Privacy Policy

Kharji ("we", "us", or "the Service") is a personal finance tracker available at kharji.app. This policy explains what information we collect, how we use it, and the choices you have. We collect only what is needed to run the Service — nothing more.

Account information. When you sign up we collect your email address, your name (optional), and a password. Passwords are never stored in plain text — they are hashed with an industry-standard key derivation function (PBKDF2) before being saved.

Financial data you enter. Expenses, income entries, assets, tags, categories, and related notes that you add to your account. This data exists solely so the Service can work for you. We never sell it, share it with advertisers, or use it for any purpose other than providing the Service to you.

Usage analytics. We use Vercel Analytics to collect anonymous, aggregated page-view statistics. This does not use cookies and does not track you across sites.

We use a single, essential session cookie to keep you signed in. We do not use advertising or tracking cookies.

• To provide the Service: storing and displaying your financial data, calculating summaries and reports.
• To authenticate you and keep your account secure.
• To send transactional emails (such as a welcome email, password reset links, and periodic financial reports). You can unsubscribe from report emails at any time via the link in the email or from Settings.
• To fetch exchange rates so amounts can be shown in your preferred currency.

Your data is stored in a Turso (libSQL) database and the application is hosted on Vercel. Transactional emails are delivered through Resend. These providers process data on our behalf and are bound by their own privacy and security commitments.

We do not sell, rent, or trade your personal information. We share data only with the infrastructure providers listed above, to the extent necessary to operate the Service, or if required by law.

• Export. You can export all of your data at any time from Settings.
• Delete. You can permanently delete your account and all associated data from Settings. Deletion is immediate and irreversible.
• Correct. You can edit or delete any entry you have created directly in the app.

We keep your data for as long as your account exists. When you delete your account, all of your data — expenses, income, assets, tags, and account details — is permanently removed from our database.

All traffic to the Service is encrypted over HTTPS. Passwords are hashed and salted. Access to your data requires authentication with your credentials. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

The Service is not directed at children under 13, and we do not knowingly collect personal information from them.

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email.

See also our Terms of Service.