Privacy Notice

Last updated: June 2026. Operated by Annapurna Labs.

The short version

Keel does not read your SMS messages, email, UPI notifications, or any data from your bank or phone. We never have and never will. Entry is always manual or by your own voice. Your money data stays private.

What we collect

We collect two things and nothing else: your email address (used only to send your magic sign-in link) and the expense entries you choose to add. We do not collect your name, phone number, payment instrument details, or device identifiers.

Voice entry

If you use voice to add an entry, the audio is processed entirely on your device by your browser's built-in speech API. We receive only the text transcript you confirm. No audio is sent to our servers. With your permission, the transcript and your final confirmed entry may be stored to improve accuracy over time. No account balances or monetary amounts appear in these samples. You can opt out or delete all stored samples from Settings at any time.

Analytics

We use Microsoft Clarity (session analytics) in production to understand how people use the app. Clarity is configured with full text and input masking: no amounts, descriptions, or personal text is ever captured. You can exclude your browser from Clarity at /opt-out.

How we use your data

Your email is used solely to authenticate you (one magic link per sign-in). Your expense data is used solely to power your own Keel experience. We do not sell, rent, or share your personal data with any third party for marketing or advertising.

Data storage and security

Your data is stored on Cloudflare's infrastructure (D1 database, servers in the APAC region). Connections are encrypted in transit (HTTPS). Sessions are protected by httpOnly, Secure, SameSite cookies. Magic-link tokens are single-use and expire within 15 minutes.

Retention and deletion

Your data is retained for as long as your account is active. You can export all your data (CSV or JSON) from Settings at any time. To delete your account and all associated data, contact us. We will complete the deletion within 7 business days and confirm by email.

Your rights

Under applicable Indian law (Information Technology Act and IT Rules), you have the right to access, correct, and delete the personal information we hold about you. To exercise any of these rights, contact us.

Third-party processors

We use Cloudflare (infrastructure and database) and Microsoft Clarity (masked analytics). When payments are activated, Razorpay will process payment transactions. Each processor's privacy policy governs their use of data. We do not share your financial entries with any processor.

Changes to this notice

We will post any material changes to this page and update the "Last updated" date. Continued use of Keel after a change constitutes acceptance.