Privacy

Short version: Kasa stores only what it needs to work, shows it only to you, and never sells it or uses it for ads.

Requesting an invite

The form on this site stores your email address, and your name and note if you give them, plus your browser language. It is used only to send you an invite code and to reply to you. To stop abuse, a one-way hash of your IP address is kept so the same connection can’t send hundreds of requests; the address itself is not stored.

Using the app

Your account stores your email, a salted PBKDF2 hash of your password (never the password itself), your settings, and the accounts, transactions, schedules and values you enter. Each person’s data is separate: nobody else using Kasa can see it.

Kasa does not connect to your bank. Statement files you import are read in your browser, and only the transactions you choose are saved.

A single cookie keeps you signed in. There are no analytics, advertising or tracking cookies, on the app or on this site.

Where data lives

Kasa runs on Cloudflare (Workers and the D1 database). Exchange rates are fetched from public services (the ECB via Frankfurter, and CoinGecko); none of your data is sent to them.

Your choices

To get a copy of your data, correct it, or have your account or invite request deleted, write to contact@kasafinance.online.

Last updated: 10 October 2026