Privacy Policy

Who we are

Kesefly ("we") is a personal and family finance app operated by its owner on a server they control. It is not a bank and does not move money. This policy covers the app at app.kesefly.com and this website, kesefly.com.

What we collect

• Your sign-in identity. You sign in with Google or with your email address through Cloudflare Access. We receive your email address (and, with Google, the name on your Google account) so we know who you are and what you're allowed to see.
• Bank account and transaction data. When you connect a bank, Kesefly imports account names, balances and transactions (date, merchant or description, amount, currency, and the bank's category where available).
  • US banks connect through Plaid. You log in to your bank in Plaid's window; Kesefly never sees your US bank password.
  • Israeli banks and card companies connect with the login details you enter for that bank. These details are encrypted before they are stored and are used only to fetch your own data from that bank.
• What you add. Categories, notes, budgets, manual transactions and household settings you create.
• Basic security records. Sign-in times and similar logs needed to keep the service secure and working.

How we use it

Only to run Kesefly for you: to show your accounts, categorize transactions, build insights and budgets, detect recurring charges, and let you share with members of your household according to the roles and privacy settings you choose. Accounts you mark private are visible only to you.

What we don't do

• We don't sell your data or share it with anyone for their own purposes.
• We don't show ads.
• We don't use analytics, tracking pixels or advertising cookies, in the app or on this website.

Optional AI categorization

Kesefly can use an AI service to suggest categories for transactions it doesn't recognize. This happens only if AI categorization is turned on. When it is, only the merchant name and amount of those transactions are sent: never your name, account numbers, balances or bank logins.

Google user data

If you sign in with Google, Kesefly uses only your email address and basic profile to identify you. It does not access your Gmail, Drive, contacts or any other Google data. Kesefly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else is involved

A few services help Kesefly work, each only for its own part:

• Cloudflare handles sign-in (Cloudflare Access) and secure connections to the app.
• Plaid connects US bank accounts. See Plaid's End User Privacy Policy.
• Your Israeli bank or card company, which Kesefly's server contacts directly to fetch your own data.
• An AI provider, only if AI categorization is turned on, as described above.

Where your data lives and how it's protected

Your data is stored on the owner's own server, not in a shared cloud database. Connections use HTTPS, bank login details are encrypted at rest, and the app requires sign-in, with two-step login available. No system is perfectly secure, but we work to keep your data safe and to limit who can reach it.

Your choices

• Disconnect a bank at any time in the app. Kesefly then stops fetching data from it.
• Ask for a copy or deletion of your data, including your account, by emailing [email protected]. We'll confirm when it's done.
• Leave a household, or ask the owner to remove you, at any time.

How long we keep data

We keep your data while you use Kesefly. If you ask us to delete your account, we delete your data from the app; copies in backups are removed as those backups expire.

Children

Kesefly is meant for adults managing their own or their family's money. It is not directed at children.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll let users know in the app.

Contact

Questions or requests: [email protected].