Privacy Policy

Last updated: 12 June 2026

Kalpavriksha is a local-first wealth tracker. Your financial data, meaning your accounts, holdings, transactions, balances, and statements, lives on your own device and not on our servers. This page explains the little bit of data we do handle, and the third parties your app talks to directly.

The short version: we never receive your portfolio. The only data that reaches us is what we need to run your license: your email, your license key, and an anonymous device identifier.

1. Data stored on your device (not with us)

Everything you enter or import stays on your computer, in an encrypted database. That covers your account details, holdings, transactions, uploaded PDF statements, and any notes. We have no access to it and never receive a copy. Backups you create also stay on your device, unless you decide to move them somewhere yourself.

2. Data we process to run your license

To sell and validate licenses, our licensing service (hosted on Cloudflare) stores:

Your email address, so we can send your license key and receipts and manage your subscription.
Your license key, which activates the app.
A device identifier, which is a one-way SHA-256 hash derived from your computer. It is not your hardware serial number, and it cannot be reversed to identify you or your machine. It simply ties a license to one device and lets you transfer it.
Your subscription status and dates: whether you are on trial, active, or cancelled, your renewal and expiry dates, and whether a payment failed or was refunded.

We do not store your name, address, portfolio, or any financial holdings on our servers. License records are backed up (encrypted at rest on Cloudflare R2) for up to 30 days for disaster recovery, and then deleted.

3. Payments

Payments are handled by Stripe. Your card details go straight to Stripe, and we never see or store them. Stripe processes your payment information under Stripe's Privacy Policy.

4. Third-party services your app talks to directly

Some features send requests from your device straight to a third party. These never pass through our servers:

Google Gemini, for AI features, using your own API key. If you turn on AI features, such as pulling data out of a statement, the relevant document or portfolio text goes to Google's Gemini API under the key you provide. Google handles that data under your own Google account terms. AI features are optional and only run when you use them.
Exchange-rate and price lookups. To convert currencies and fetch prices, the app may request public rates and quotes (for example, open.er-api.com or Google Finance). Those requests only contain currency codes or ticker symbols, never your identity or your balances.
Optional web search (Serper or Bing), only if you add those keys. This powers enrichment features, and the requests go out under your own keys.

5. No automatic crash reporting

Kalpavriksha does not send crash reports or telemetry on its own. There is no background reporting service in the app at all. Diagnostic logs are written only to your device. If you want our help with a problem, you can go to Settings → Help & Support → "Report a problem", which lets you attach those logs to an email and send it to us. Nothing leaves your device unless you choose to send it.

6. Waitlist

If you join our waitlist, we store only your email address and the date you joined, so we can let you know when we launch. You can ask us to remove it whenever you like.

7. Your rights

Since we hold so little, requests are simple. Email support@kalpavriksha.app and you can ask us to show, correct, or delete the data we hold about you, which is your email, your license record, and your device identifier. Deleting your portfolio data is entirely up to you, since it lives on your own device.

8. Data location & retention

License data sits on Cloudflare's global infrastructure. We keep it while your license is active, and for a short period afterward so we can handle accounting and any disputes, after which we delete it.

9. Children

Kalpavriksha is not aimed at children under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy as the product grows. If we make a meaningful change, we will update this page and the "last updated" date above.

11. Contact

Questions about privacy? Email support@kalpavriksha.app.