Privacy Policy

Last Updated: March 2026

At Kevin's Cash, your privacy is our top priority. This Privacy Policy explains what data we collect, what we don't collect, how we store it, and your rights regarding your personal information.

1. What We Collect

We collect the absolute minimum data necessary to operate the service. Kevin's Cash does not operate its own servers. Your account data — email address and account tier (free or premium) — is managed by our trusted third-party service providers.

What Kevin's Cash Has Access To

• Email address: Used for account creation, authentication, and communication about your account or service updates. Stored and managed by Clerk.
• Account tier: Whether you have free or premium access. Stored and managed by Clerk.

What Our Third-Party Providers Store

Authentication and payment processing are handled by trusted third-party services that store and manage your account data on their infrastructure:

• Clerk (authentication): Stores your email address, securely protected password (we never see your password), account creation date, and login history.
• Stripe (payments): Stores payment details, transaction IDs, and purchase dates for premium purchases. We do not store your credit card information.

Technical Information

The application may detect your browser type and device platform (web, iOS, or Android) to ensure features work correctly on your device. This detection happens entirely within your browser and is not transmitted to or stored on any server.

2. What We DON'T Collect

We do not collect, store, or have access to your financial data. This includes:

• Plan items (income and expenses)
• Cashflow plans and projections
• Scenario data ("what-if" analyses)
• Recurring temporary changes
• Annual increase settings
• Any amounts, dates, or descriptions you enter
• Saved plan files or exported data
• Display preferences (currency, show/hide settings)

All of this data is stored in your browser's local storage on your device. You can also download backup copies of your plans at any time using the "Backup Plan" feature — those files belong entirely to you.

3. How Data is Stored

Account Data (Managed by Clerk)

Your email address, securely protected password, and premium status are stored on Clerk's servers — not ours. Kevin's Cash does not operate its own servers. This data is encrypted at rest and in transit using industry-standard security protocols.

Your Financial Data (Stored on Your Device)

All financial data is stored in your browser on your device:

• Auto-save: Changes are automatically saved to your browser as you work. This happens entirely on your device — no data is sent to any server.
• Persistence: Data remains in your browser until you clear browser data, uninstall the app, or enable "Shared Device Mode" and log out.
• Device-specific: Your data is tied to your specific browser on your specific device. If you switch devices or browsers, your financial data will not transfer automatically.

Backup Plan — Your Data, Your Copies

The "Backup Plan" feature lets you download a complete copy of your financial plan as a file. Because your data never touches our servers, these backups are the best way to protect your work:

• Downloaded directly to your device — no upload to any server
• Completely under your control — store them wherever you like
• Portable — load them on any device using the "Load Saved Plan" feature
• Your safety net — if you clear your browser, switch devices, or anything goes wrong, a backup gets you right back

We recommend backing up regularly, especially before making big changes to your plan.

4. Shared Devices & Best Practices

Your financial data is protected by your login credentials — only you can access your plans when signed in. However, if you use shared or public devices, we recommend the following precautions to keep your data secure.

Recommended Practices

• Always log out: Especially on shared or public devices. Logging out does not automatically delete local data unless you enable "Shared Device Mode."
• Use Shared Device Mode: If you're using a public computer, library, or shared family device, enable "Shared Device Mode" in Settings. This automatically clears all local financial data when you log out.
• Secure your device: Use a strong device password/PIN to prevent unauthorized physical access to your device.
• Back up your data: Use "Backup Plan" regularly to create backup files. If you clear browser data or lose access to your device, your financial plans cannot be recovered without a backup.

Session Timeout

Kevin's Cash includes an automatic session timeout feature to protect your data:

• Standard mode: 2 hours of inactivity
• Shared Device Mode: 15 minutes of inactivity

5. Third-Party Services

Kevin's Cash integrates with trusted third-party services. Each has their own privacy policies:

Clerk (Authentication)

Account authentication is handled by Clerk (clerk.com). Clerk stores your email address and securely protected password. They are SOC 2 Type II certified and comply with GDPR.

Clerk Privacy Policy: clerk.com/privacy

Stripe (Payment Processing)

Premium payments are processed by Stripe (stripe.com). We never see or store your credit card information. Stripe is PCI DSS Level 1 certified (the highest level of payment security).

Stripe Privacy Policy: stripe.com/privacy

Hosting Infrastructure

Kevin's Cash is hosted on industry-standard cloud infrastructure. The hosting provider delivers the application files to your browser and facilitates the connection to Stripe for payment processing — no user data is stored or logged by the hosting provider. All payment processing is handled entirely by Stripe. Our hosting provider complies with major international privacy standards including GDPR and SOC 2.

Data Shared with Third Parties

• Clerk: Email address, securely protected password
• Stripe: Email address (for payment receipts), transaction amount
• Hosting provider: Application delivery only (no user data stored or logged)

We have no user data to sell, rent, or share. Your financial data lives on your device. Your account data (email and tier) is held by Clerk and Stripe — not by us.

6. Your Rights

Access Your Data

You can request a copy of all personal data we store about you (email, premium status, purchase date). Contact us at help@kevinscash.com.

Delete Your Data

You can request deletion of your account and all associated data:

• Account data: Email us at help@kevinscash.com to request account deletion. We will delete your email, authentication credentials, and premium status from Clerk's servers.
• Local data: Use "Shared Device Mode" and log out, or manually clear your browser's stored data for the Kevin's Cash site.

Export Your Data

Your financial data can be exported at any time using the "Backup Plan" feature. This downloads a file containing all your cashflow items, plans, and scenarios.

Opt Out of Communications

We only send essential service-related emails (account creation, premium purchase confirmation, critical security notices). You can request to opt out of non-essential communications by contacting support.

7. Data Retention

• Account data: Retained as long as your account is active. If you request account deletion, we will delete your data within 30 days.
• Local financial data: Retained in your browser until you clear it, switch devices, or enable Shared Device Mode and log out.
• Payment records: Stripe retains transaction records according to their retention policies and legal requirements.

8. Security Measures

We implement multiple layers of security:

• HTTPS encryption: All data transmitted between your browser and our service providers is encrypted.
• Code injection protection: Multiple layers of defense prevent malicious code from running in the application.
• Password protection: Your password is securely protected and never stored in readable form (handled by Clerk).
• Session timeouts: Automatic logout after inactivity.
• Secure storage: Server data encrypted at rest.

While we take security seriously, no system is 100% secure. You should use strong passwords, log out when finished, and back up your data regularly.

9. Law Enforcement & Legal Disclosure

We may disclose your personal information to law enforcement agencies or government authorities where required by a valid court order, subpoena, or warrant, or as otherwise required under applicable Canadian law including the Personal Information Protection and Electronic Documents Act (PIPEDA).

What We Hold — and What We Don't

We store very little about you. Kevin's Cash does not operate its own servers. The only account data associated with you — your email address and account tier (free or premium) — is held by Clerk, our authentication provider. That is the extent of what we could provide to any third party, including law enforcement.

Your financial data — plans, income and expense items, cashflow projections, scenarios, and all other plan content — is stored on your device in your browser's local storage (and in any backup files you choose to download). We never have access to this data and cannot disclose it to anyone.

Cross-Border Data

Kevin's Cash is built and maintained by a Canadian-based company. The application is hosted on infrastructure based in the United States, with content distributed globally through our hosting provider's network. Your account data (email and tier) is managed by third-party services also located in the United States (Clerk and Stripe). As a result, this minimal account data may be subject to U.S. laws, including legislation that may allow U.S. government agencies to access data held by U.S.-based service providers. By using Kevin's Cash, you acknowledge and consent to this cross-border transfer of your account data.

10. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, including PIPEDA. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Ontario, Canada.

11. Children's Privacy

Kevin's Cash is not intended for children under 13 years old. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us at help@kevinscash.com and we will delete the account.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via email or in-app notification. Continued use of Kevin's Cash after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have privacy concerns, please contact us:

Email: help@kevinscash.com
Website: kevinscash.com

We will respond to privacy-related inquiries within 30 days.