Privacy policy

1. What we collect

We collect only what Kado needs to work.

• Account information. The first time you open Kado we create a private account for you without asking for anything. It is identified by a random ID. If you choose to sign in with Apple or Google, we receive an identifier and, if you allow it, your name and email address. Apple may give us a private relay address instead of your real email.
• Your wallet. The cards you add (which card, and when you opened or closed it), which benefits you marked as used and when, your estimated monthly spending by category, your points balances, and the time zone of your device. Kado has no field for card numbers, account numbers, bank logins or statements, and we do not ask for them.
• Values we work out for you. Card values, best-card rankings, reminders and similar results, calculated from your wallet.
• Assistants you connect. If you connect an AI assistant (see section 4), we keep a record of the connection and a log of the changes it makes.
• Technical information. Our service providers process ordinary connection data, such as your IP address, when your device or browser talks to our servers.

Kado does not include advertising, and it does not send analytics or crash reports to us or anyone else. Diagnostic information stays on your device.

2. How we use it

To run Kado: to store your wallet in your account, work out the values and reminders you see, keep your devices in step, let you sign in and delete your account, and keep the service secure. We do not use your wallet for advertising, we do not sell it, and we do not track you across other companies’ apps or websites.

3. Where it is stored and who handles it

Your account and wallet are stored with Google Cloud (Firebase) in the United States. Apple and Google process your sign-in if you use them, under their own terms. These providers handle data on our behalf, and they are the only ones we share it with. Security rules allow only you to read or change your wallet.

As the administrators of the service, we can technically access stored data. We do not read it except as needed to operate, secure and support Kado, or as the law requires.

If you used an earlier version of Kado that synced through iCloud, that copy stays in your own iCloud storage until you remove it there. The app no longer updates it once your wallet moves to your Kado account.

The Kado websites use your browser’s storage only to keep you signed in while you approve or manage an assistant. They have no advertising or analytics cookies.

4. AI assistants you connect

You can connect an AI assistant, such as Claude, ChatGPT or Cursor, to your Kado wallet. That is your choice, and you approve each connection on a Kado screen that names the assistant and what it will be able to do.

• What it can read. Your cards, which benefits you used, your spending estimates and your points balances, for as long as the connection lasts. It uses them to answer you.
• What it can change. It can propose changes, such as adding a card, marking a benefit used or updating your spending. A change happens only after the assistant has shown it to you and you have said yes in your conversation with it, and you can turn on a second check in the Kado app. Every change is logged and can be undone.
• What it never gets. Your Apple or Google account, your email address or password. It cannot move money or open accounts.
• Bank data you share with it. If you give an assistant transactions or account details to work with, Kado analyzes them to answer that request and does not store them. We keep a short-lived summary of what the analysis found (about 30 minutes) so the assistant can refer back to it, then delete it.
• What we keep. For each connection: the assistant’s name, when you connected it, when it last read your wallet, and a hashed access credential. For each change: what changed, the reason the assistant gave, what you said to approve it, and each value before the change. The change log is kept for 180 days so you can see and undo changes.
• Ending access. Disconnect an assistant in Kado (Settings, AI agents) or at usekado.app/connections. Access ends immediately. Deleting your account removes every connection and the log.

What an assistant does with information it has read is governed by that assistant’s own terms and privacy policy, not ours.

5. Sharing

We do not sell, rent or trade your personal information. We share it only with the service providers described above, as needed to run Kado, and where the law requires it or to respond to valid legal process.

6. Security

Data is encrypted in transit and at rest by our providers, and access is limited by security rules to your own account. No electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your choices

• Export. Save a copy of your wallet from Settings, Your data, at any time.
• Delete. Delete your account from Settings. This permanently deletes your wallet and account from our servers and, if you signed in with Apple, revokes Kado’s access to your Apple ID. Deleted data can remain in our disaster-recovery backups for up to 7 days.
• Disconnect assistants at any time, as described in section 4.
• Guest accounts. If you never sign in, your wallet is tied to your device and cannot be recovered if you lose it. Signing in with Apple or Google lets you restore it on a new device.

8. How long we keep it

We keep your wallet and account until you delete them. The change log an assistant leaves is kept for 180 days. Short-lived sign-in and approval records expire on their own, within minutes to hours.

9. Your rights

Wherever you live, you can see, correct and delete your data yourself in Kado, and you can write to us at support@usekado.app to ask for a copy of it or for anything you cannot do in the app. If your local law (for example in California, the European Economic Area or the United Kingdom) gives you further rights, we honor them, and you can use the same address to exercise them. Kado is operated from the United States, and your data is processed there.

10. Children

Kado is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to support@usekado.app and we will delete it.

11. Changes

If we change this policy we will post the new version here and update the date above. If a change affects how we use your wallet, we will tell you in Kado before it takes effect.

12. Contact

Questions or requests: support@usekado.app.