1. Who We Are

Kashaa is operated by Stewardship Website Application Services, based in Dumaguete City, Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), we act as the personal information controller for the data described below.

2. Information We Collect

2.1 Account information

When you sign in with Google or Apple, we receive basic profile information from them — your name and email address. We never see or store your Google or Apple password; authentication is handled entirely by Google or Apple.

2.2 Financial information you enter

Everything else in Kashaa is information you choose to type in: account names and balances, transactions, categories, budgets, payees, and any notes you add. This is manually entered by you — Kashaa has no direct connection to your actual bank, GCash, Maya, or any other financial institution, and never collects your real account numbers, card numbers, or e-wallet login credentials.

2.3 Subscription and purchase information

If you subscribe to Kashaa Premium, your purchase is processed by the Apple App Store or Google Play. We receive subscription status information (such as whether you're subscribed and when your subscription renews or expires) through RevenueCat, a subscription management service we use. We do not receive or store your payment card details — those are handled entirely by Apple or Google.

2.4 Device and diagnostic information

We collect limited technical information needed to operate and improve the App, such as app version, device type, and crash or error logs. This helps us fix bugs and isn't used to build an advertising profile of you.

2.5 What we do not collect

We do not collect your actual bank or e-wallet login credentials, card numbers, government ID numbers, or biometric data. We do not use third-party advertising trackers, and we do not sell or rent your personal information to anyone, for any reason.

3. How We Use Your Information

We use the information above to:

• - Provide the core service: storing and syncing your data across your devices
• - Authenticate you securely through Google or Apple Process and verify your Kashaa Premium subscription
• - Authenticate you securely through Google or Apple Process and verify your Kashaa Premium subscription
• - Diagnose and fix technical problems
• - Communicate service-related messages (for example, about your account or subscription)
• - Send optional notifications you've enabled, such as budget alerts, which you can turn off at any time in your device settings

4. Legal Basis for Processing (Philippine Data Privacy Act)

Under RA 10173, we process your personal information based on:

• - Your consent, when you create an account and agree to this policy
• - The performance of our contract with you, we can't provide expense tracking, sync, or subscription management without processing this data
• - Our legitimate interests in keeping the App secure, functional, and improving over time, balanced against your rights

5. Third Parties We Work With

We use a small number of third-party services to operate Kashaa. We don't sell your data to any of them — they process it only to help us provide the Service:

• - Google and Apple, for sign-in authentication
• - RevenueCat, to manage and verify subscription purchases; this service may store and process data outside the Philippines
• - Railway, to host our database and keep your data synced across your devices

6. Data Storage, Security, and Retention

Your data is transmitted using encrypted connections (HTTPS/TLS) and stored on secured cloud infrastructure. We apply reasonable administrative, technical, and organizational measures to protect your information against unauthorized access, loss, or misuse. No system is perfectly secure, and we can't guarantee absolute security, but we take this responsibility seriously given the sensitivity of financial information.

We retain your data for as long as your account remains active. If you delete your account, your data is marked for deletion and permanently removed from our active systems within [30] days, except where we're legally required to keep certain records longer (for example, to comply with tax, audit, or fraud-prevention obligations).

7. Your Rights

Under the Data Privacy Act of 2012, you have the right to:

• - Be informed about how your data is collected and processed (this policy)
• - Access the personal data we hold about you
• - Correct any inaccurate or outdated information
• - Object to certain uses of your data
• - Erasure or blocking of your data, subject to legal retention requirements
• - Data portability — request a copy of your data in a usable format
• - File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated

8. Children's Privacy

Kashaa is not directed at, and is not intended to be used by, anyone under 18 years old. We do not knowingly collect personal information from children. If you believe a child has created a Kashaa account, please contact us so we can delete it.

9. International Availability

Kashaa is built primarily for people in the Philippines, and this policy is written with Philippine law in mind. The App may be downloaded from other countries through the App Store or Google Play; if you use Kashaa from outside the Philippines, you understand your information will still be processed as described in this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or in applicable law. If we make material changes, we'll notify you through the App before they take effect. The "Last updated" date at the top of this page always reflects the most recent version.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

Stewardship Website Application Services

cloyd.abad@gmail.com

dumaguete City, Negros Oriental, Philippines

You may also contact the National Privacy Commission at https://privacy.gov.ph if you have concerns we haven't resolved to your satisfaction.