Privacy Policy

Last updated: October 15, 2026

Kamman (“we”, “us”) is a receipt-tracking app. This policy explains what we collect, why, and your choices. Questions: hello@kamman.app.

Information we collect

• Account information — the email address and password you use to create an account. Passwords are stored hashed, never in plain text.
• Receipts you add — the receipt images or PDFs you upload, and the data extracted from them (store, items, prices, dates, taxes), plus any categories, projects, and notes you create.
• Emailed receipts you send us — emails forwarded to your private Kamman address, and, if you connect a mailbox, the receipt emails Kamman finds there (see Connected mailboxes).
• Basic technical data — information needed to operate the service, such as request logs.

How we use it

• To provide the app: storing your receipts and showing your spending.
• To read and itemize your receipts using AI. Receipt images/text are sent to our AI provider (Anthropic) for parsing and categorization. This data is processed to provide the feature and is not used to train their models.
• To secure and maintain the service.

We do not sell your personal data or show you ads.

Connected mailboxes (Gmail and Outlook)

You can let Kamman find receipt emails in a Gmail or Outlook/Hotmail mailbox so you don’t have to forward them. This is optional, read-only, and you can turn it off at any time. Here is exactly what happens when you connect one.

• What we ask for. Read-only access to the mailbox: Google’s gmail.readonly scope, or Microsoft’s Mail.Read. Kamman never sends, deletes, moves, or changes mail, and never asks for your mailbox password.
• What we read. To find receipts, Kamman checks each message’s sender, subject, and the short preview the mail provider supplies. Only messages that look like a receipt, invoice, or order confirmation are downloaded in full (the message body and any PDF or image attachment). Everything else is never downloaded. Spam, trash, drafts and sent mail are skipped.
• What we keep. For a message that looks like a receipt, we store a cleaned copy of its body and attachments so you can see the original next to the itemized receipt, plus the data read from it (store, items, prices, dates, taxes). A message that turns out not to be a receipt is deleted from our storage as soon as that is determined. Receipts you dismiss or that we hide are deleted after 30 days. Receipts you file are kept with your account like any other receipt.
• How it is processed. Receipt text is sent to our AI provider (Anthropic) to be itemized, under terms that do not allow it to be used to train their models. We do not use data obtained from Google or Microsoft to develop, improve, or train generalized AI or machine-learning models.
• How access is stored. The access token the provider gives us is encrypted at rest (AES-256-GCM) and used only to read mail for your account.
• Who can see it. No person at Kamman reads your mail. The only exceptions are if you ask us to for support, if it is necessary for security or abuse investigation, or if the law requires it. We never sell this data, never use it for advertising, and never share it with anyone other than the service providers that store and process it for us (listed below), and only so they can provide their service to us.
• Disconnecting. Settings → Email receipts → Disconnect deletes the stored token and asks the provider to revoke Kamman’s access. You can also revoke it yourself at Google Account → Third-party access or Microsoft account → App access. Receipts you already filed stay; nothing else is kept.

Google API Services User Data Policy. Kamman’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where your data is stored

Your account and receipt data are stored on managed cloud infrastructure (Amazon Web Services and our hosting providers), protected in transit by HTTPS. Receipt images are kept in private storage accessible only through the app.

Third parties we share with

• Anthropic — to parse and categorize receipts.
• Cloud hosting/storage providers (Amazon Web Services, Render, Vercel) — to run the service and store your data.
• Email delivery (Resend) — to receive emails you forward to your Kamman address and to send account emails.

These providers process data only to provide their service to us.

Your choices

• Delete your account — in the app under Profile → Privacy & security → Delete account. This permanently removes your account and associated receipts, projects, and categories.
• Access or correct your data — edit receipts in the app, or contact us.

Data retention

We keep your data while your account is active. When you delete your account, your data is removed from our systems, including any stored emails, receipt data read from them, and mailbox access tokens. Emails that do not turn out to be receipts are deleted as soon as that is determined; dismissed or hidden emailed receipts are deleted after 30 days.

Children

Kamman is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; we’ll revise the date above when we do.

Contact

Email hello@kamman.app.

← Back to Kamman