Privacy Policy

What we collect

• Account information. Your name and email address, from the Google or Apple account you sign in with. We do not receive or store your password. If you use Apple's Hide My Email, we receive only the relay address Apple gives us.
• Card transactions. When you connect a credit card, we receive its transactions (merchant, amount, date, category) and basic account details (name, type, and last four digits) through Plaid. We never see or store your bank username, password, or full card number.
• Receipts from your email. If you choose to connect Gmail, we read your email with read-only access to find receipts and order confirmations. We store the details we extract from them (merchant, date, totals, and line items), plus the sender, subject, and message identifier. We do not store the body of your emails.
• Receipts you add. Photos and PDFs of receipts you take or upload, and the details we extract from them.
• Photos on your phone. If you turn on receipt detection in the iOS app, your photo library is checked on your device. Nothing from your library is uploaded unless you choose a specific photo.
• Receipt requests. If you ask a merchant for a receipt through k'neeya, we store the request email and any reply. Sending from your Gmail address requires a separate permission that you grant only if you use this feature.
• Order details from the browser extension. If you install the optional extension, it retrieves item details for your own orders from Amazon, Uber, and Uber Eats using your signed-in browser session, and sends them to k'neeya to add to your receipts.
• Technical information. Your IP address and browser or device type when you sign in, and standard server logs, used to keep the service secure and working.

How we use it

• To match your card transactions to your receipts and show you what you bought.
• To identify merchants and categorize purchases.
• To sign you in, keep your account secure, and respond to your requests.
• To fix problems and improve how k'neeya works.

We do not sell your information, share it for advertising, or use it to show you ads.

Plaid

We use Plaid Inc. to connect your credit card accounts. By connecting an account, you grant k'neeya and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. Your information is transferred, stored, and processed by Plaid in accordance with the Plaid End User Privacy Policy.

Google user data

k'neeya's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Gmail access is optional and is used only to find and read receipts for you.
• We do not use Gmail data for advertising, and we do not sell it or transfer it to others except as needed to provide k'neeya's features to you, to comply with the law, or as part of a merger or acquisition with notice to you.
• We do not use Gmail data to develop, improve, or train generalized artificial intelligence or machine learning models.
• No person reads your email, unless you ask us to for support, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.

You can remove k'neeya's access at any time from your Google Account permissions.

Automated processing

k'neeya uses AI models to read receipts, match them to transactions, and look up merchants. To do this, we send the content of a receipt, or a merchant name from your card statement, to our AI providers. They process it only to return a result to k'neeya and are not permitted to use it to train their models.

Who we share it with

We share information only with the service providers that run k'neeya, and only as needed for them to do so:

• Vercel, for hosting, file storage, and routing requests to AI providers.
• Neon, for our database.
• Plaid, for connecting your card accounts.
• Google, for sign-in and, if you connect it, Gmail.
• Apple, for Sign in with Apple and distributing the iOS app.
• Anthropic, for reading and matching receipts.
• Perplexity, for looking up merchants by name.

We may also disclose information when the law requires it, or as part of a merger or sale of k'neeya, in which case we will notify you first.

How long we keep it, and how to delete it

• We keep your information while your account is active.
• Removing a receipt in k'neeya deletes its file immediately. We keep a minimal record that it was removed, so it is not imported again.
• You can delete your account and all of your data at any time under Settings, in the app or on the website. You can also email h@kneeya.com from the address on your account, and we will do it within 30 days. Deleting your account removes your card connections from Plaid, revokes our access to your Google account, deletes your receipt files, and deletes your account and everything linked to it.
• Deleted data may remain in encrypted backups for a short period before it is overwritten.

Security

All connections to k'neeya use encryption in transit (TLS). Data is encrypted at rest, and the tokens that let us reach your card and Google accounts are additionally encrypted by k'neeya before they are stored. Receipt files are kept in private storage and are only available to you. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects it.

Your choices and rights

• You can disconnect Gmail, remove receipts, and turn off photo detection at any time.
• You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by emailing h@kneeya.com. We respond within 30 days.
• Depending on where you live, including California, you may have additional rights under local privacy laws. We do not sell or share personal information as those laws define it, and we will not treat you differently for exercising your rights.

Children

k'neeya is not intended for anyone under 18, and we do not knowingly collect information from children.

Where your data is processed

k'neeya and its service providers process and store information in the United States.

Changes to this policy

If we make material changes, we will update the date above and notify you in the app or by email before the changes take effect.

Contact

Harel Williams, k'neeya · h@kneeya.com