Privacy Policy

Who is responsible for your data

Kabalit is operated by Uriel Pavlov, an individual operator based in Israel. Uriel Pavlov is the data controller responsible for the personal data described in this Privacy Policy.

The way to reach the controller about anything in this policy — a question, a request about your data, or a complaint — is support@kabalit.com. That address is monitored by the operator personally.

Kabalit is not a company. There is no separate legal entity behind it, and this policy does not pretend otherwise.

What we store

Kabalit holds three kinds of content, plus the account details needed to run the service.

• Account: your email address, your name if you provide one, your sign-in identifier, and preferences such as language.
• Receipts: the photo or PDF you upload, and the details recorded against it — merchant, date, total, currency, tax if printed, receipt number, category, tags and notes.
• Product warranties: the product name, manufacturer, model and serial number if you enter them, purchase details, warranty dates, the linked receipt, and any warranty document you attach.
• Important documents: the file itself, its title, category and optional expiry date.
• Operational records: service logs needed to run and secure the service, and counters for your plan usage.

Auto Fill and our AI provider

Auto Fill is the feature that reads a receipt for you. When it runs, Kabalit sends the receipt file you uploaded — the image or PDF itself — to Anthropic, our AI processing provider, together with an instruction to extract the details.

Anthropic returns the merchant, purchase date, total, currency, receipt number, a product name if one is visible, any warranty or return wording printed on the receipt, and a full text transcription of the receipt. Kabalit stores that result and uses it to fill in the blank fields on your receipt.

To avoid paying to read the same file twice, the extraction result is cached against a fingerprint of the file contents. That cache is deleted when you delete your account.

Auto Fill only runs on receipts and warranty material. It does not run by itself on a plan with no remaining allowance, and you can use Kabalit entirely by entering details yourself.

We ask for your permission before the first time a receipt is sent, and we record that decision — which version of this disclosure you saw, and when. If you decline, receipts are still stored and you can enter the details yourself. You can change your mind at any time.

Important documents are not sent to our AI provider

Important documents are stored separately from receipts, in their own storage, encrypted with their own dedicated key.

The part of Kabalit that talks to our AI provider has no access to that storage and no permission to use that key. It cannot read your important documents, so it cannot send them anywhere. This is enforced by the permissions of the system itself, not only by our code.

If we ever build a feature that processes important documents with AI, it would require your explicit choice, and we would update this policy before releasing it.

Who else processes your data

We use a small number of providers, each for a specific job. Each one acts on our instructions, and none of them may use your data for their own purposes.

• Amazon Web Services — hosting, file storage, database and encryption keys. Kabalit runs in the AWS Europe (Ireland) region, inside the EEA.
• Anthropic — Auto Fill only, as described above. Anthropic processes these requests in the United States.
• Stripe — payments. Paid subscriptions are not currently available, and no card details ever reach Kabalit’s servers.
• Amazon SES — service emails such as sign-in verification. Also in the Europe (Ireland) region.

Where your data goes

Your account, your files, your database records and our service emails all stay in the AWS Europe (Ireland) region, inside the EEA. Nothing about the core service moves outside it.

Two things do cross a border, and we would rather name them than leave you to guess.

• Auto Fill. If you turn it on, the receipt file is sent to Anthropic and processed in the United States. Anthropic acts as our processor under its Data Processing Addendum, which incorporates the European Commission’s Standard Contractual Clauses and the UK Addendum — the transfer mechanisms the law provides for exactly this situation. Anthropic deletes the request and its result within 30 days, and is contractually barred from training models on it. If you decline Auto Fill, nothing is sent and no transfer happens.
• Administration. Kabalit is run from Israel, so the operator administers the service from there. The European Commission has formally decided that Israel provides an adequate level of data protection — a decision first made in 2011 and reconfirmed in January 2024 — which means personal data may move from the EEA to Israel without any additional safeguard.

Our legal grounds for using your data

If you are in the EEA or the UK, the law requires us to have a specific legal ground for each thing we do with your data, and to tell you what it is. These are ours.

• Running your account, storing what you upload, showing it back to you, exporting it, and sending you the service emails that make the account work — because we need to do these things to provide the service you signed up for (performance of a contract).
• Auto Fill — your consent, which we ask for separately and which you can withdraw at any time. Withdrawing it stops Auto Fill and nothing else; your receipts stay exactly where they are.
• Keeping the service secure — preventing abuse, limiting how often expensive operations can be run, and keeping short-lived service logs — because we have a legitimate interest in a service that is not degraded or exploited, and these measures are the minimum that achieves it.
• Billing, if and when paid plans open — to perform the contract, and to meet the tax and accounting obligations that apply to us by law.
• Answering your support emails — to perform the contract where your question is about the service, and otherwise because we have a legitimate interest in helping the people who write to us.

Sharing

We do not sell your data, rent it, or use it for advertising.

We do share it in the specific ways described in this policy: with the providers above so the service can run, and with anyone you personally choose to share a receipt with. We would also disclose data if the law required it.

Security

Your files are stored in private storage that is not publicly reachable, and connections are encrypted in transit. Receipts are encrypted at rest. Important documents are encrypted at rest with a separate dedicated key, and opening one requires an additional verification step with an authenticator app.

No service can promise perfect security, and we do not claim any external security certification.

Deleting your data

You can delete your whole account from Settings, at any time. That removes your account records, your receipts, products and warranty data, your important documents, and the files behind all of them, including earlier versions of those files. It also deletes the cached Auto Fill results derived from your files and your sign-in identity. This cannot be undone.

If you delete a single receipt or document rather than your whole account, the file is removed from the app immediately. Our storage keeps previous versions of files for up to 30 days as protection against accidental loss, after which they are removed automatically.

Our database has a rolling 35-day point-in-time recovery window provided by AWS. It exists so we can recover from a technical failure, and it is not used to restore individual deleted items.

How long we keep things

We keep your data for as long as your account exists. If a paid plan ends, nothing is deleted — you keep access to everything you saved.

Operational logs — the records our systems write while running the service — are kept for 30 days and then deleted automatically.

Your choices and your rights

Most of what you might want to do, you can do yourself and immediately: view and correct your data in the app, export your receipts, change or withdraw your Auto Fill consent in Settings, and delete your account outright.

If you are in the EEA or the UK you also have rights we handle by email rather than by building a portal for them — a copy of your data in a portable form, restriction of processing, objection to processing we base on legitimate interests, and erasure of something short of the whole account. Write to us and we will do it. We answer within one month.

• Ask us anything, or exercise any of these rights: support@kabalit.com.
• You are not obliged to give us anything beyond an email address and a password, which we need in order to have an account to give you. Everything else — your name, and every receipt, product and document — is yours to add or not. There is no consequence to leaving it out, other than the app having less to show you.
• Nothing in Kabalit makes an automated decision about you. Auto Fill reads a receipt and fills in fields; it does not profile you, score you, or decide anything that affects you.
• If you think we have handled your data badly, please tell us first — but you do not have to. You can complain directly to a data protection supervisory authority: in the EEA, the authority in the country where you live or work, or where you think the problem happened; in the UK, the Information Commissioner’s Office at ico.org.uk.

Children

Kabalit is intended for adults managing their own records. It is not directed at children.

Changes to this policy

If we make a material change, we will tell you in the app or by email before it takes effect. The date at the top of this page shows when it was last updated.