App Privacy Policy

KinCassa is an AI Family Treasury and payment hub. It collects bills and invoices from your connected channels, prepares them for your approval and executes payments you approve through a dedicated payment account.

The application is provided by OYSTEQ SOFTWARE DESIGN L.L.C, Office No. 35-2501, Al Thanyah, Dubai, United Arab Emirates. For privacy matters, contact desk@kincassa.com.

When you create an account we process your registration details, such as your name, contact details and authentication information, and the household or family members you choose to add.

We process the bills, invoices and documents that you or your authorised contacts submit through connected channels, together with the payment details they contain.

Where you invite family members or assistants, we process the information needed to give them the access and roles you define. You are responsible for ensuring you may share information about other people with us.

We process device identifiers, app version, log data and diagnostics to operate, secure and improve the application.

You can create an account or sign in using a third-party sign-in provider such as Google. When you do, we receive the basic profile information you authorise (for example your name and email address) to create and secure your account.

Where you connect a mailbox so that bills can be collected, we access it read-only. For Gmail we request a single restricted scope, gmail.readonly, and we use it to identify incoming bills and invoices and to extract the payment details they contain. We do not send, modify, label or delete any of your mail. We store only the message content required to produce a payment document, and nothing else.

We use automated recognition and analysis to read invoices, extract payment details, organise payments and provide insights. This processing supports the preparation of payments for your approval.

We do not use data obtained through Google Workspace APIs, including the content of your Gmail messages and their attachments, to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models. Automated recognition is applied solely to prepare payment documents within your own account, and any model provider we rely on is contractually prohibited from retaining this data or training on it.

Human access to the content of connected mailboxes is restricted. Our staff do not read your messages except where you have given explicit, documented consent in relation to a specific item, where access is necessary to investigate a security incident or to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.

Payments are executed through a dedicated account held with a licensed payment provider selected based on your region. Relevant data is shared with that provider strictly to execute payments and to meet regulatory requirements such as KYC and AML.

We process personal data to provide and secure the service, to prepare and execute payments you approve, to comply with legal and regulatory obligations, and to improve the application, which never includes training generalised artificial intelligence or machine learning models on data obtained through Google APIs. Depending on your jurisdiction, our legal bases include performance of a contract, legal obligations, legitimate interests and consent.

We share data with the providers that help us operate the service, including cloud hosting, recognition and analysis providers, and the payment provider. Providers act under agreements that require appropriate protection of your data. Providers that perform recognition or analysis on message content are contractually prohibited from retaining that content beyond the processing period and from using it to train their own models.

Some providers may process data outside your region. Where this happens, we rely on recognised transfer mechanisms such as adequacy decisions or standard contractual clauses.

We keep personal data only as long as needed to provide the service and to meet legal, regulatory and dispute-resolution obligations. You can export your data and request deletion as described below.

When you disconnect a mailbox, we revoke the corresponding OAuth token and delete the stored message content associated with that channel.

We apply organisational and technical safeguards designed to protect your data. Payments are executed only after your confirmation, and no funds are stored inside the treasury itself.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, to withdraw consent, to data portability and to lodge a complaint with a supervisory authority.

You can request deletion of your account and associated data at any time. See Account Deletion for how to submit a request and what may be retained where required by law.

The application is intended for adults. It is not directed to children, and we do not knowingly create accounts for children.

Automated recognition and analysis help prepare payments and insights. Payments are executed only after your approval.

The application may request permissions such as access to the camera, photos, notifications or files to provide specific features. You can manage permissions in your device settings.

OYSTEQ SOFTWARE DESIGN L.L.C

Office No. 35-2501, Al Thanyah, Dubai, United Arab Emirates

Email: desk@kincassa.com

We may update this policy and will publish the new date. We will provide additional notice of material changes where appropriate.