy. The date and version at the top say when. For a material change we will tell you in the app or by email before it takes effect.
12. California notice at collection
Categories collected: identifiers (email, name), financial information you enter, internet activity (technical data above), and inferences limited to category suggestions. Purposes: as in section 2. We do not sell or share personal information, and we offer no financial incentives for it. Retention: as in section 6. Rights: section 7.
13. Contact
Giora Glovatsky · Israel; the postal address is given on request by email · support@kesefy.app. See also the legal notice.