Privacy Policy
Last updated: November 2, 2026
What I Collect
When you sign up I collect: your name, email address, password (hashed), timezone (read from your browser), preferred language, preferred currency, and notification preferences. I also store the date you accepted these terms. If you choose to enter it, I also store your income per period (weekly, monthly or yearly) and per currency, which you can change or remove on your profile page at any time. If you sign in with Google, I additionally collect your Google account ID and your public profile picture URL.
Why I Collect It
To create your account, send reminders, and help you stick to your saving schedule.
Emails
You’ll receive login-related and optional reminder emails. You can turn off reminders anytime in your profile.
Cookies
Only essential cookies for login and session handling. If you use the chat without an account, one more cookie keeps your conversation on your device.
Usage Records
I keep basic usage records: when you were last active, which days you used Akluma, whether you used it in the browser or the Android app, and roughly how long. These records stay on Akluma's servers and are deleted with your account. To count visitors, the pages you see before you log in use Plausible Analytics, which sets no cookies. It counts visits, the page you opened, the site you came from, your browser, your device type and your country. When you create an account, it also counts one sign-up, without knowing who you are. Nothing it counts is linked to your account. Your IP address is used only to tell visits apart and is not stored.
Support Chat
If you write to me in the chat, I store your messages, when you sent them, whether they were read, and the page you opened the chat on. If you are not logged in, I also store the email address you give me, so my reply can reach you. Messages travel directly to Akluma's own server. No outside chat service is involved.
Third Parties
I rely on a few external services to run Akluma:
• Postmark: receives your name and email address to deliver login, reminder and chat reply emails. A chat reply email contains my reply. Postmark retains delivery logs (recipient, subject, delivery status) for around 45 days per their own policy.
• Google Sign-In: if you sign in with Google, Google shares your name, email, profile photo URL, and Google account ID with Akluma. Akluma does not send any data back to Google.
• Fly.io: hosts the database and application servers in Paris, France. All your data lives here, except uploaded pictures, which are stored by Tigris. Encrypted database backups are retained for 5 days.
• Tigris: stores the pictures you upload to Akluma. Tigris may keep copies in several regions around the world so pictures load quickly. Akluma removes the location and other hidden details from every picture before storing it.
• Google Search Console: receives anonymized aggregate traffic data from search engines. No personal data.
• Plausible Analytics: counts visits to the pages you see before you log in, without cookies. Plausible is hosted in the EU. It receives your IP address and browser details to tell visits apart and to find your country, and does not store your IP address. It never receives your name, your email or anything you save in Akluma.
• Paddle: if you buy Premium, Paddle (paddle.com), the payment company that handles Akluma's payments, processes the payment as the merchant of record. Paddle is certified under PCI DSS, the card industry's security standard. It receives your name, email address, country and payment details, and handles them under its own privacy policy. Your card details go to Paddle and never reach Akluma.
Children
This site is not meant for children under 13. I do not knowingly collect personal data from children under 13. If you're a parent and believe your child signed up, contact me and I will delete the account.
Data Storage and Retention
Your data is hosted on Fly.io servers in Paris, France. Pictures you upload are stored by Tigris, which may keep copies in several regions. I keep your data while your account is active. When you delete your account, all personal data is permanently removed from the live database immediately, and your pictures are deleted at the same time. If you were in a shared piggy bank, its other members keep seeing your name in its history. Pictures sent in the chat are deleted after 90 days. A chat conversation from a visitor without an account is deleted 12 months after its last message. Encrypted database backups are rotated within 5 days. Deleted pictures are purged from Tigris within 7 days. Email delivery logs at Postmark are purged within 45 days. After that, no trace of your data remains.
Security
Passwords are hashed using bcrypt and never stored in plain text. Not even I can read them. The site is HTTPS-secured using Let's Encrypt certificates. Pictures you upload are stored privately at Tigris. Nobody can open them without a link that Akluma creates. Tigris encrypts them while they travel and while they are stored, and independent auditors check its security (SOC 2 Type II).
Account Deletion
You can delete your account and all your data at any time:
• In-app: click your name in the top-right corner, then Profile, scroll to the bottom, click DELETE ACCOUNT, and type DELETE to confirm.
• If you can't access your account: email contact@akluma.com from the email address tied to your account and I will delete it within 30 days.
Deletion is immediate from the live database. See 'Data Storage and Retention' above for the timeline on encrypted backups and provider logs.
Your Rights
You can view, edit, or delete your personal data through your profile (see 'Account Deletion' above). To request a copy of your data, email contact@akluma.com.
If you live in the EU or UK, you have additional rights under GDPR: access, rectification, erasure, restriction, portability, and objection. Email me to exercise any of these.
Changes
If the policy changes, I’ll notify you by email.
Contact
Email me at contact@akluma.com or reach out on LinkedIn to Ubeydullah Keleş .