Privacy Policy for Kualia

Last Updated: June 13, 2026

Introduction

Kualia ("we," "our," or "us"), operated by Kualia, Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance and envelope budgeting service.

Information We Collect

Information You Provide to Us

Account Information

• Email address
• Name
• Password (encrypted)

Financial Data

• Bank account connections and transaction data
• Apple Wallet financial data you choose to share through FinanceKit, including selected account details, balances, transactions, transaction dates, transaction descriptions, merchant information, account and transaction identifiers, and balance timestamps
• Income and expense records
• Budget categories and spending targets
• Subscription and recurring transaction details
• Custom categories and tags
• Transaction notes and descriptions

Communication Data

• Support emails sent to support@kualia.com
• Feature requests and feedback
• Chat messages with our support team

Information Collected Automatically

Usage Information

• Pages viewed and features used
• Time spent on the application
• Device information (browser type, operating system)
• IP address
• Cookies and similar tracking technologies

Technical Data

• Application logs
• Error reports and debugging information
• Performance metrics

How We Use Your Information

We use your information to:

• Provide and maintain our service: Process your financial data, generate insights, and display your dashboard
• Improve our product: Analyze usage patterns to enhance features and user experience
• Communicate with you: Send service notifications, respond to support requests, and provide product updates
• Detect and prevent fraud: Monitor for suspicious activity and protect against unauthorized access
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests
• Send notifications: Deliver alerts about new transactions, upcoming recurring charges, and anomaly detection (via email, Slack, or webhooks as configured)

Apple Wallet and FinanceKit

If you use Kualia's Apple Wallet connection in the iOS app, you may authorize Kualia to access eligible Apple Wallet financial accounts, including Apple Card where available, through Apple's FinanceKit framework. You choose which accounts to share with Kualia and may manage or revoke that access in iOS Settings.

When you connect an Apple Wallet account, Kualia uses the data you authorize to create or link the selected account, import balances, sync transaction history and updates, categorize transactions, and show your budget and account activity. Kualia does not receive your Apple ID password, Wallet passcode, full card number, card credentials, or payment credentials.

Revoking Apple Wallet access stops future FinanceKit syncing. Data that was already imported into Kualia remains in your Kualia account until you delete the connected account, delete the imported data where the product allows it, or request account deletion.

Third-Party Services

Kualia integrates with the following third-party services:

Convex - Our backend infrastructure provider that stores and processes your data

Plaid or similar financial aggregation services - For connecting your bank accounts and retrieving transaction data (if applicable)

Apple Wallet and FinanceKit - For reading selected eligible Apple Wallet account, balance, and transaction data that you authorize in the iOS app

Loops Email - For sending notification emails

PostHog and Google Analytics - For understanding product usage, analyzing user behavior, and improving our service

Sentry - For error tracking and monitoring application performance to identify and fix bugs

Large Language Model (LLM) providers - We use LLM providers (including Anthropic, OpenAI, and similar services) for three distinct purposes, each with different data-sharing characteristics:

• Automated categorization and analysis: We send merchant names and transaction amounts to LLM services to categorize and analyze transactions. This data is sent without user identifiers and is not associated with your account when sent.
• In-app AI Chat: If you use the AI Chat feature inside Kualia, the questions you ask and the relevant portions of your financial data (such as transactions, budgets, categories, and reports) are sent to the LLM provider that powers the feature so the model can answer your questions. This data is associated with your session for the purpose of the conversation.
• MCP server (third-party AI assistants): If you connect Kualia to an outside AI assistant (for example Claude, ChatGPT, Cursor, or Perplexity) via our Model Context Protocol server, that assistant can query your financial data on your behalf. When it does, the relevant data is sent to whichever AI provider you have chosen to use. That provider then handles your data under their own terms and privacy policy. Access is scoped to your account, requires your explicit OAuth approval, and you can revoke it at any time by removing Kualia from your AI client.

These third parties have their own privacy policies and we encourage you to review them. We only share information necessary for these services to function. The in-app AI Chat and MCP server are optional features. If you do not use them, no financial data is sent to LLM providers beyond the categorization use described above.

Data Storage and Security

Data Storage

Your data is stored securely using Convex's infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• Encrypted connections (HTTPS/TLS)
• Secure authentication mechanisms
• Regular security audits
• Access controls and monitoring

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Disconnecting a bank or Apple Wallet connection stops future syncing from that source, but previously imported account and transaction data may remain in Kualia until you delete it, delete the connected account, or request deletion of your data. You may request deletion of your data at any time.

Your Rights and Choices

You have the right to:

• Access your data: Request a copy of the personal information we hold about you
• Correct your data: Update inaccurate or incomplete information
• Delete your data: Request deletion of your account and associated data
• Opt-out of communications: Unsubscribe from marketing emails (service notifications may still be necessary)
• Manage notification preferences: Control how and when you receive alerts (email, Slack, webhooks)
• Manage Apple Wallet access: Choose which eligible Apple Wallet accounts to share and revoke Wallet access for Kualia in iOS Settings

To exercise these rights, contact us at support@kualia.com.

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Analyze usage patterns
• Improve application performance

You can control cookies through your browser settings, though some features may not function properly without them.

Financial Data Privacy

We understand the sensitive nature of financial information. We commit to:

• Never sell your financial data to third parties
• Never share your data with advertisers
• Only access your data when necessary to provide support or improve our service
• Maintain strict internal access controls

Children's Privacy

Kualia is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the application. Continued use of Kualia after changes constitutes acceptance of the updated policy.

International Data Transfers

If you are located outside the United States, please be aware that your information may be transferred to and processed in the United States where our servers are located.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion of your personal information.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Company: Kualia, Inc.

Email: support@kualia.com

Data Protection Officer

For privacy-related inquiries or to exercise your rights, you may contact our Data Protection Officer at:

Company: Kualia, Inc.

Email: support@kualia.com

---

By using Kualia, you acknowledge that you have read and understood this Privacy Policy.