Kirga is an AI personal money manager. This policy explains what information the app handles, why, and the choices you have. Our guiding principle is simple: your ledger stays on your device and is used only for you. Where something does have to leave the device — to answer a premium AI coach question, for example — we name it here, list exactly what is sent, and give you a way to live without it.
Pidgin
Kirga dey build your money record for dis phone alone. Nothing about your money dey comot, except four things: if you open account, if you buy subscription, if you use di AI coach — na summary of your figures e dey send go our server, then go Anthropic (Claude) — and if you yourself paste your own Anthropic key inside Settings, wey go make dat same summary comot from your phone go Anthropic direct, without passing us. You fit download everything, and you fit delete everything, from inside di app.
Yorùbá
Kirga ń kọ àkọsílẹ̀ owó rẹ sórí fóònù yìí nìkan. Kò sí ohunkóhun nípa owó rẹ tí ń jáde, àyàfi ohun mẹ́rin: bí o bá ṣí àkọọ́lẹ̀, bí o bá rà ìforúkọsílẹ̀, bí o bá lo olùkọ́ AI — àkópọ̀ àwọn nọ́mbà rẹ ni yóò lọ sí sáà wa, lẹ́yìn náà sí Anthropic (Claude) — àti bí ìwọ fúnra rẹ bá fi kọ́kọ́rọ́ Anthropic tìrẹ sínú Ètò, tí àkópọ̀ kan náà yóò fi máa jáde láti inú fóònù rẹ tààrà sí Anthropic, láìsí kíkọjá lọ́dọ̀ wa. O lè gba gbogbo rẹ̀ wọlẹ̀, o sì lè pa gbogbo rẹ̀ rẹ́, láti inú app náà.
Hausa
Kirga na gina bayanan kuɗinka a wannan wayar kaɗai. Babu abin da ya shafi kuɗinka da ke fita, sai abu huɗu: idan ka buɗe asusu, idan ka sayi rajista, idan ka yi amfani da mai koyar da AI — taƙaitawar adadinka ce ke zuwa uwar garkenmu, sannan zuwa Anthropic (Claude) — da kuma idan kai da kanka ka manna maɓallin Anthropic naka a cikin Saituna, wanda hakan ke sa wannan taƙaitawa ta fita daga wayarka kai tsaye zuwa Anthropic, ba tare da ta wuce ta wurinmu ba. Za ka iya sauke komai, kuma za ka iya share komai, daga cikin manhajar.
Igbo
Kirga na-ewu ndekọ ego gị naanị na ekwentị a. Ọ dịghị ihe gbasara ego gị na-apụ, ma e wezụga ihe anọ: ma ị mepee akaụntụ, ma ị zụta ndenye aha, ma ị jiri onye nkuzi AI — nchịkọta ọnụọgụ gị ka ọ na-eziga na sava anyị, wee gaa Anthropic (Claude) — na ma ị tinye igodo Anthropic nke gị na Ntọala, nke na-eme ka otu nchịkọta ahụ si na ekwentị gị gaa Anthropic ozugbo, na-agafeghị anyị. Ị nwere ike ibudata ihe niile, ị nwekwara ike ihichapụ ihe niile, site n’ime ngwa ahụ.
Di English text below na di one wey dey count for law · Ọ̀rọ̀ Gẹ̀ẹ́sì tí ó wà nísàlẹ̀ ni ó ní agbára òfin · Rubutun Turanci da ke ƙasa shi ne mai ƙarfin doka · Ederede Bekee dị n’okpuru bụ nke nwere ike iwu.
1. Who we are
Kirga is published by Korevra Technologies Limited (“we”, “us”). For any privacy question, contact us at aibuedefe@korevra.com — the same address that handles deletion requests, so there is only one inbox to remember.
2. Data we handle, and where
| Data | Purpose | Where it lives |
|---|---|---|
| Your ledger — transactions rebuilt from bank/wallet alerts, balances, budgets, goals, categories | To show your money in one place, coach you, and find charges — the core app functions | On your device only, in the app’s private storage. Never uploaded to Korevra. The one exception is the summary the premium AI coach sends — see §3. |
| Account details — email address, the display name you choose, and a user ID | Only if you choose to register or sign in, to secure your account and to carry a paid subscription across devices | Google Firebase Authentication, acting for us |
| Subscription record — which plan you are on, its expiry, and the store purchase token | Only if you buy a subscription, to verify the purchase with Google Play or Apple and unlock premium features | Google Cloud Firestore, acting for us |
| Premium AI coach — your question, the last few messages of that chat, and a computed summary of your figures (fields listed in §3) | Only when a subscriber asks the premium coach a question, to generate that answer | Sent over HTTPS to Korevra’s own Cloud Function (Google Cloud, europe-west1), which forwards it to Anthropic (api.anthropic.com) using our API key. Not stored by us or used to train any model. If instead you paste your own Anthropic key into Settings, the same summary goes from your phone directly to Anthropic and never reaches Korevra — see §3. |
| Premium AI coach usage counters — how many questions you have asked today and this month, when the last one was, how long they took and what they cost us to run, kept against your user ID | Only if you use the premium coach: to enforce the fair-use limit on a single account, and to understand what the feature costs. Not the questions themselves, and not the answers — only that a question was asked, and when | Google Cloud Firestore, acting for us. Deleted along with everything else when you delete your account |
| The technical request the app makes when it opens — your device’s IP address and the kind of device and browser it is, which every internet request reveals | Always, for one thing only: to pick up app settings and any service message we need to show you | Google Cloud Firestore. No account details, no part of your ledger and nothing about your money is included, and we keep no record of these requests. The typefaces the app is drawn in are packaged inside the app, so nothing is requested from a font service. |
You can use Kirga as a guest, without giving an email address or creating an account. Registering matters only if you want to keep a paid subscription when you change phones.
3. The AI money coach
Pidgin
Di free coach dey work inside dis phone alone — nothing dey comot. Di premium coach different: to answer one question, Kirga dey send your question, di last few messages of dat chat, and one summary wey di phone work out — your name, your work and your city, your salary date, your balance and di money wey safe to spend, every account (di bank name, di last four number, di type, and di balance), di tins wey you spend pass dis month, your budget envelope dem, your goals, dis month and last month figures, wetin Kirga don recover for you, your ajo circle dem (how much per round, how often, which round, and whether you don pay dis round — dis summary no dey carry di name of di circle, e no dey carry di people wey dey inside am), failed transaction wey never reverse and di subscription dem wey Kirga don notice (with di words wey your bank write), up to three debit wey Kirga mark say e strange dis month (di date, di category wey Kirga give am, and di amount — but no di words wey your bank write), and which screen you dey when you ask. E no dey send your full transaction history, e no dey send full account number, card, PIN or password. We no dey keep di question, di summary, or di answer. But we dey count how many question you don ask and wetin e cost us to run am — dat count no carry any part of your question, and e dey comot di day you delete your account (see §2). Di work dey happen for Google Cloud for Europe and for Anthropic for America, and if you use di premium coach, na you don gree for dat transfer under Nigeria Data Protection Act 2023. Odder screens dey send smaller set instead of di whole summary, but two of dem dey send tin wey di summary above no dey send: di Ajo circle helper dey send how each person don dey pay (on time, late, or e no pay) — but by position only, as “Member 1”, “Member 2”, di same number wey dey show beside dem for your own screen. E no dey send di circle name, and e no dey send anybody name at all. Na still record about odder people, so nothing dey comot from dat screen unless you tap “AI talk”; and di Guard dispute letter dey send your name, your bank, di last four number, plus di amount, date, reference, balance and di exact words wey your bank write for dat one alert, because na letter to your bank.
Yorùbá
Olùkọ́ ọ̀fẹ́ náà ń ṣiṣẹ́ nínú fóònù yìí nìkan — kò sí ohun tí ń jáde. Olùkọ́ tí a ń san owó fún yàtọ̀: láti dá ìbéèrè kan lóhùn, Kirga á fi ìbéèrè rẹ, àwọn ọ̀rọ̀ díẹ̀ tí ó kẹ́yìn nínú ìjíròrò náà, àti àkópọ̀ kan tí fóònù yìí ṣírò ránṣẹ́ — orúkọ rẹ, iṣẹ́ rẹ àti ìlú rẹ, ọjọ́ owó-oṣù rẹ, iye owó rẹ àti iye tí ó ṣeé ná, àkántì kọ̀ọ̀kan (orúkọ báńkì, nọ́mbà mẹ́rin tí ó kẹ́yìn, irú rẹ̀, àti iye owó inú rẹ̀), àwọn ohun tí o ná owó sí jùlọ ní oṣù yìí, àwọn àpò ìnáwó rẹ, àwọn àfojúsùn rẹ, àwọn nọ́mbà oṣù yìí àti ti oṣù tó kọjá, iye tí Kirga ti gbà padà fún ọ, àwọn ẹgbẹ́ àjọ rẹ (iye fún ìyíká kan, ìgbà mélòó, ìyíká wo ni ẹ wà, àti bóyá o ti san ìyíká yìí — àkópọ̀ yìí kì í gbé orúkọ ẹgbẹ́ náà, kì í sì í gbé àwọn ènìyàn tí ó wà nínú rẹ̀), àwọn ìnáwó tí kò yọrí sí rere tí a ṣì ń tọ́jú àti àwọn ìforúkọsílẹ̀ tí Kirga rí (pẹ̀lú ọ̀rọ̀ tí báńkì rẹ kọ), tó bá dé mẹ́ta nínú àwọn ìnáwó tí Kirga sàmì sí bí àjèjì ní oṣù yìí (ọjọ́, ẹ̀ka tí Kirga fi sí i, àti iye — ṣùgbọ́n kì í ṣe ọ̀rọ̀ tí báńkì kọ), àti ojú-ìwé tí o wà lórí rẹ̀ nígbà tí o béèrè. Kì í fi gbogbo ìtàn ìnáwó rẹ ránṣẹ́, kì í fi nọ́mbà àkántì kíkún, káàdì, PIN tàbí ọ̀rọ̀ ìgbaniwọlé ránṣẹ́. A kì í tọ́jú ìbéèrè náà, àkópọ̀ náà tàbí ìdáhùn náà. Ṣùgbọ́n a ń ka iye ìbéèrè tí o ti béèrè àti iye tí ó ná wa láti ṣiṣẹ́ rẹ̀ — kíka náà kò gbé apá kankan nínú ìbéèrè rẹ, ó sì ń parẹ́ ní ọjọ́ tí o bá pa àkàǹtì rẹ rẹ́ (wo §2). Iṣẹ́ yìí ń ṣẹlẹ̀ ní Google Cloud ní Yúróòpù àti ní Anthropic ní Amẹ́ríkà, bí o bá sì lo olùkọ́ tí a ń san owó fún, ìwọ ti fọwọ́ sí ìfiránṣẹ́ yẹn lábẹ́ Òfin Ààbò Dátà ti Nàìjíríà 2023. Àwọn ojú-ìwé mìíràn ń fi ìwọ̀nba díẹ̀ ránṣẹ́ dípò gbogbo àkópọ̀ náà, ṣùgbọ́n méjì nínú wọn ń fi ohun tí àkópọ̀ òkè yìí kò fi ránṣẹ́: olùrànlọ́wọ́ ẹgbẹ́ àjọ ń fi bí ẹnìkọ̀ọ̀kan ṣe ń san (ní àsìkò, pẹ́, tàbí kò san) ránṣẹ́ — ṣùgbọ́n nípa ipò nìkan, bí “Member 1”, “Member 2”, nọ́mbà kan náà tí ó hàn lẹ́gbẹ̀ẹ́ wọn lórí ojú-ìwé rẹ. Kì í fi orúkọ ẹgbẹ́ náà ránṣẹ́, kì í sì í fi orúkọ ẹnikẹ́ni ránṣẹ́ rárá. Ó ṣì jẹ́ àkọsílẹ̀ nípa àwọn ẹlòmíràn, nítorí náà kò sí ohunkóhun tí ń jáde láti ojú-ìwé yẹn àyàfi bí o bá tẹ “Àyẹ̀wò AI”; olùkọ̀wé ẹ̀sùn Guard sì ń fi orúkọ rẹ, báńkì rẹ, nọ́mbà mẹ́rin tí ó kẹ́yìn, àti iye, ọjọ́, ìtọ́kasí, iye owó tí ó kù àti ọ̀rọ̀ gan-an tí báńkì rẹ kọ sínú ìfilọ̀ yẹn ránṣẹ́, nítorí pé lẹ́tà sí báńkì rẹ ni.
Hausa
Mai koyarwa na kyauta yana aiki a cikin wannan wayar kaɗai — babu abin da ke fita. Mai koyarwa na biya ya bambanta: don amsa tambaya ɗaya, Kirga na aika tambayarka, saƙonni kaɗan na ƙarshe na wannan hira, da wata taƙaitawa da wayar ta ƙididdige — sunanka, aikinka da birninka, ranar albashinka, ma’aunin kuɗinka da adadin da ya tsira ka kashe, kowane asusu (sunan banki, lambobi huɗu na ƙarshe, irinsa, da ma’aunin sa), manyan abubuwan da ka fi kashe kuɗi a kai wannan wata, ambulan kasafin kuɗinka, manufofinka, adadin wannan wata da na watan jiya, abin da Kirga ya dawo maka da shi, ƙungiyoyin adashinka (nawa a kowane zagaye, sau nawa, wane zagaye, da ko ka biya wannan zagaye — wannan taƙaitawa ba ta ɗauke da sunan ƙungiyar, kuma ba ta ɗauke da mutanen da ke cikinta), kuɗaɗen da suka gaza da ake sa ido a kansu da rajistar da Kirga ya gano (tare da kalmomin da bankinka ya rubuta), har zuwa kuɗaɗe uku da Kirga ya yi wa alama a matsayin baƙon abu wannan wata (kwanan wata, rukunin da Kirga ya sa masa, da adadi — amma ba kalmomin bankin ba), da kuma allon da kake kai lokacin da ka yi tambayar. Ba ya aika cikakken tarihin kuɗinka, ba ya aika cikakkiyar lambar asusu, katin banki, PIN ko kalmar sirri. Ba ma ajiye tambayar, taƙaitawar ko amsar. Amma muna ƙirga adadin tambayoyin da ka yi da abin da suka ci mana wajen gudanarwa — wannan ƙirgar ba ta ɗauke da wani sashe na tambayarka, kuma tana gogewa ranar da ka goge asusunka (duba §2). Wannan aikin na faruwa a Google Cloud a Turai da kuma a Anthropic a Amurka, kuma idan ka yi amfani da mai koyarwa na biya, kai ka yarda da wannan mika bayanan a ƙarƙashin Dokar Kare Bayanai ta Najeriya 2023. Sauran allon suna aika ƙarami maimakon dukan taƙaitawar, amma biyu daga cikinsu suna aika abin da taƙaitawar da ke sama ba ta aikawa: mai taimakon ƙungiyar adashi yana aika yadda kowanne yake biya (a kan lokaci, a jinkirce, ko bai biya ba) — amma ta matsayi kaɗai, kamar “Member 1”, “Member 2”, lambar guda da ke bayyana kusa da su a allonka. Ba ya aika sunan ƙungiyar, kuma ba ya aika sunan kowa ko kaɗan. Duk da haka bayani ne game da wasu mutane, don haka babu abin da ke fita daga wannan allon sai ka danna “Karatun AI”; kuma marubucin ƙorafin Guard yana aika sunanka, bankinka, lambobi huɗu na ƙarshe, da adadin, kwanan wata, lambar tabbatarwa, ma’auni da ainihin kalmomin da bankinka ya rubuta a wannan saƙo, domin wasiƙa ce zuwa ga bankinka.
Igbo
Onye nkuzi n’efu na-arụ ọrụ naanị n’ime ekwentị a — ọ dịghị ihe na-apụ. Onye nkuzi a na-akwụ ụgwọ dị iche: iji zaa otu ajụjụ, Kirga na-eziga ajụjụ gị, ozi ole na ole ikpeazụ nke mkparịta ụka ahụ, na otu nchịkọta ekwentị a gbakọrọ — aha gị, ọrụ gị na obodo gị, ụbọchị ụgwọ ọnwa gị, ego ị nwere na ego ọ dị mma ka i mefuo, akaụntụ ọ bụla (aha ụlọ akụ, ọnụọgụ anọ ikpeazụ, ụdị ya, na ego dị na ya), ihe ndị ị na-emefu ego kacha n’ọnwa a, envelopu mmefu gị, ebumnuche gị, ọnụọgụ ọnwa a na nke ọnwa gara aga, ego Kirga nwetaghachiriri gị, otu ajọ gị (ego kwa gburugburu, ugboro ole, gburugburu ole, na ma ị kwụọla n’oge a — nchịkọta a anaghị ebu aha otu ahụ, ọ naghịkwa ebu ndị nọ na ya), azụmahịa dara ada ndị a ka na-eleta na ndenye aha Kirga chọpụtara (tinyere okwu ụlọ akụ gị dere), ruo azụmahịa atọ Kirga kara akara dị ka ihe na-adịghị mma n’ọnwa a (ụbọchị, ụdị Kirga tinyere ya, na ego — mana ọ bụghị okwu ụlọ akụ), na ihuenyo ị nọ na ya mgbe ị jụrụ. Ọ naghị eziga akụkọ mmefu gị dum, ọ naghị eziga nọmba akaụntụ zuru ezu, kaadị, PIN ma ọ bụ okwuntughe. Anyị anaghị echekwa ajụjụ ahụ, nchịkọta ahụ, ma ọ bụ azịza ahụ. Mana anyị na-agụ ole ajụjụ ị jụrụ na ihe ọ na-efu anyị ịgba ya — ọnụ ọgụgụ ahụ anaghị ebu akụkụ ọ bụla nke ajụjụ gị, a na-ehichapụkwa ya n’ụbọchị i hichapụrụ akaụntụ gị (lee §2). Ọrụ a na-eme na Google Cloud na Europe nakwa na Anthropic na America, ọ bụrụkwa na i jiri onye nkuzi a na-akwụ ụgwọ, ị kwenyerela na mbufe ahụ n’okpuru Iwu Nchedo Data Naịjirịa 2023. Ihuenyo ndị ọzọ na-eziga obere ihe kama nchịkọta ahụ dum, mana abụọ n’ime ha na-eziga ihe nchịkọta dị n’elu na-adịghị eziga: onye inyeaka otu ajọ na-eziga otú onye ọ bụla si akwụ ụgwọ (n’oge, n’azụ, ma ọ bụ ọ kwụghị) — mana site n’ọnọdụ naanị, dị ka “Member 1”, “Member 2”, otu nọmba ahụ na-apụta n’akụkụ ha n’ihuenyo gị. Ọ naghị eziga aha otu ahụ, ọ naghịkwa eziga aha onye ọ bụla ma ọlị. Ọ ka bụ ndekọ gbasara ndị ọzọ, ya mere ọ dịghị ihe na-apụ n’ihuenyo ahụ ma ọ bụrụ na ị pịaghị “Ọgụgụ AI”; onye edemede mkpesa Guard na-ezigakwa aha gị, ụlọ akụ gị, ọnụọgụ anọ ikpeazụ, na ego, ụbọchị, akara ntụaka, ego fọdụrụ na kpọmkwem okwu ụlọ akụ gị dere n’ọkwa ahụ, n’ihi na ọ bụ akwụkwọ ozi a na-edegara ụlọ akụ gị.
Di English text below na di one wey dey count for law · Ọ̀rọ̀ Gẹ̀ẹ́sì tí ó wà nísàlẹ̀ ni ó ní agbára òfin · Rubutun Turanci da ke ƙasa shi ne mai ƙarfin doka · Ederede Bekee dị n’okpuru bụ nke nwere ike iwu.
The free coach runs on your phone
Every user gets a money coach that runs entirely on the device. It reads your ledger locally, computes its answers locally, and makes no network request. Nothing about your money leaves your phone when you use it.
The premium coach is processed by us and by Anthropic
If you subscribe and ask the premium coach a question, your question and a computed summary of your figures are sent over HTTPS to a Cloud Function operated by Korevra (Google Cloud, europe-west1). That function adds the summary to a prompt and forwards it to Anthropic (Claude) under Korevra’s own API key — you do not need a key of your own. The summary contains:
- the name, role and city you entered, and the dates of your salary cycle;
- your net position, spendable balance and safe-to-spend figure, and this cycle’s money in, money out and bank charges;
- each account you have added — the institution name, the last four digits shown in your alerts, the account type and its balance;
- your top spending categories for the month;
- your budget envelopes — the category each one covers, the limit you set and how much of it you have spent;
- your savings goals and how far along each one is;
- this month’s and last month’s totals for money in, money out and bank charges, and last month’s biggest spending category;
- how much Kirga has recovered for you so far, and what it projects the cancelled renewals will save over the next twelve months;
- your Ajo/esusu circles — how much each round costs you, how often a round falls, which round you are on, and whether you have paid this one. Not the circle’s name, and nothing about the other members: those are other people’s details, and they are not yours or ours to send;
- failed transactions Kirga is still watching, and any recurring subscriptions it has detected — for these two, including the wording your bank put on the alert, because that wording is what identifies the payment;
- up to three debits Kirga flagged as unusual this month — the date, the category Kirga itself assigned and the amount. Not the wording on those alerts;
- which screen of the app you were on when you asked, when it is not the coach’s own screen;
- the last few messages of the current coach conversation.
It does not include your full transaction history, full account numbers, card details, PINs, passwords or your contacts. Korevra does not store the question, the summary or the answer: the function keeps no copy and no chat history is written to our database. We do keep a count of how many questions you have asked, so that one account cannot run up an unlimited bill — that counter holds no part of the question and is listed in §2. This processing happens outside Nigeria — on Google Cloud servers in the European Union and by Anthropic in the United States — and by using the premium coach you consent to that transfer under the Nigeria Data Protection Act 2023. Every other part of Kirga works without it.
What the other AI screens send
The summary above is what the coach sends. Where another premium screen asks Claude something narrower, it sends only the facts that question needs, in place of the whole summary — never both. Each of the four is narrower than the summary, but narrower does not mean it is contained in it: the Guard letter names one transaction’s reference and the balance it left behind, and the Ajo circle helper sends details about other people that the coach summary deliberately withholds. All four are set out here in full.
- The Money Story recap on Insight — which month it is, and that month’s money in, money out, what you kept, bank charges, your biggest spending category with its share of the month’s spending, what you moved into savings, and the name of the goal you are closest to finishing with how far along it is. No accounts, no balances, no safe-to-spend figure.
- A Learn lesson — your safe-to-spend figure as it stands now, that month’s money in, money out and bank charges, and your biggest spending category. With them go the exchange rate behind any of those figures that had to be converted, whether the records behind them were read from bank alerts or typed in by hand, and the words your own screens use for those four figures in your language, so the answer calls them what the tiles call them. No goals, no accounts, no balances.
- A Guard dispute letter — your name, your bank, the last four digits of the account, and that one failed transaction’s amount, date and time, reference, the balance after it, how long it has gone unresolved, and the wording on its alert, because the letter is addressed to your bank and has to quote the alert back to them.
- The Ajo circle helper — that circle’s round amount, how often a round falls, which round you are on, how much has been contributed so far and when it is projected to finish, and each member’s record of on-time, late and missed rounds — by position, never by name. The circle’s name is not sent, and no member’s name is sent: people appear only as “Member 1”, “Member 2” and so on, the same numbers shown beside them on your own screen, and the request tells the model plainly that it has not been given any name and must not invent one. It is still a record of other people’s behaviour, and those people may not use Kirga at all, so nothing on that screen is sent unless you tap “AI read”. The circle’s own tiles, its reliability scores and its offline read are computed on your device and send nothing.
Using your own Anthropic key (advanced)
Settings also lets you paste your own Anthropic (Claude) API key instead, on any plan including the free one. A key entered there is stored only in your device’s local storage and is never transmitted to Korevra. It is used to call Anthropic directly from your device — which means the same summary described above, or on the other screens the same narrower set described above, is sent from your phone straight to Anthropic in the United States every time you ask, without passing through us. Nothing extra is added on this route; the difference is the road, not the load. Because that is a transfer you make yourself, Settings states it and asks you to tick that you agree before the key field accepts anything; that tick is your consent under the Nigeria Data Protection Act 2023. You can remove the key at any time in Settings, and signing out removes it too, so a shared phone does not carry it to the next person. Your billing relationship for those requests is with Anthropic, not with us.
4. How we use information
- To provide the app’s features (unified view, coaching, charge detection, goals, Ajo circles).
- To authenticate you and to check whether you have an active subscription.
- To answer your questions when you use the premium AI coach (§3).
- We do not sell your data, do not show ads, and do not use your financial data for advertising or profiling.
5. Sharing
We do not share your personal data with third parties for their own purposes. These service providers process data strictly on our instructions, and only for the purposes above:
- Google Firebase / Google Cloud — authentication, hosting, our subscription records, and the Cloud Functions (hosted in europe-west1) that run the premium AI coach and validate purchases.
- Anthropic — generates the AI coach’s answers from the summary described in §3. This applies both to the premium coach, which reaches Anthropic through our server, and to the advanced option of using your own key, which reaches Anthropic directly from your device.
- Google Play and Apple — take your payment and tell us whether a subscription is valid. We never see your card details.
We may disclose information if required by law.
6. Security & retention
Your ledger is held in the app’s private storage on your device, protected by your phone’s own storage encryption and its app sandbox, so other apps cannot read it. Data in transit uses HTTPS/TLS.
Kirga does not sync or back up your ledger to any server. There is no cloud copy of your transactions, so there is nothing held by us for anyone to read. The other side of that is that your ledger lives and dies with your phone: use Download my data in the app if you want a copy. If we add optional sync in future, we will update this policy before that feature ships, and it will be off unless you turn it on.
We keep account and subscription data only for as long as your account exists; deleting your account removes it — see Delete your account & data. On-device data stays on your device until you delete it or uninstall the app.
7. Your rights & choices
- Access & portability: export your full data at any time from within the app.
- Rectification: edit or correct any record in the app.
- Erasure: delete your on-device data, and delete your account and subscription record using in-app deletion or by emailing aibuedefe@korevra.com from the address registered to the account. Full steps are on Delete your account & data.
- Withdraw consent: stop using the premium AI coach, remove any AI key, or turn off notifications, at any time in Settings.
8. Permissions
On Android, Kirga reads bank alerts through notification access, which you grant yourself in your phone’s settings. Kirga declares no SMS permission, so it cannot open your message inbox. It sees only what your phone already shows in the notification shade — and if your bank sends its alert by SMS, that alert appears there too, so Kirga reads it there. Kirga keeps only alerts whose sender is a bank or wallet on its list, solely to build your own ledger — nothing else, and never for ads or resale. Every other notification, including messages from people, is discarded unread. The app is fully usable if you decline: you can paste or type alerts in yourself. Notifications are used for salary-day briefs, unusual-charge alerts, money that has not come back, an Ajo round that is due, a savings goal reached, and your month-end summary, and can be turned off in your device settings.
9. Children
Kirga is intended for adults (18+) managing their own finances and is not directed at children.
10. Changes
We may update this policy; material changes will be reflected here with a new “last updated” date.