Privacy policy
Who is responsible
Sakshi Bhawnani (Kanpur, Uttar Pradesh, India) runs KaunsaCard and is responsible for your data. Questions, requests and grievances go to hi@kaunsacard.com.
Without an account
Your cards, spends, balances and imported statements are kept in your own browser. They are not sent to us. Card recommendations are worked out on your device. We count page visits without cookies and without storing your IP address. Each visit adds one to a daily count for its page, the referring site, any campaign tags in the link, the device type and the browser. To count how many different people visit each day, we keep a code made from your IP address and browser that changes every day and is deleted after 90 days. No IP address is stored, and the code cannot be traced back to you or linked across days.
Bank statements
When you import a statement, the PDF is read inside your browser. The file itself is never uploaded to us or anyone else.
With an account
We keep your email address; your passkeys' public keys; and your sign-in sessions, including the IP address and time of each. When you are signed in, the cards, logged spends (including transactions you imported), watched routes and preferences you keep in the app are copied to your account so they appear on your other devices. If you turn on card change alerts, we keep that choice and a record of which alerts we sent you, and email you only when a card in your stack changes; every alert has a one-click unsubscribe.
Payments
Payments are handled by Razorpay. We never see or store card numbers, UPI IDs or bank details. We keep a record of each order: the plan, the amount, the coupon if any, its status and Razorpay's order and payment reference.
Messages
When you use the contact form, your message and email address are sent to our inbox so we can reply. They are not stored on the site.
Cookies
We use two cookies, both needed for the site to work. A security cookie, set for every visitor, protects forms and requests against forgery; it holds a random value and nothing about you. A sign-in cookie is set only when you sign in and keeps you signed in. There are no advertising or tracking cookies.
Who else processes data
Oracle Cloud hosts the site and database in its Mumbai, India region. Resend delivers our emails (sign-in links and account alerts). Razorpay processes payments. The page's font is loaded from Google Fonts, so Google receives your IP address when the page loads. We do not sell or rent personal data, and we share it with no one else except where the law requires it.
How long we keep it
Account data stays until you delete your account. Sign-in sessions expire, and signing out ends them. Visit counts carry no personal data. Razorpay keeps its own payment records as the law requires of it.
Your choices
On your account page you can sign out of your other devices and delete your account and everything linked to it (Delete my account). Under India's Digital Personal Data Protection Act, 2023 you can also ask us to access, correct or erase your data, or raise a grievance, at hi@kaunsacard.com. We reply within 30 days.
Security
Traffic is encrypted with HTTPS. Sign-in links expire. No system is perfectly secure; if a breach affects your data, we will tell you.
Children
KaunsaCard is for adults. Do not create an account if you are under 18.
Changes
We will post any change here and update the date at the top.