How we protect your data.
Every line links to the exact section of the Privacy Policy.
No bank login
Kubear does not need your banking credentials. The policy also says not to submit bank passwords, OTPs or card security codes.
Read the exact words: Section 2, Information we processNo SMS reading
The current web application does not intentionally read your contacts, SMS inbox or call logs, track GPS location, or record background microphone audio.
Read the exact words: Section 2, Information we processWhat we hold
Your mobile number and sign-in details, the records you enter or review, household membership and shared entries, files you choose to upload, AI prompts and outputs, support messages, consent choices, and technical logs. Each has its purpose listed in a table.
See the full table: Section 2, Information we processWhere it is processed
We use Google Firebase and Google Cloud for sign-in, hosting, databases and file storage. Information may be processed outside India by suppliers or their support systems. A database in an Indian region does not mean every service stays in India.
See every provider: Section 6, Providers and processing locationsWho can see your records
Personal records are intended to stay separate from Household records. What you put in a shared space is visible to members according to server-enforced roles. Staff and contractor access is limited to support, security and operating needs.
Read the household rules: Section 4, Personal and Household informationAI explanations
When you ask an AI question, the prompt and relevant records you are allowed to see go to a Google Gemini service. AI is a read-only aid and can make mistakes. Review anything it extracts before you confirm it.
Read how AI is handled: Section 5, AI, document review and voiceUploads
Files used for temporary reading are cleaned up straight after processing, and a scheduled cleanup covers abandoned ones. This is an effort, not a promise of instant erasure from every provider copy. Facts you reviewed and confirmed stay as records until you delete them.
See the retention table: Section 7, RetentionDeleting your data
Our normal target is 30 calendar days after we verify account ownership. It is a target, not a guarantee. Backups expire on their own rotation, and deleted data is not meant to return to normal use if a backup is restored.
Read the deletion timing: Section 7, RetentionEncryption, stated plainly
Kubear uses authenticated server access, access restrictions, integrity checks, encrypted local storage and secure network communication. It is not end-to-end encrypted. Authorised server processing and selected suppliers can process readable information.
Read the security section: Section 10, Security and incidentsNo selling, no ad targeting
We do not sell personal information or use your financial records for targeted advertising.
Read the exact words: Section 3, Purposes and consentThis page summarises the Privacy Policy. If the two ever differ, the policy is the document that applies.
Want your data gone?
- Open the account and data deletion page. Account and data deletion
- Follow the request steps there. We ask for proportionate proof that the account is yours.
- We aim to complete deletion within 30 calendar days of verification, and we explain any delay.
Signing out, uninstalling or clearing browser storage is not a deletion request, and clearing storage can remove entries that have not synced yet.
Questions or a concern?
Privacy requests go to privacy@kuberos.in. Grievances go to Sidharth Bothra, the grievance officer, at grievance@kuberos.in. To report a suspected security problem, write to support@kuberos.in with the subject Kubear security report. Do not include private information about other people.
More help is on the Support and grievances page. Kubear is run by Kuberos Innovations Private Limited, Surat.