1. Scope
This notice describes cookies, browser storage, on-phone app storage and similar technologies used by Kubear, operated by KUBEROS INNOVATIONS PRIVATE LIMITED, CIN U62099GJ2026PTC177330, in the Kubear Android app and in Kubear's earlier web app at kubear.kuberos.in, which is no longer updated or supported. It supplements the Privacy Policy. Sections 2 to 5 describe what the earlier web app stored in your browser, which stays there until you clear it; section 6 describes the Android app.
It covers the Kubear app, not the company website. It is not an audit of every technology installed on www.kuberos.in or another website. A main website with different analytics, embedded media, forms or advertising needs disclosures and controls for those technologies.
Website analytics. Our public website (www.kuberos.in) uses Google Analytics only if you choose "Allow" on the cookie banner. It measures visits and button clicks to improve the site. You can change your choice anytime from "Cookie settings" in the footer. The Kubear web app and the Android app use Google Analytics for Firebase only if you turn on Usage analytics in Privacy, and never send amounts, names, notes or documents.
2. Technologies and purposes (web app)
| Technology |
Purpose and handling |
| Authentication/session persistence and anti-abuse technologies |
Keep the appropriate account signed in and help prevent automated abuse. Firebase authentication and Google verification services (reCAPTCHA) may use their own storage and signals |
| Local storage and IndexedDB |
Store essential routing/preferences and local account snapshots or pending sync information used by the application |
| Cache/service-worker storage, where used by the release |
Deliver application resources and support permitted offline behaviour; a cached screen is not proof of a completed server save |
| Notification registration and preferences |
Support push notifications you enable and remember corresponding choices |
| Consent and preference choices |
Remember settings and help administer your choices; some are also held on the server |
| Optional usage analytics (Google Analytics for Firebase), web app and Android app |
Off by default. Used only if you switch on Usage analytics in Privacy & data. Counts anonymous app interactions from a fixed list; no amounts, names, notes or documents, no user ID, and advertising signals are off. While it is on, Google Analytics may keep identifiers in your browser's storage (web app) or an app instance identifier on your phone (Android app). Turning it off stops further collection. See the Privacy Policy section 9 |
| Private crash reports, Android app only |
Off until you turn on Send crash reports to Kubear in Privacy, which records your consent, or answer Send to the one question after a crash, which records a one-time consent for that crash. You can withdraw your consent in Privacy at any time; withdrawing stops reports and deletes any that are waiting. Sent only to Kubear's own servers, never to a third party. A report holds the name of the error, the lines of Kubear's own code where it happened, the app and Android versions, a rough phone size class (not the model), the screen name and a random install ID that is replaced when you sign out. It never holds amounts, names, phone numbers, account numbers, PAN, anything you typed or any document. Kept for 30 days, then deleted. The website sends no error reports |
Not every listed mechanism is a cookie. Local financial snapshots are not advertising identifiers. Kubear is not end-to-end encrypted, and a local copy does not protect an already-unlocked or compromised device.
3. Optional technology
The only optional measurement in Kubear is the usage analytics described above, which is off until you turn it on. Kubear does not use this notice as permission to introduce advertising trackers or unrelated analytics, and this release does not offer advertising tracking as part of the core service. Any other future optional measurement will have a specific disclosure and appropriate choice before activation.
Essential authentication/security processing and operational diagnostics must be assessed separately. Labelling an SDK “necessary” does not remove applicable privacy requirements. A general product-analytics toggle must not be described as controlling every third-party request.
4. Duration and controls
Authentication persistence lasts according to the selected session mode and provider/browser controls, until expiry or removal. Local preferences and snapshots can persist between visits until replaced or cleared by an applicable account action or your browser. Application caches remain until replaced, expired or cleared; closing a tab alone is not removal. Notification registration persists until revoked, invalidated or removed by the relevant account/device action. Provider-managed storage follows that provider's expiry and controls.
Some storage lasts for a session; other storage can remain until expiry, sign-out cleanup, site-data removal or a supported account action. Browser behaviour and permissions affect persistence. Do not assume everything disappears when a tab closes.
You can use browser settings to manage cookies, site data and notification/microphone/camera permissions, and available Kubear controls to manage optional choices. Blocking required storage can prevent sign-in or restore. Clearing storage can remove local preferences and unsynced entries and may sign you out.
Clearing browser data, deleting a shortcut, clearing the Android app's data or uninstalling the app does not delete the server account. Use Account and Data Deletion.
5. Providers and contact
Google verification services have separate Google Privacy Policy and Terms of Service. The Privacy Policy explains other providers and possible processing outside India; this notice is not a guarantee of India-only storage.
Privacy questions: privacy@kuberos.in. Grievances: Sidharth Bothra, grievance@kuberos.in, +91 7874664514. Company and registered-office details are in the Support page.
6. Android app storage
The Android app does not use browser cookies for tracking and does not use an advertising ID. It keeps the following on your phone, inside Kubear's own app storage, which Android keeps separate from other apps:
| What is stored on the phone |
Purpose and handling |
| Sign-in session (Firebase Authentication) |
Keep you signed in until you sign out or the session ends |
| App integrity tokens (Firebase App Check with Google Play Integrity) |
Help Kubear's servers check that requests come from a genuine Kubear app; short-lived and renewed through Google Play services |
| Copy of your saved entries and entries not yet sent |
Show your entries quickly, work when the connection drops and send pending entries later. Signing out removes this account's copy; entries not yet sent stay unless you choose "Sign out and discard" |
| Fingerprint or face unlock key, if you turn it on |
A key held by Android that works only after Android checks your fingerprint or face. Kubear never receives fingerprint or face data. Android stops the key from working when a fingerprint or face is added on the phone, or all of them are removed. Removed when you sign out |
| A UPI payment you started, while Kubear waits for your answer |
Ask you "Did it go through?" when you come back from the UPI app. Holds the payee, UPI ID and amount for up to 24 hours, then removed |
| Small private copy for home-screen widgets, if you add a widget |
Let the widgets "Left today", "Coming up" and "Goal ring" be drawn without any network call, from the last picture the app saved. Widgets show words only unless you turn on "Widget amounts"; otherwise the copy holds no rupee amounts. The copy is encrypted with a key held in Android Keystore on the phone; the key does not need your PIN, fingerprint or face, so widgets can be drawn without opening Kubear. Not sent anywhere. Cleared when you sign out |
| Notification delivery token (Firebase Cloud Messaging) |
Deliver reminders and alerts you turned on. Deleted when you sign out; signing out also asks Kubear's servers to remove that phone's registration |
| Statement passwords you choose to keep, if you tick Remember |
Fill in the password the next time you import a statement from the same sender. Encrypted with a key held in Android Keystore on the phone; the key does not need your fingerprint or face. Never sent anywhere or backed up. Removed when you sign out, when you tap Forget it, or when you uninstall |
| Settings and consent choices |
Remember your choices on this phone; some are also held on the server |
This storage is excluded from Android cloud backup and from transfer to a new phone; on a new phone, sign in and your entries are restored from Kubear's servers. Only if you turn on usage analytics does the Android app keep a Google Analytics app instance identifier; turning it off asks Google to delete it. If you turn on crash reports, the app also keeps a random install ID and any report waiting to be sent in its private storage; both are removed when you sign out.
Duration and controls. Signing out removes the items that the table says are removed or cleared when you sign out, and ends the sign-in session. Clearing Kubear's storage in your phone's settings, or uninstalling the app, removes this storage, including entries that were not yet sent. You can turn notification and microphone permissions off in your phone's settings for Kubear. None of this deletes your Kubear account; use Account and Data Deletion.