Privacy Policy

App: PanamKasu — Personal Finance Tracker
Includes: SplitIt (group expense tracker), AI Finance Analyst & Pro Calculators
Last updated: April 28, 2026

1. Overview

PanamKasu is a free personal finance app that helps you track transactions, investments, insurance, subscriptions, and group expenses. This policy explains exactly what data is processed, where it lives, and what we never do with it.

Short version: Your financial data stays in your own Google account and your own device. We have zero access to it. We do not collect any personal information. There are no subscriptions or payments — PanamKasu is completely free.

2. Data Storage

PanamKasu (transactions, investments, insurance, subscriptions)

All financial records are stored exclusively in your own Google Sheets spreadsheet via a Google Apps Script deployment that runs under your Google account. The app connects to it using a URL you configure. The developer has no access to your spreadsheet at any time.

SplitIt — Group Expenses

SplitIt group data is stored in two places, both owned by you:

Your browser's localStorage (key: splitit_v3) for offline access
A separate Google Sheet you create and own — not the same sheet as PanamKasu

Your identity within each group (your name) is stored per group inside splitit_v3 in localStorage only — it never leaves your device.

When you add a group expense and you are the payer, a copy of that expense (amount, category, description, date) is automatically added to your PanamKasu transactions. This transfer happens entirely within your own browser — no server is involved.

AI Finance Analyst

The AI feature generates a financial health report by sending a summary of your data to an AI provider (Anthropic Claude, Groq Llama, or Google Gemini).

When you generate a report, a financial summary (income/expense totals, category breakdowns, investment values, insurance count) is sent from your browser to this app's backend, which relays it to the AI provider's API. The backend does not log, store, or cache this data.
Downloaded reports are saved only to your device — they are not uploaded anywhere.
Your use of the AI feature is also subject to the privacy policy of the AI provider in use: Anthropic Privacy Policy, Groq Privacy Policy, or Google AI Privacy Policy.

Donations

PanamKasu is free to use. If you choose to support the project, a donation link to razorpay.me/@pcbzmani is provided in the app. Clicking it takes you directly to Razorpay's platform — the donation is processed entirely by Razorpay and we receive no personal information from it. See Razorpay's Privacy Policy for how they handle your data.

3. What We Do Not Collect

We do not collect any personal information (no name, email, phone, or payment details)
We do not use analytics or tracking tools (no Google Analytics, Mixpanel, Facebook Pixel, etc.)
We do not use cookies for tracking or advertising
We do not share any data with third parties beyond what is strictly necessary for AI inference (your chosen AI provider)
We do not have access to your financial records, vault passwords, or group expense data
We do not retain bring-your-own AI API keys
We do not display ads
There are no subscriptions, no payments, and no accounts

4. Browser localStorage

The app stores the following locally in your browser. This data never leaves your device except where explicitly noted:

myfinance_script_url — your PanamKasu Google Apps Script URL
Custom transaction categories you define
vault_pin_hash — your Vault PIN, hashed with SHA-256 — never transmitted in any form
vault_unlocked — Vault session timestamp (12h expiry)
Vault entries — stored in IndexedDB or your Google Sheet (your choice in Settings) — never transmitted to us
splitit_v3 — SplitIt group data including your per-group identity name
Dark mode preference and UI settings (sidebar_collapsed, etc.)
Daily AI usage counter (date-keyed, resets at midnight) — stored locally only

You can clear all of this at any time via your browser's "Clear site data" option, or by uninstalling the app.

5. Google Services

The app connects to Google Sheets and Google Apps Script using the URL you configure in Settings. This connection is directly between your device and your Google account. Please refer to Google's Privacy Policy for how Google handles your data.

Security tip: Your Apps Script URL acts like a password for your sheet. Do not share it publicly. You can revoke it anytime via Apps Script → Deployments → Delete Deployment.

6. Market Data

Live market rates (stock prices, indices, currency rates) are fetched from public financial data sources (Yahoo Finance, Google Finance) via our backend proxy. No personal data is included in these requests.

7. Push Notifications

If you opt in to notifications (for insurance and subscription renewals), the browser-issued Web Push subscription endpoint is stored on our backend (Netlify Blobs) so we can send you reminder pings. The endpoint contains no personal information. You can revoke notifications anytime in your browser/OS settings, which also invalidates the stored endpoint.

8. Security

We implement the following measures to protect your data in transit:

HTTPS enforced on all pages (HSTS)
Security headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy
Backend rate limiting to prevent abuse
CORS restricted to the app's own domain

9. Children's Privacy

This app is not directed at children under 13. We do not knowingly collect data from children.

10. Your Rights

You can:

Delete your local data anytime via your browser's "Clear site data" or by uninstalling the app
Delete your Google Sheets data by simply deleting the sheet from your Google Drive

11. Changes to This Policy

We may update this policy occasionally. Changes will be posted on this page with an updated date.

12. Contact

For any privacy-related questions, please email pcbzmani@gmail.com or open an issue at our GitHub repository.