We built Kanz so your financial data stays on your device — and when it ever needs to leave, you always know why.
Kanz is built on a single, unwavering principle: your financial data belongs to you and only you. The App is designed local-first — your data lives on your device. Certain optional AI-powered features require sending limited, anonymized data to trusted third-party APIs. This policy tells you exactly what those features are, what data they transmit, and how to opt out.
All core application data is stored exclusively on your device in a local SQLite database. This includes:
Kanz does not operate any servers, cloud infrastructure, or user accounts. As a result:
To provide live exchange rates, the App makes standard HTTPS requests to open.er-api.com and api.exchangerate-api.com. These requests retrieve public rate data only — no personal or financial information about you is transmitted. The App caches rates wherever possible to minimize network activity.
Kanz includes three optional AI-powered features that, when used, transmit limited data to trusted third-party APIs for processing. None of these features are enabled by default. Each is clearly labelled in the App and requires your explicit action or opt-in.
When you use an AI-powered feature, anonymized data is sent to a third-party API. No data is ever sent automatically without your action. SMS Detection requires you to manually enable it in Settings. Voice Expense and PDF Import are activated only when you tap the relevant button. You may disable or avoid these features at any time with no impact on the core app.
| Feature | Activation | Data Sent | Sent To | Retained? |
|---|---|---|---|---|
| SMS Detection | Opt-in | Anonymized SMS text (PII stripped) | Anthropic (Claude Haiku) | No — processed and discarded |
| Voice Expense | On-demand | Audio recording (WAV, ≤30s) | Deepgram (Nova-3 STT) | No — transcribed and discarded |
| Voice Categorization | On-demand | Transcribed text only | Anthropic (Claude Haiku) | No — processed and discarded |
| PDF Import | On-demand | Bank statement PDF content | Anthropic (Claude Haiku) | No — parsed and discarded |
When you enable SMS Detection in Settings, the App monitors incoming SMS messages from a whitelist of recognized Egyptian bank senders (e.g. CIB, NBE, VF-Cash, InstaPay). When a message matching a bank transaction pattern is detected, the App applies the following process before any data leaves your device:
Only the anonymized SMS text is then sent to Anthropic's Claude Haiku API to identify the transaction amount and merchant category. The result is saved locally. The original SMS text is never stored by the App, and the sender's personal details (names, masked account numbers) are stripped before transmission. You may disable SMS Detection at any time from Settings, and optionally delete all expenses captured through this feature.
When you tap the microphone button to record a voice expense, the following two-step process occurs:
The App enforces a daily limit of 40 voice recordings per user to control API usage. No audio recordings are stored locally beyond the active session.
When you use the Import Bank Statement feature, the PDF file you select is sent to Anthropic's Claude Haiku API for transaction extraction. The PDF content — which includes your bank transaction history — is transmitted over a secure HTTPS connection. The following should be noted:
We recommend using bank statements exported from your bank's official app and avoiding statements that contain sensitive data beyond standard transaction history. Currently, this feature supports NBE (National Bank of Egypt) statement format only.
Anthropic, Inc. is the provider of the Claude Haiku AI model used for SMS categorization, voice expense parsing, and PDF statement import. Data submitted to Anthropic's API through Kanz is processed under Anthropic's API usage policies. Anthropic does not use API inputs to train its models by default under their standard commercial API terms. We encourage you to review Anthropic's privacy policy at anthropic.com/privacy.
Deepgram, Inc. provides the Nova-3 speech-to-text API used for voice expense transcription. Audio data submitted to Deepgram is processed in accordance with Deepgram's privacy policy. We encourage you to review their policy at deepgram.com/privacy.
The App's core architecture is local-first. All financial data you enter manually lives exclusively on your device. The AI-powered features described in Section 2 are the only circumstances under which any data leaves your device, and only when you explicitly trigger them.
The security of your data depends on the security of your device. We strongly recommend:
Kanz employs SHA-256 cryptographic hashing to verify the integrity of the App binary and stored exchange rate data. If data corruption is detected, the App safely falls back to hardcoded default values to protect the accuracy of your calculations.
Your data is retained on your device for as long as you use the App. Exchange rate records older than 90 days are automatically pruned to maintain performance. You may delete all App data at any time through the "Reset App Data" function in Settings, or by uninstalling the App.
The App integrates with two exchange rate APIs for the sole purpose of retrieving currency conversion rates. These services are open.er-api.com (primary) and api.exchangerate-api.com (fallback). No personal or financial data about you is transmitted to these services.
Kanz does not integrate with any advertising SDKs, analytics platforms, or marketing tools. We do not display advertisements.
When you download Kanz from the Google Play Store, Google may collect information about your download and device as per their own privacy policy. This is outside the scope of this document and governed by Google's terms.
Because all core data is stored locally, you have complete and immediate control over your information at all times.
You may disable SMS Detection at any time from Settings → Automated Recording. You will be offered the option to delete all expenses captured through SMS Detection. Voice Expense and PDF Import are on-demand only — simply not using them means no data is ever transmitted.
You may export your transaction data at any time using the App's built-in export feature. This provides a portable copy of your financial records.
You may delete individual transactions, assets, or categories at any time within the App. To delete all data, use "Reset App Data" in Settings, or uninstall the App. Uninstalling permanently removes all locally stored data from your device.
You have full editing capabilities for all data entered into the App. There are no restrictions on correcting, updating, or modifying your records.
Kanz is not directed at children under the age of 13. We do not knowingly collect personal information from children. Given our local-first architecture, no such data would be transmitted to us, but we take this matter seriously. If you are a parent or guardian and have concerns, please contact us.
We may update this Privacy Policy to reflect changes in the App's features or applicable legal requirements. When we make material changes, we will notify users through an in-app notice and update the "Effective Date" at the top of this document. Your continued use of the App following the posting of changes constitutes your acceptance of the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or the App's data practices, please reach out. We are committed to responding to all privacy-related inquiries within 7 business days.