Privacy Policy

Last updated: February 2, 2026

Introduction

Kabalot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our receipt and invoice management application at kabalot.app (the "Service").

Information We Collect

When you use Kabalot, we collect the following types of information:

Account Information

When you sign in with Google, we receive your email address and basic profile information (name and profile picture) to create and manage your account.

Gmail Data

With your explicit consent, Kabalot accesses your Gmail account using the Gmail API to scan for emails containing receipts and invoices. Specifically, we:

• Read email messages to identify receipts and invoices
• Extract relevant information such as merchant names, dates, amounts, and items
• Access email attachments (PDFs, images) that contain receipt data

We only access emails that appear to be receipts or invoices. We do not read, store, or process your personal correspondence or other non-receipt emails.

How We Use Your Information

We use your information solely to:

• Provide the core functionality of identifying and organizing your receipts
• Display your collected receipts and invoices within the application
• Allow you to search, filter, and manage your receipts
• Improve the accuracy of our receipt detection

Google API Services User Data Policy

Kabalot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use Disclosure

Kabalot's use of information received from Gmail APIs is limited to providing and improving user-facing features that are prominent in the application's user interface. Specifically:

• We do not use Gmail data for advertising. We will not use your email content for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not sell your data. We will never sell, rent, or lease your Gmail data or any personal information to third parties.
• We do not use your data for credit assessments. Your data will not be used for creditworthiness determinations or lending qualification purposes.
• We limit human access to your data. We do not allow humans to read your Gmail data unless: (a) we have your explicit consent for a specific message, (b) it is necessary for security purposes (such as investigating abuse), (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data has been aggregated and anonymized.

Data Sharing

We do not share your personal data or Gmail content with third parties, except:

• With your explicit consent
• To comply with legal obligations or valid legal processes
• To protect our rights, privacy, safety, or property
• With service providers who assist in operating our service, under strict confidentiality agreements

Data Security

We implement industry-standard security measures to protect your information:

• All data is encrypted in transit using TLS/SSL
• All stored data is encrypted at rest
• Access to user data is strictly limited to essential personnel
• We regularly review and update our security practices

Data Retention and Deletion

We retain your data only for as long as necessary to provide our services or as required by law. You may request deletion of your data at any time.

To delete your data:

• Contact us at ordvir24@gmail.com with the subject "Data Deletion Request"
• We will delete all your data within 30 days of receiving your request
• You will receive confirmation once deletion is complete

Revoking Access

You can revoke Kabalot's access to your Google account at any time:

1. Go to your Google Account at myaccount.google.com/permissions
2. Find "Kabalot" in the list of apps with access to your account
3. Click on "Kabalot" and select "Remove Access"

After revoking access, Kabalot will no longer be able to access your Gmail. Your existing data in Kabalot will remain until you request deletion.

Your Rights

You have the right to:

• Access - Request a copy of the personal data we hold about you
• Correction - Request correction of inaccurate personal data
• Deletion - Request deletion of your personal data
• Portability - Request your data in a portable format
• Revocation - Revoke consent and disconnect your Google account at any time

To exercise any of these rights, contact us at ordvir24@gmail.com.

Children's Privacy

Kabalot is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and, where appropriate, notifying you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.