Privacy Policy

What we collect

When you sign in and use kasama.loan, we collect:

• Basic profile from Google. When you sign in with Google, we receive your name, profile picture, a unique account identifier, and your email address. We never ask for your password.
• Your email address. We store your Google-verified email and keep it private by default. It appears on a specific loan document only with your consent for that loan — a debtor agrees to display it when accepting the loan, and a lender opts in with a checkbox when generating a document. It is otherwise used only to identify your account.
• Ledger content you create. The debts, loans, repayments, and group splits you record, including amounts, descriptions, dates, and the names of the people you transact with.
• Contacts you add. People you add to your ledger so you can record loans with them, including anyone you invite through a guest link or QR code.
• Images you choose to upload. Optional photos you attach to a transaction (for example, a receipt or proof of payment). These are temporary — see How long we keep it below.
• A session cookie. A signed cookie that keeps you logged in. It is required for the app to work and is not used for advertising or cross-site tracking.

How we use it

• To create your account and show who you are within the app.
• To record, display, and verify the loans and repayments you log.
• To support the two-way confirmation flow — the person on the other side of a transaction sees the entry so they can confirm or dispute it.
• To keep the service secure and working correctly.

We do not sell your data, use your ledger content (your loans, amounts, or the people you transact with) to target ads, or post anything to your Google account on your behalf. The free tier may be supported by third-party ads in future — see Advertising below.

Advertising

kasama.loan is free to use. We do not serve ads at present. We may introduce ads on the free plan in future through third-party partners such as Google AdSense. If we do, those partners may use cookies, device identifiers, or similar technologies to serve and measure ads, including based on your activity on this and other sites — and the terms below will apply.

• We do not share your ledger content, email, or the identities of people in your ledger with advertising partners.
• We are not currently serving ads on kasama.loan. If and when we do, Pro members will see none.
• You can control personalized advertising in Google Ad Settings, and opt out of many third-party ad cookies at youradchoices.com (or youronlinechoices.eu in the EU).
• For how Google’s partners use data, see Google’s partner-sites policy.

What others can see

kasama.loan is shared by design: when you record a loan with another person, that person can see the transaction details (amount, description, date, and your display name) so they can confirm it. People you add as contacts may see your display name and profile picture. Your full ledger is otherwise private to you.

Where your data is stored

Your data is stored on Cloudflare’s infrastructure (databases and file storage). Uploaded images are kept in private storage and served only to authorized users of the app.

How long we keep it

Your ledger records — loans, repayments, and settled records — are kept for as long as your account is active, so your history stays intact. Images you upload are temporary and deleted automatically once they have served their purpose:

• Payment proofs (a screenshot you attach when marking a loan paid) are deleted about 7 days after the loan is settled — once the other person has had the chance to confirm the payment.
• Loan receipts (a photo you attach to a loan) are deleted about two weeks after the loan is settled, forgiven, or cancelled — or after 90 days of inactivity.
• There is no “keep forever” setting for images. If you want to keep one, use the Download button on it before it is cleared.

Shareable links expire on their own too: an invite / claim link stops working after 36 hours, a reminder link after 60 days, and an entry the other person never accepted is dropped after 30 days.

Your choices

• Export your data (self-serve). Any time, you can download everything we hold for you — your profile, full ledger, contacts, circles, and events — as a single JSON file from the menu (Export my data). No request or waiting needed.
• Deletion. You can ask us to delete your account and associated ledger data by emailing us (see below).
• Revoke login access. You can disconnect kasama.loan at any time from your Google Account permissions page.

Children

kasama.loan is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

We may update this policy as the app evolves. When we do, we’ll revise the “Last updated” date above.

Contact

Questions, data requests, or account deletion: email contact@kasama.loan.