Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use Forekala, we collect:

• Name and email address
• Password credentials (managed securely by Clerk, our authentication provider)
• Budget categories, spending groups, and financial goals you create within the app
• Any information you provide when contacting us for support

1.2 Financial Account Data (via Plaid)

Forekala uses Plaid Technologies, Inc. to connect to your financial institutions. When you connect a bank account, Forekala receives:

• Bank account names and types
• Account balances
• Account and routing numbers, where applicable
• Transaction history (up to 24 months)
• Recurring transaction and subscription data

We use this data to import your transactions and balances so you can build a budget and track your spending. It is retrieved through Plaid's API and is subject to both this Privacy Policy and Plaid's own policies. Plaid is a third party that processes this data under its own privacy policy, and by connecting a financial account you also agree to Plaid's end user policies, including the Plaid End User Privacy Policy, available at https://plaid.com/legal/#end-user-privacy-policy. We do not receive or store your bank login credentials. Those are entered directly into Plaid's secure interface and are never visible to Forekala.

1.3 Usage and Device Data

We may automatically collect limited technical information when you use Forekala, including:

• Device type and operating system
• Browser type and version
• Pages and features accessed within the app
• Session timestamps and general usage patterns

This information is used to improve app performance and reliability. It does not include the content of your financial data.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Forekala budgeting and financial management features
• Sync and display your bank account transactions within your budget
• Generate AI-powered spending insights and financial summaries
• Track progress toward your financial goals
• Send service-related notifications (such as account alerts or sync status updates)
• Respond to support requests
• Improve the performance, reliability, and features of Forekala
• Comply with applicable legal obligations

We do not use your financial data to serve you third-party advertisements. We do not sell your personal information to any third party.

3. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share data only as described below.

3.1 Service Providers

We share information with third-party service providers that help us operate Forekala. These providers are contractually obligated to protect your data and use it only to perform services on our behalf:

• Plaid Technologies, Inc.: financial account connectivity and transaction data retrieval
• Clerk: user authentication, account management, and multi-factor authentication
• Neon: managed PostgreSQL database hosting
• Vercel: cloud infrastructure and application deployment
• Anthropic: AI model API used to generate financial insights within the app. Data sent to Anthropic is processed in real time and is not retained by Anthropic for training purposes beyond the scope of our agreement.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Kaveotech, our users, or others.

3.3 Business Transfers

If Kaveotech is acquired, merged, or undergoes a change of ownership, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete your profile, budget data, goals, and transaction data from our production systems within 30 days. Residual copies in backups are purged within 90 days.

Plaid access tokens associated with your connected accounts are revoked and deleted when you disconnect an account or delete your Forekala account.

We retain authentication logs for up to 90 days and support communication records for up to 2 years for security and dispute resolution purposes.

5. Data Security

We take the security of your financial data seriously. The following controls are in place:

• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• All data stored in our database is encrypted at rest using AES-256 encryption
• Access to production systems is restricted to authorized personnel only and protected by multi-factor authentication
• Bank login credentials are never stored or visible to Forekala; they are handled exclusively by Plaid

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@kaveotech.com.

6. Your Rights and Choices

6.1 Access and Correction

You may view and update your account information at any time through the Forekala app. If you need assistance accessing or correcting data we hold about you, contact us at privacy@kaveotech.com.

6.2 Account Deletion

You may delete your Forekala account at any time through the app settings. Account deletion results in the permanent removal of your profile, budget data, goals, transaction history, and connected account tokens, subject to the retention periods described in Section 4.

6.3 Disconnecting Financial Accounts

You may disconnect any linked financial account at any time from within the Forekala app. This immediately revokes the associated Plaid access token and stops future transaction syncs for that account. Historical transaction data for that account will remain in your Forekala budget history unless you delete your account.

6.4 Notification Preferences

You may manage push notification preferences within the Forekala app settings.

6.5 California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: you may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: you may request that we delete your personal information, subject to certain exceptions
• Right to Opt Out of Sale: we do not sell your personal information
• Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights

To exercise your California rights, contact us at privacy@kaveotech.com. We will respond within 45 days.

7. Children's Privacy

Forekala is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, contact us at privacy@kaveotech.com and we will delete it promptly.

8. Cookies and Tracking

Forekala uses session cookies and local storage to maintain your login session and app preferences. We do not use third-party advertising cookies or cross-site tracking technologies. You may clear cookies at any time through your browser or device settings, though doing so may require you to log in again.

9. Third-Party Links

Forekala may contain links to third-party websites or services (such as your financial institution's website). This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through Forekala.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through an in-app notice at least 30 days before the changes take effect. The updated policy will be posted at forekala.com/privacy with the revised effective date. Your continued use of Forekala after the effective date constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

• Kaveotech
• Email: privacy@kaveotech.com
• Website: kaveotech.com