Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use Forekala, we collect:

• Name and email address
• Password credentials (managed securely by Clerk, our authentication provider)
• Budget categories, spending groups, and financial goals you create within the app
• Any information you provide when contacting us for support

1.2 Financial Account Data (via Plaid)

Forekala uses Plaid Technologies, Inc. to connect to your financial institutions. When you connect a bank account, Forekala receives:

• Bank account names and types
• Account balances
• Account and routing numbers, where applicable
• Transaction history (up to 24 months)
• Recurring transaction and subscription data

We use this data to import your transactions and balances so you can build a budget and track your spending. It is retrieved through Plaid's API and is subject to both this Privacy Policy and Plaid's own policies. Plaid is a third party that processes this data under its own privacy policy, and by connecting a financial account you also agree to Plaid's end user policies, including the Plaid End User Privacy Policy, available at https://plaid.com/legal/#end-user-privacy-policy. We do not receive or store your bank login credentials. Those are entered directly into Plaid's secure interface and are never visible to Forekala.

1.3 Usage and Device Data

We may automatically collect limited technical information when you use Forekala, including:

• Device type and operating system
• Browser type and version
• Pages and features accessed within the app
• Session timestamps and general usage patterns

This information is used to improve app performance and reliability. It does not include the content of your financial data.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Forekala budgeting and financial management features
• Sync and display your bank account transactions within your budget
• Power the AI features described in Section 4, including the Kala assistant, weekly spending insights, and category suggestions
• Track progress toward your financial goals
• Send service-related notifications (such as account alerts or sync status updates)
• Respond to support requests
• Improve the performance, reliability, and features of Forekala
• Comply with applicable legal obligations

We do not use your financial data to serve you third-party advertisements. We do not sell your personal information to any third party.

3. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share data only as described below.

3.1 Service Providers

We share information with third-party service providers that help us operate Forekala. These providers are contractually obligated to protect your data and use it only to perform services on our behalf:

• Plaid Technologies, Inc.: financial account connectivity and transaction data retrieval
• Clerk: user authentication, account management, and multi-factor authentication
• Neon: managed PostgreSQL database hosting
• Vercel: cloud infrastructure and application deployment
• Anthropic, PBC: AI models used to power Kala, weekly spending insights, and merchant category suggestions. Section 4 describes what is sent to Anthropic, feature by feature.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Kaveotech, our users, or others.

3.3 Business Transfers

If Kaveotech is acquired, merged, or undergoes a change of ownership, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data is transferred and becomes subject to a different privacy policy.

4. AI Features and Anthropic

Several Forekala features are powered by Claude models from Anthropic, PBC. Anthropic is a service provider that processes the data described below to return a response or a suggestion to Forekala. Each feature sends only what that feature needs, and only when the feature runs. Anthropic's own privacy policy is available at https://www.anthropic.com/legal/privacy.

4.1 Kala, the In-App Assistant

Kala answers questions about your household's money in plain language. When you send Kala a message, your message and the parts of your household's data that your question calls for are sent to Anthropic's Claude Sonnet model so it can answer. Depending on the question, that can include:

• Transactions, including merchant names, amounts, and dates
• Budget figures, planned and spent, by category
• Account names, types, and balances
• Goals, debts, and cash flow figures
• Household member names and roles
• Your household's own category names and categorization rules

Kala reads this data through your household's existing permissions: it sees what your household account can already see, and nothing from other households. The same applies to What-If, the separate sandbox chat where you can model budget changes without altering your live budget. Reading your household's financial data is how Kala answers questions about it, so this access is part of the feature rather than a setting you can turn off while continuing to use Kala. Nothing is sent to Anthropic for Kala unless you send a message.

4.2 Web Search Within Kala

When answering your question requires current information from the web, Kala can run a web search through Anthropic. Before a search query leaves Forekala, it is checked and redacted. Forekala strips out:

• Email addresses
• Runs of digits that resemble account numbers
• Dollar amounts drawn from your household's data
• Merchant names drawn from your household's transactions

The search step runs in isolation from your household: it has no access to your accounts, transactions, budget, or chat history. Only the redacted query is sent.

4.3 Dashboard Insights

Dashboard Insights, currently in limited release, turns your household's spending findings into readable sentences once a week. Forekala sends aggregated figures and category names, such as category totals and period-over-period comparisons, to Anthropic's Claude Haiku model. It does not send your raw transaction list. This runs at most once per household per week.

4.4 Merchant Categorization

Forekala is building a feature that uses Anthropic's Claude Haiku model to suggest budget categories for merchants. It is disclosed here ahead of its release. It sends different data in each of its two cases:

• Setting up a new account: merchant names taken from your recent transactions are sent, and the model proposes category names you might use. No amounts, dates, account details, or household member data are sent.
• Suggesting a category for an unfamiliar merchant later: the merchant name is sent together with your household's existing category names, because the model is choosing among the categories you already use.

Category suggestions are proposals. You decide whether to accept them.

4.5 What We Never Send to an AI Model

No Forekala feature sends the following to Anthropic or to any other model provider:

• Bank login credentials or Plaid access tokens
• Full bank account or routing numbers
• Payment card details

4.6 Purpose and Training

Data sent to Anthropic is used to generate a response or a suggestion for your household at the time the feature runs. It is not used to train Anthropic's models, and Forekala does not use it to train models of its own.

4.7 AI Output Can Be Wrong

Kala, What-If, Dashboard Insights, and category suggestions can misread your data, miscalculate, or state something that is simply incorrect. They are informational and organizational tools. Nothing they produce is financial, investment, tax, or legal advice, as set out in our Terms of Service. Verify anything important against your own records and your financial institution before acting on it.

5. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete your profile, budget data, goals, and transaction data from our production systems within 30 days. Residual copies in backups are purged within 90 days.

Plaid access tokens associated with your connected accounts are revoked and deleted when you disconnect an account or delete your Forekala account.

We retain authentication logs for up to 90 days and support communication records for up to 2 years for security and dispute resolution purposes.

6. Data Security

We take the security of your financial data seriously. The following controls are in place:

• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• All data stored in our database is encrypted at rest using AES-256 encryption
• Access to production systems is restricted to authorized personnel only and protected by multi-factor authentication
• Bank login credentials are never stored or visible to Forekala; they are handled exclusively by Plaid

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@kaveotech.com.

7. Your Rights and Choices

7.1 Access and Correction

You may view and update your account information at any time through the Forekala app. If you need assistance accessing or correcting data we hold about you, contact us at privacy@kaveotech.com.

7.2 Account Deletion

You may delete your Forekala account at any time through the app settings. Account deletion results in the permanent removal of your profile, budget data, goals, transaction history, and connected account tokens, subject to the retention periods described in Section 5.

7.3 Disconnecting Financial Accounts

You may disconnect any linked financial account at any time from within the Forekala app. This immediately revokes the associated Plaid access token and stops future transaction syncs for that account. Historical transaction data for that account will remain in your Forekala budget history unless you delete your account.

7.4 Notification Preferences

You may manage push notification preferences within the Forekala app settings.

7.5 California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: you may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: you may request that we delete your personal information, subject to certain exceptions
• Right to Opt Out of Sale: we do not sell your personal information
• Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights

To exercise your California rights, contact us at privacy@kaveotech.com. We will respond within 45 days.

8. Children's Privacy

Forekala is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, contact us at privacy@kaveotech.com and we will delete it promptly.

9. Cookies and Tracking

Forekala uses session cookies and local storage to maintain your login session and app preferences. We do not use third-party advertising cookies or cross-site tracking technologies. You may clear cookies at any time through your browser or device settings, though doing so may require you to log in again.

10. Third-Party Links

Forekala may contain links to third-party websites or services (such as your financial institution's website). This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through Forekala.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through an in-app notice at least 30 days before the changes take effect. The updated policy will be posted at forekala.com/privacy with the revised effective date. Your continued use of Forekala after the effective date constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

• Kaveotech
• Email: privacy@kaveotech.com
• Website: kaveotech.com