Privacy policy

What we collect

Your email address, to sign you in and to send you sign-in links and the occasional notice about your account. If you sign in with Google, we receive the name and email Google shares.

What you put in: expenses, budgets, categories, notes, and the receipts and statements you upload. That is the product — we store it so you can see it.

If you subscribe, Stripe handles payment. We never see or store your card number; we keep a reference to your Stripe customer and the state of your subscription.

Technical basics: a session cookie so you stay signed in, your country choice, your time zone, and standard server logs (IP address, browser, time of request) kept briefly for security and debugging. No advertising trackers.

How the reading works

When you upload a receipt or a statement, Pipa sends that file to Anthropic's Claude API to read the transactions out of it. Anthropic processes it to return the result and, under its API terms, does not use it to train its models. Nothing is sent to any model unless you upload it.

We never connect to your bank, never ask for banking credentials, and never scrape an account. Everything in the app got there because you added it.

Who can see it

The people in your space. Everyone you invite sees the same expenses and budgets; that is what a shared space is. Each space is isolated from every other at the database level.

The services we run on, each of which only handles what it needs to: Supabase (database and file storage), Vercel (hosting), Anthropic (reading uploads), Stripe (payments), and Google Workspace (sending email). We don't sell data, share it with advertisers, or hand it to anyone else, except where the law requires it.

How long we keep it

For as long as you have an account. Expenses you delete in the app are kept in the database for up to 90 days so support can recover an accident, then removed. Uploaded receipts are kept until you delete your account, so a removed receipt reference can be restored on request.

If your subscription or trial ends, nothing is deleted — your data waits, read-only, for as long as your account exists.

Your rights

Delete your account from Settings → Account, or from support@kadeworksllc.com if you can't sign in. Deletion is immediate and complete: your sign-in, your space and everything in it. If other people share your space, the space stays with them and the longest-standing member becomes its owner.

You can also ask us for a copy of your data, or to correct it, at support@kadeworksllc.com. If you're in the EU, the UK or Brazil, these are the rights the GDPR, the UK GDPR and the LGPD give you, and we honor them for everyone regardless.

Children

Pipa is for adults managing their own money. We don't knowingly collect anything from anyone under 18; if we learn we have, we delete it.

Changes

If this policy changes in a way that matters, we'll say so in the app before it takes effect. The date at the top is the date of the current version.