Privacy policy
Last updated Jul 24, 2026
Kanjō ("we", "us") is a household budgeting service available at kanjo.sg and through the Kanjō iOS app. This policy explains what personal data we collect, why we collect it, and the choices you have. Questions go to support@kanjo.sg.
Data we collect
Account data
When you create an account we store your email address, a display name if you set one, a password hash (never the password itself), and an optional avatar image. If you sign in with Apple, we receive the identifier and email address Apple shares with us; we never see your Apple password.
Financial entries
The service exists to store the ledger you keep: expenses and income entries, categories, budgets, accounts, recurring entries, and exchange rates you use. These are entered by you or created from documents you upload. We do not connect to your bank and we have no access to your bank credentials.
Uploaded documents
Receipt photos and bank statement files (PDF or CSV) that you upload are stored so they can be attached to your expenses and re-opened later.
Technical data
We keep server logs (IP address, request time, user agent) for security and debugging, and — if you enable notifications on iOS — a device push token. We use a session cookie to keep you signed in on the web. We do not use advertising trackers or sell data to anyone.
AI processing of receipts and statements
When you scan a receipt or import a bank statement, the image or file is sent to Anthropic's API (the company behind the Claude models) to extract the merchant, date, amounts, and line items. Anthropic processes this data on our behalf to provide the feature; under the commercial API terms we use, inputs and outputs are not used to train Anthropic's models. Extracted results are shown to you for review before anything is saved.
How your data is shared
- Category sharing you initiate. If you share a category with another Kanjō user, expenses in that category (title, amount, date, attached receipt) become visible to them for as long as the share is active. Private categories are never visible to anyone but you.
- Service providers. We use hosting infrastructure located in the European Union, Anthropic for document extraction (above), and an email delivery provider for transactional email such as sign-in links. Each provider processes data only as needed to run the service.
- Legal requirements. We disclose data only if required to by law.
We do not sell personal data, and we do not share it for advertising.
Where data is stored
Application data and uploaded documents are hosted in the European Union. Document extraction requests to Anthropic's API may be processed outside the EU for the duration of the request.
Retention and deletion
We keep your data for as long as your account exists. If you delete your account, your ledger entries, uploaded documents, and profile are deleted; residual copies in backups are removed on the backup rotation schedule. Server logs are retained for a limited period and then discarded. You can also delete individual expenses, documents, or your whole account at any time from the app.
Your rights
You can access, correct, export, or delete your personal data. Most of this is available directly in the app; for anything else, email support@kanjo.sg and we will respond within a reasonable time. Depending on where you live (for example under the GDPR), you may also have the right to object to or restrict certain processing and to lodge a complaint with a supervisory authority.
Children
Kanjō is not directed at children under 13, and we do not knowingly collect data from them.
Changes to this policy
If we make material changes we will update this page and note the new date above. Continued use of the service after a change means you accept the updated policy.