Privacy Policy for Kualia

Last Updated: September 23, 2026

Introduction

Kualia ("we," "our," or "us"), operated by Kualia, Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance and envelope budgeting service.

Information We Collect

Information You Provide to Us

Account Information

• Email address
• Name
• Password (encrypted)

Financial Data

• Bank account connections and transaction data
• Apple Wallet financial data you choose to share through FinanceKit, including selected account details, balances, transactions, transaction dates, transaction descriptions, merchant information, account and transaction identifiers, and balance timestamps
• Income and expense records
• Budget categories and spending targets
• Subscription and recurring transaction details
• Custom categories and tags
• Transaction notes and descriptions

Communication Data

• Support emails sent to support@kualia.com
• Feature requests and feedback
• Chat messages with our support team

Information Collected Automatically

Usage Information

• Service requests and technical information needed to operate the app
• Device information included in error and diagnostic reports
• IP addresses processed by hosting providers to deliver and protect the service
• Essential cookies for sign-in and privacy preferences
• Marketing website visits and advertising measurement as described below

Technical Data

• Application logs
• Error reports and debugging information
• Performance metrics

How We Use Your Information

We use your information to:

• Provide and maintain our service: Process your financial data, generate insights, and display your dashboard
• Improve our product: Analyze usage patterns to enhance features and user experience
• Communicate with you: Send service notifications, respond to support requests, and provide product updates
• Detect and prevent fraud: Monitor for suspicious activity and protect against unauthorized access
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests
• Send notifications: Deliver alerts about new transactions, upcoming recurring charges, and anomaly detection (via email, Slack, or webhooks as configured)

Apple Wallet and FinanceKit

If you use Kualia's Apple Wallet connection in the iOS app, you may authorize Kualia to access eligible Apple Wallet financial accounts, including Apple Card where available, through Apple's FinanceKit framework. You choose which accounts to share with Kualia and may manage or revoke that access in iOS Settings.

When you connect an Apple Wallet account, Kualia uses the data you authorize to create or link the selected account, import balances, sync transaction history and updates, categorize transactions, and show your budget and account activity. Kualia does not receive your Apple ID password, Wallet passcode, full card number, card credentials, or payment credentials.

Revoking Apple Wallet access stops future FinanceKit syncing. Data that was already imported into Kualia remains in your Kualia account until you delete the connected account, delete the imported data where the product allows it, or request account deletion.

Third-Party Services

Kualia integrates with the following third-party services:

Convex - Our backend infrastructure provider that stores and processes your data

Plaid or similar financial aggregation services - For connecting your bank accounts and retrieving transaction data (if applicable)

Apple Wallet and FinanceKit - For reading selected eligible Apple Wallet account, balance, and transaction data that you authorize in the iOS app

Loops Email - For sending notification emails

PostHog - I use PostHog for product analytics on the website, web app, and server. Browser analytics includes page visits, feature usage, and marketing link clicks. Signed-in activity is associated with an account identifier. Automatic capture of page content and form inputs is disabled for product analytics. Financial records and chat content are excluded from browser analytics events. Optional masked session replay on the website and web app starts only after you accept non-essential cookies.

Sentry - For error tracking and monitoring application performance to identify and fix bugs

Large Language Model (LLM) providers - We use LLM providers (including Anthropic, OpenAI, and similar services) for three distinct purposes, each with different data-sharing characteristics:

• Automated categorization and analysis: We send merchant names and transaction amounts to LLM services to categorize and analyze transactions. This data is sent without user identifiers and is not associated with your account when sent.
• In-app AI Chat: If you use the AI Chat feature inside Kualia, the questions you ask and the relevant portions of your financial data (such as transactions, budgets, categories, and reports) are sent to the LLM provider that powers the feature so the model can answer your questions. This data is associated with your session for the purpose of the conversation.
• MCP server (third-party AI assistants): If you connect Kualia to an outside AI assistant (for example Claude, ChatGPT, Cursor, or Perplexity) via our Model Context Protocol server, that assistant can query your financial data on your behalf. When it does, the relevant data is sent to whichever AI provider you have chosen to use. That provider then handles your data under their own terms and privacy policy. Access is scoped to your account, requires your explicit OAuth approval, and you can revoke it at any time by removing Kualia from your AI client.

These third parties have their own privacy policies and we encourage you to review them. We only share information necessary for these services to function. The in-app AI Chat and MCP server are optional features. If you do not use them, no financial data is sent to LLM providers beyond the categorization use described above.

Advertising Measurement and Your Choices

I use AppsFlyer and advertising partners to measure which campaigns lead to visits, installs, signups, onboarding completion, checkout starts, trials, and subscriptions. On the website and web app, this includes the Meta Pixel and OpenAI's ChatGPT Ads Measurement Pixel. The iOS app uses AppsFlyer; connected ad partners may receive permitted conversion reports through AppsFlyer or aggregate reports from Apple.

On the website and web app, optional measurement tools load only after you choose “Accept” in the cookie banner. They can process page visits, campaign and click references, browser and device information, IP addresses, cookies, and a randomly generated event identifier. Web conversion events cover successful signup, onboarding completion, and checkout start; a checkout start is not reported as a completed purchase. Explicit conversion payloads contain the milestone and a random event identifier, not your account ID, email, name, bank details, budgets, balances, transactions, or chat content. Advertising pixels do not provide session replay. In the web app, advertising measurement runs only on login, signup, onboarding, and subscription pages; it is disabled on private workspace and settings pages. Direct pixels also wait until authentication callback URLs and URLs containing unrelated query parameters or fragments have been left.

Advertising platforms may use automatic advanced matching when it is enabled in their pixel settings. After you accept, this feature can detect supported contact information entered on public account pages, such as an email address or phone number, and hash it in the browser for conversion matching. A hashed identifier is still personal information. Advertising events never include your financial records or chat content. Providers process permitted measurement information under their own policies, including Meta's Privacy Policy and OpenAI's Privacy Policy.

Choose “Deny Non-Essential” to use the website without optional advertising pixels, AppsFlyer web measurement, or PostHog session replay. You can change the choice using “Privacy choices” in the website footer or in the web app. Global Privacy Control and Do Not Track signals override an earlier opt-in. The preference is shared across kualia.com and app.kualia.com and lasts six months. AppsFlyer identifier cookies can last up to 395 days. Meta uses first-party browser and click cookies such as _fbp and _fbc. OpenAI's __oppref click cookie lasts up to 30 days after it is written, and its __obref browser-reference cookie lasts up to 365 days. Declining stops optional measurement and clears the Meta and OpenAI identifier cookies accessible to this site, but does not withdraw reports already processed. Browser restrictions may shorten cookie lifetimes, and you can also clear cookies yourself.

If you accept non-essential cookies, I also use PostHog session replay to understand navigation, clicks, and scrolling and to diagnose usability problems on the website and web app. Recording starts only after consent and stops when you decline. Earlier consent limited to advertising measurement does not enable replay; the updated banner asks for a new choice. PostHog uses browser and session identifiers, with identifier cookies configured to expire after 180 days. I do not identify replay sessions using your account ID, name, or email. Input fields are masked and blocked from recordings, all web app text is masked, and images, embedded frames, and canvas content are blocked. Console logs and network request bodies and headers are not recorded. Replay page URLs omit query strings and fragments, and web app page paths are replaced with a generic path. PostHog processes replay data under its Privacy Policy.

On iOS, an onboarding explanation leads to Apple's App Tracking Transparency permission dialog. If you allow tracking, AppsFlyer and connected ad partners can use the advertising identifier and limited app events for attribution. If you decline, are restricted, or have not made a choice, Kualia disables advertising-identifier collection and partner sharing and enables AppsFlyer's anonymized measurement mode. This mode removes personal identifiers and hashes the AppsFlyer ID and IP address in its systems. Limited install and milestone counts can still be recorded. Apple may also deliver delayed, aggregate attribution reports with privacy thresholds. These reports do not guarantee attribution of an individual signup to an ad.

AppsFlyer may begin limited measurement after a short waiting period even if onboarding has not finished. Your financial records and chat content are never included in advertising events, and Kualia does not pass your account identity to the iOS attribution SDK. You can change Apple's tracking permission in iOS Settings. Refusing tracking does not affect account creation or app access. AppsFlyer manages Apple's conversion values; Kualia does not run a separate conversion-value updater.

AppsFlyer processes measurement data under its Services Privacy Policy. Optional browser measurement relies on your permission, separately from acceptance of the Terms of Service. For access, deletion, or objections concerning measurement data, contact support@kualia.com. Aggregate or deidentified reporting may be retained. Essential authentication, billing, security, and diagnostics continue independently of advertising choices. Retired advertising cookies are removed. PostHog uses browser storage and a cookie shared between kualia.com and app.kualia.com to understand visits and product usage. Browser analytics respects Do Not Track. Optional PostHog replay follows the same browser preference and privacy signals as advertising measurement; declining does not remove recordings already processed.

Data Storage and Security

Data Storage

Your data is stored securely using Convex's infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• Encrypted connections (HTTPS/TLS)
• Secure authentication mechanisms
• Regular security audits
• Access controls and monitoring

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Disconnecting a bank or Apple Wallet connection stops future syncing from that source, but previously imported account and transaction data may remain in Kualia until you delete it, delete the connected account, or request deletion of your data. You may request deletion of your data at any time.

You can delete your account in the Danger Zone under Settings, then Profile on the web or Account on iOS. Account deletion immediately disables access, marks your profile and every workspace you own as deleted, disconnects your Plaid connections, stops renewal of RevenueCat Web Billing or direct Stripe trials and subscriptions, revokes active sign-in sessions, and unsubscribes your retained Loops contact from campaigns and workflows. App Store subscriptions must still be canceled separately through Apple. Your Clerk authentication identity is retained with a deletion marker so subscription support can still locate your billing history and you can sign in later to start with a fresh Kualia account. People who share a workspace you own will also lose access to that workspace.

Deleted Kualia application data remains inaccessible during a 30-day retention period. Once it has been deleted for at least 30 days, it is eligible for permanent deletion during the next monthly deletion cycle, including dependent workspace records and stored files. A minimal profile, authentication identity, email opt-out state, and billing history remain available for account reactivation, subscription support, legal obligations, dispute resolution, fraud prevention, and agreement enforcement. You can contact support to request deletion of those retained records, subject to any legal retention requirements. Aggregated or deidentified information that no longer identifies you may also be retained.

Your Rights and Choices

You have the right to:

• Access your data: Request a copy of the personal information we hold about you
• Correct your data: Update inaccurate or incomplete information
• Delete your data: Delete your account in Settings, or contact support if you cannot access the app
• Opt-out of communications: Unsubscribe from marketing emails (service notifications may still be necessary)
• Manage notification preferences: Control how and when you receive alerts (email, Slack, webhooks)
• Manage Apple Wallet access: Choose which eligible Apple Wallet accounts to share and revoke Wallet access for Kualia in iOS Settings

To exercise these rights, contact us at support@kualia.com.

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Retain eligible ad-click references for limited conversion measurement, subject to your privacy choices

You can control cookies through your browser settings, though some features may not function properly without them.

Financial Data Privacy

We understand the sensitive nature of financial information. We commit to:

• Never sell your financial data to third parties
• Never share your budgets, bank details, balances, or transactions with advertisers
• Only access your data when necessary to provide support or improve our service
• Maintain strict internal access controls

Children's Privacy

Kualia is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the application. Continued use of Kualia after changes constitutes acceptance of the updated policy.

International Data Transfers

If you are located outside the United States, please be aware that your information may be transferred to and processed in the United States where our servers are located.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion of your personal information.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Company: Kualia, Inc.

Email: support@kualia.com

Data Protection Officer

For privacy-related inquiries or to exercise your rights, you may contact our Data Protection Officer at:

Company: Kualia, Inc.

Email: support@kualia.com

---

By using Kualia, you acknowledge that you have read and understood this Privacy Policy.