This Privacy Policy explains how Bilsis Information Systems and Technologies Inc. (“Bilsis,” “we,” “us”) collects, uses, and protects your information when you use Akcha (the “Service”), a personal finance application that lets you connect your financial accounts to see your balances, transactions, budgets, and insights in one place.
By using Akcha you agree to this Policy. If you do not agree, please do not use the Service.
Information we collect
- Account information — your name, email address, and password (passwords are handled by our authentication provider and stored only as a secure hash; we never see them in plain text).
- Sign-in through Google or Apple — if you choose to sign in with one of these providers instead of a password, we receive your name and email address from them so we can create your account. We do not receive your password, and we do not post anything or read anything else from those accounts.
- Financial account data — when you connect a bank through our data provider Plaid, we receive information such as account names and balances, transaction history, and institution details. We never receive or store your online banking username or password — those are entered directly with Plaid and your bank.
- Payment information — subscriptions are processed by Stripe. We do not store your full card number; Stripe handles payment details and shares only limited billing metadata (e.g. subscription status, renewal date) with us.
- Preferences you set — such as your display currency, language, notification settings, budgets, goals, categories, and notes you add to transactions.
- Balance history — when you have a scheduled summary turned on, we record your total balances once per send so the email can tell you how your position moved since the last one. Without it there is nothing to compare against.
- Technical data — basic information needed to operate the Service securely, such as log and device data and error diagnostics.
How we use your information
- To provide the Service — display your accounts, transactions, budgets, goals, and insights across every device you sign in from.
- To detect recurring payments, forecast spending, and generate the analytics that are the core of Akcha.
- To process your subscription and manage billing.
- To send you service-related communications (e.g. account confirmation and password reset) and, if you turn them on, the scheduled email summaries of your spending. You can switch those off at any time in Settings, or from the unsubscribe link in any summary.
- To secure the Service, prevent abuse, debug problems, and meet legal obligations.
We do not sell your personal or financial information, and we do not use your bank data for advertising.
How we share information
We share information only with the service providers that make Akcha work, and only as needed:
- Plaid — securely connects your bank accounts and provides transaction data. Your use of Plaid is also governed by Plaid’s End User Privacy Policy.
- Stripe — processes subscription payments.
- Supabase — hosts our database and authentication.
- Vercel — hosts and serves the application.
- Resend — delivers transactional email.
- Google Analytics — tells us which screens are used, and nothing else. It receives no financial information and no information that identifies you. See “Cookies and analytics” below.
- Sentry — reports technical errors so we can fix them. It receives the error, the page it happened on, and the code that failed. It does not receive your financial data, anything you typed, your session, or an identifier for your account.
We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change affecting your data).
Cookies and analytics
We use a small number of cookies and similar technologies, and it matters which is which:
- Essential cookies — keep you signed in and keep your session secure. Akcha does not work without them, and they carry no advertising purpose.
- A local preference — your light or dark theme choice is stored in your browser and never sent to us.
- Google Analytics — tells us which screens people use, so we know what to improve. It runs on our public pages and inside your account, and what it receives is deliberately narrow: the name of the screen you are on (for example “Dashboard” or “Transactions”) and nothing further.
- It never receives your balances, transactions, budgets, goals, account names, or any other financial information — none of that is sent, and none of it appears in a screen name.
- It never receives what you type. Anything a page carries in its address — a search you ran, an account you opened — is removed before the screen name is sent.
- We send no user ID and no account identifier, so Google Analytics cannot tell one Akcha user from another. IP addresses are anonymised.
We do not use advertising cookies, we do not run advertising or retargeting tags, and we do not share your financial information with any analytics provider. Most browsers let you block or delete cookies; blocking analytics cookies does not affect your use of Akcha.
Where your data is stored
Your data is stored on infrastructure located in Canada. Some of our service providers (e.g. Plaid, Stripe) may process limited data in the United States or other jurisdictions in order to provide their services. Where data crosses borders, it remains subject to appropriate safeguards.
How we protect your information
- Bank access tokens are encrypted at rest, with the encryption key kept separately from the database.
- Every account’s data is isolated by row-level security, so you can only ever access your own information.
- All traffic is encrypted in transit (HTTPS), and webhooks from our providers are cryptographically verified.
No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of financial data.
Data retention
We keep your information for as long as your account is active. When you delete your account, we delete your personal and financial data and disconnect your linked institutions, except where we must retain limited records to meet legal, tax, or accounting obligations.
Your rights and choices
- Access & correction — you can view and edit much of your information in the app, and request a copy of your data.
- Deletion — you can delete your account at any time from Settings, which removes your data and unlinks your banks.
- Disconnecting banks — you can remove any linked institution at any time, which stops Akcha from receiving further data from it.
- Depending on where you live (e.g. under Canada’s PIPEDA, the EU/UK GDPR, or California’s CCPA), you may have additional rights. Contact us to exercise them.
Children
Akcha is not directed to, and may not be used by, anyone under the age of majority in their jurisdiction. We do not knowingly collect information from children.
Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you (for example, by email or in the app) before they take effect. The “Last updated” date above reflects the current version.
Contact us
Questions about this Policy or your data? Contact us at privacy@akcha.app, or by mail at Bilsis Information Systems and Technologies Inc., 17 Bathurst Street, M5V 0N1, Ontario, Canada.