Kube is a personal budget tracker. This policy explains what we collect, why, and who we share it with. Kube handles financial information you type in, so we have tried to keep this specific and readable rather than vague.
Kube ("we", "us") is operated by Suman Pokhrel, based in Nepal. For any privacy question, or to exercise the rights in section 7, contact suman121pok@gmail.com.
When you create an account we collect your name, email address, and a password. The password is transmitted over an encrypted connection and stored only in hashed form by our authentication provider — we never store or have access to it in plain text.
The core of the app. This includes the transactions, budgets, categories, amounts, dates, and any notes or descriptions you record. We do not connect to your bank and we do not import statements — everything here is entered by you, by hand.
Optional. If you set a profile picture, the app asks permission to access your photo library and uploads the image you pick. We do not read your library otherwise, and we do not scan other images on your device.
If you enable notifications, Firebase Cloud Messaging issues a device token which we store against your account so we can deliver reminders. It identifies a device installation, not you personally, and it changes if you reinstall.
We use PostHog to understand how the app is used — screens opened, features used, and general interaction events. This tells us which parts of Kube are worth improving. We do not send the contents of your transactions or budgets to analytics.
When the app crashes or misbehaves, Sentry and Firebase Crashlytics collect a diagnostic report: the error, a stack trace, your device model, OS version, and the app version. Sentry also samples a small share of sessions for performance timing. These reports exist so we can fix bugs, and they are not used to profile you.
Our servers necessarily receive your IP address and basic device/app metadata with each request, as any internet service does. IP is used for delivering responses, rate limiting, and abuse prevention.
What we do not collect: Kube does not collect your location. We do not request location permission, and the app declares no location access. We do not sell your data, we do not share it with advertisers, and we run no advertising SDKs.
We do not sell your personal data. We share it only with the service providers that make Kube work. Your account and password are handled by our own service — we do not use a third-party login provider, and no one else is given your credentials.
| Provider | What it handles | Purpose |
|---|---|---|
| Render | Account details, budgets, transactions, and requests to our API (incl. IP) | Backend and database hosting |
| Google Firebase | Push token, crash reports | Notifications, crash reporting |
| Sentry | Crash and performance diagnostics | Error monitoring |
| PostHog | Usage events | Product analytics |
| Google Play | Purchase/install data (handled by Google) | App distribution |
We may also disclose information where legally required, or to protect our rights and the safety of our users.
Kube is operated from Nepal, but your data is not stored there. Our API and database run on Render, and our analytics and crash-reporting providers (PostHog and Sentry) operate in the United States. By using Kube you understand that your information is transferred to and processed in those locations.
Your account and financial data are kept for as long as your account is active.
When you delete your account, we immediately revoke your sessions and disable sign-in, and your data enters a 30-day recovery window — this exists so an account deleted by mistake can be restored. After 30 days it is permanently and irreversibly erased: your profile, transactions, budgets, accounts, categories, recurring transactions, notifications, and device tokens are all removed from our database and cannot be recovered.
Crash reports and analytics events sit with our providers and are retained on their own rolling schedule — currently up to 90 days for crash and performance reports. We may retain a minimal record where the law requires it.
You can, at any time:
To make a request, email suman121pok@gmail.com. We respond within 30 days.
Traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Passwords are stored hashed, never in plain text. Access to production data is restricted. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant authority where the law requires it.
Kube is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, contact us and we will delete it.
We may update this policy as the app changes. The "last updated" date above always reflects the current version, and we will give notice in the app before any material change takes effect.
Questions, requests, or complaints: suman121pok@gmail.com. We aim to reply within 30 days.