Privacy Policy

Last updated: June 15, 2026 · Effective date: June 15, 2026

1. Introduction

This Privacy Policy ("Policy") describes how Kartenpae ("Kartenpae", "we", "us", or "our") collects, uses, discloses, stores, and protects information about you when you access or use the Kartenpae mobile application, our related websites, and our LINE Official Account (collectively, the "Services"). Kartenpae is a personal finance application that helps you record income and expenses, set budgets, and understand your spending with the assistance of artificial intelligence ("AI") features.

By creating an account, accessing, or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you should not use the Services. This Policy forms part of, and should be read together with, our Terms of Service.

2. Definitions

"Personal Data" means any information relating to an identified or identifiable natural person.
"Financial Data" means the income, expense, budget, category, and related transaction information you create or import into the Services.
"Processing" means any operation performed on Personal Data, whether or not by automated means, including collection, use, storage, and deletion.
"Service Providers" means third parties that process data on our behalf to provide and improve the Services.

3. Information We Collect

3.1 Information you provide to us

Account information: your name, email address, and (optionally) phone number, as well as credentials used to authenticate your account.
Financial Data: the transactions, amounts, categories, budgets, notes, and accounts you record within the Services.
Content submitted for analysis: text messages, receipt or slip images, QR codes, and voice recordings that you submit so that our AI features can extract and categorize transaction details.
Communications: information you provide when you contact us for support or submit a request, including account-deletion requests.

3.2 Information collected automatically

Device and technical data: device model, operating system, app version, language settings, and unique identifiers used for authentication and notifications.
Usage data: features used, actions taken, and diagnostic or crash data used to maintain and improve the Services.
Location data:with your permission, approximate or precise location used to provide the optional "spending map" feature. You may disable location access at any time in your device settings.

3.3 Information from third parties

When you sign in using a third-party identity provider (such as Google or Apple) or link your LINE account, we receive limited profile information (such as your name and email address) necessary to create and operate your account, subject to the privacy settings and policies of those providers.

4. How We Use Your Information

We use the information described above for the following purposes:

to create, operate, maintain, and secure your account and the Services;
to record, categorize, and synchronize your Financial Data across your devices;
to process text, images, and voice you submit through AI features in order to extract, classify, and summarize transactions;
to generate budgets, reports, insights, and other analytics for you;
to enable logging of transactions through our LINE Official Account;
to send you service-related communications and notifications you have enabled;
to respond to your inquiries and fulfill your requests, including data-deletion requests;
to detect, prevent, and address fraud, abuse, security, and technical issues; and
to comply with applicable laws and enforce our Terms of Service.

5. Legal Bases for Processing

Where applicable law (such as the EU/UK General Data Protection Regulation or Thailand's Personal Data Protection Act) requires a legal basis, we rely on one or more of the following: (a) performance of a contract with you; (b) your consent (for example, for location access or optional features); (c) our legitimate interests in operating, securing, and improving the Services; and (d) compliance with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

6. How We Share Information

We do not sell your Personal Data or Financial Data. We share information only in the following circumstances:

With Service Providers who process data on our behalf under contractual confidentiality and security obligations (see Section 7);
For legal reasons, where we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or enforceable governmental request;
To protect rights and safety, to enforce our Terms, or to protect the rights, property, or safety of Kartenpae, our users, or the public; and
In a business transfer, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

7. Third-Party Services

The Services rely on the following categories of third-party providers, each of which processes only the data necessary to perform its function:

Google / Firebase — authentication, push notifications, and related infrastructure;
AI processing providers — to analyze the text, images, or voice you submit and return structured transaction details;
LINE — to enable transaction logging through our Official Account; and
Hosting and infrastructure providers — to store data and deliver the Services.

Your use of third-party features may also be subject to those providers' own privacy policies, which we encourage you to review.

8. Data Retention

We retain your Personal Data and Financial Data for as long as your account remains active or as needed to provide the Services. We will delete or anonymize your information following a verified account-deletion request, except where retention is required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

9. Data Security

We implement administrative, technical, and organizational measures designed to protect your information, including encryption of data in transit, access controls, and secure storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. International Data Transfers

Your information may be processed and stored in countries other than the one in which you reside. Where required, we take steps to ensure that such transfers are subject to appropriate safeguards consistent with applicable data-protection laws.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the right to: access the Personal Data we hold about you; request correction of inaccurate data; request deletion of your data; restrict or object to certain processing; request a portable copy of your data; and withdraw consent. Residents of certain jurisdictions (such as the EEA/UK under GDPR and California under the CCPA/CPRA) may have additional rights, including the right not to receive discriminatory treatment for exercising privacy rights and the right to opt out of any "sale" or "sharing" of Personal Data (which we do not engage in).

12. How to Exercise Your Rights & Account Deletion

You may exercise your rights, including requesting deletion of your account and associated data, by using the "Delete Account" page on this website, by using the in-app account-deletion option, or by emailing us at the address in Section 17. We may take reasonable steps to verify your identity before acting on a request. Verified deletion requests are processed within a reasonable period, ordinarily within seven (7) business days.

13. Children's Privacy

The Services are not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect Personal Data from them. If you believe a child has provided us with Personal Data, please contact us so we can delete it.

14. Cookies and Similar Technologies

Our websites and certain features may use cookies, local storage, or similar technologies to remember your preferences (such as language) and to operate and analyze the Services. You can control these technologies through your browser or device settings.

15. Third-Party Links

The Services may contain links to third-party websites or services that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their practices.

16. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after the changes take effect constitutes acceptance of the updated Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Policy or your Personal Data, please contact us at [email protected]. We will respond within a reasonable timeframe.