Kkendo

Privacy Policy

Last updated: March 16, 2026

1. Introduction

Kendo ("we", "our", or "us") operates the Kendo mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Kendo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (stored securely as a hash). If you sign in with Google, we receive your name and email from Google.

Receipt Data: When you scan a receipt, we process the image using optical character recognition (OCR) to extract merchant name, amount, currency, date, and category. The original receipt image is stored securely.

Usage Data: We collect information about how you use the Service, including workspace activity, device type, and app version.

Push Notification Tokens: If you enable push notifications, we store your device token to send you relevant notifications such as workspace invitations and budget alerts.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process and extract data from your receipt images
  • Calculate spending statistics and currency conversions
  • Send push notifications you have opted in to
  • Manage your account and workspace memberships
  • Process subscription payments through Stripe
  • Respond to your support requests
  • Detect and prevent fraud or abuse

4. Data Storage & Security

Your data is stored on secure servers with industry-standard encryption in transit (TLS) and at rest. Receipt images are stored in Google Cloud Storage with access controls. Passwords are hashed using bcrypt and are never stored in plain text.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

5. Third-Party Services

We use the following third-party services to operate Kendo:

  • Google Cloud Vision API — for OCR processing of receipt images
  • Google Cloud Storage — for secure image storage
  • Stripe — for payment processing (we never store your card details)
  • Expo Push Notifications — for delivering push notifications

Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their policies.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following cases:

  • Workspace members: If you share a workspace, other members with appropriate roles may see receipt data within that workspace.
  • Service providers: With third-party services listed above, strictly to provide the Service.
  • Legal requirements: If required by law, regulation, or legal process.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and receipt images within 30 days, except where we are legally required to retain it.

8. Your Rights

Depending on your location, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to processing of your personal data
  • Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at privacy@kendo.ai.

9. Children's Privacy

Kendo is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: