Catpital

Privacy Policy

Effective date: 10 July 2026 · Contact: catpital.wealthcal@gmail.com

The short version

You can use Catpital without an account, and then everything you enter — your name, photo, and money figures — stays on your phone.

If you sign in (optional, and required only to buy a theme), your app data is copied to our server so it can follow you to another device. That copy includes your money figures, and it is tied to your account. Only your account can read it.

Separately, and whether or not you sign in, Catpital sends a small anonymous snapshot — your age, gender, an income range, and your chosen risk level — so we can understand who uses the app. That snapshot carries no name, no photo, and no e-mail, and it is not linked to your account.

We show no ads, run no third-party tracking, and never sell your data.

1. Who we are

Catpital is a free personal-finance projection app, operated from Thailand. For any privacy question, or to exercise the rights in §11, contact catpital.wealthcal@gmail.com.

2. Using Catpital without an account

You may use the whole app as a guest. In guest mode everything you enter is saved only in the app's private storage on your device, and none of it leaves the device except the anonymous record in §5:

  • Profile name and optional profile photo
  • Your money figures (exact income, expenses, savings rate, deposit log, holdings, cost basis, portfolio value, fund selections and nicknames)
  • App preferences (language, colour theme, mascot) and a local cache of your purchase entitlements

Your profile photo is copied into the app's private folder and is deleted when you change it, remove it, or delete your data. Guests cannot make purchases.

3. Creating an account (sign-in)

Sign-in is optional. You can create an account with:

  • E-mail and password — we store your e-mail address and a securely hashed password. We send you a confirmation e-mail, and password-reset e-mails on request.
  • Google — we receive your e-mail address and the basic profile information Google returns (your name and profile-picture URL). We never receive your Google password.

Accounts are managed for us by Supabase Auth (see §8). Your e-mail address is personal data; it is used to identify your account, to send confirmation and password-reset messages, and to attach your purchases. It is not used for marketing, and we do not send newsletters.

4. What we store in the cloud when you are signed in

So your plan follows you to a new phone, a signed-in device uploads your app state to a private row in our database, keyed to your account. It is uploaded when it changes and downloaded when you launch the app or sign in on a new device. This copy contains the money figures you enter, not just anonymous ranges:

  • your profile name, age and gender;
  • your exact income and pay period, and whether you had invested before;
  • your budget: every expense line item you create (need and want), and your need/want/save percentages;
  • your savings and investment data: existing investment, your dated deposit log, per-fund current values and cost basis, the nicknames you give your funds, your chosen portfolio (preset or custom) and risk level, and your time horizon;
  • your app preferences (language, colour theme, mascot) and whether you have accepted the agreement and finished onboarding.

Your profile photo is not uploaded — only the on-device file path is part of the state, and the image itself stays on your phone.

This row is protected by row-level security: it can be read and written only by your own signed-in account. We do not sell it, share it with advertisers, or use it to build a profile of you. If you never sign in, this row never exists.

5. The anonymous statistics we collect

Whether or not you have an account, the app sends a small anonymous record to our server when you finish onboarding, and again whenever one of these values later changes:

  • your age;
  • your gender;
  • your income band — a range (for example "30,000–50,000 ฿/month"), never your exact income;
  • your investment choice — your selected risk level and its resulting expected annual return rate;
  • a random anonymous ID generated on your device, used only so that repeat submissions update a single record instead of creating duplicates.

This record contains no name, no photo, no e-mail, and no portfolio, savings, or net-worth amounts, and it is not linked to your account — the random device ID is separate from your account identifier, and the two are stored in different tables that are never joined. It is not linked to any advertising identifier, is not used to track you across other apps, and is never sold. You consent to this collection when you accept the agreement on first launch, and you can withdraw consent at any time (see §9 and §11).

6. What we do not do

  • No ads, no advertising SDKs, no third-party tracking or profiling.
  • No cross-app tracking and no advertising identifiers.
  • We never see your payment details (see §7).
  • We never sell your data, and we do not share it except with the processors named in §8.

7. Purchases

Optional cosmetic themes can be purchased through the Apple App Store or Google Play. You must be signed in to buy, so that a purchase can be restored on your other devices. Payment is processed entirely by the store — we never see your card or payment details.

Purchase validation is handled by RevenueCat, which we identify to us using your account identifier (a random UUID) — not your e-mail address or name. RevenueCat receives your purchase history and device/store information. See the Apple, Google and RevenueCat privacy policies.

8. Security, processors, and where your data is stored

All data sent between the app and our server is encrypted in transit (TLS). Your cloud state (§4) is protected by row-level security so that only your account can read it; the anonymous statistics table (§5) cannot be read by the app at all.

We use these processors:

  • Supabase — database hosting and account management. Our project is hosted in the Asia-Pacific region, which is outside Thailand, so your data is transferred and stored abroad. See Supabase's privacy policy.
  • RevenueCat — purchase validation only (§7).
  • Apple / Google — payment processing and app distribution (§7).

We keep your cloud state for as long as your account exists. The anonymous statistics are kept indefinitely as aggregate data, in the unlinked form described in §9.

9. Deleting your data and closing your account

Settings → Delete my data does all of the following:

  1. erases everything the app stores on your device (including the profile photo);
  2. deletes your cloud state row (§4) from our server;
  3. permanently unlinks the anonymous statistics you contributed (§5) — the random identifier tying the record to your app is destroyed and replaced, and the record is marked inactive, so it can no longer be traced to you or your device. The anonymous figures themselves are retained for aggregate analysis; and
  4. signs you out.

Your login account itself is not removed by that button. To have the account and its e-mail address deleted, e-mail catpital.wealthcal@gmail.com from the address you signed up with, and we will delete it within 30 days. You can also ask us in the same message to erase the retained anonymous record in full.

A plain uninstall, or an Android "clear data", only wipes the on-device copy — it does not delete your cloud state, unlink the anonymous record, or close your account. Use Delete my data for that.

10. Children

Catpital is not directed at children and does not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

11. Your rights (PDPA)

Catpital is operated from Thailand and acts as a data controller under the Personal Data Protection Act (PDPA) for your account e-mail address (§3), your cloud state (§4), and the anonymous record (§5).

Our lawful bases are your consent, given when you accept the agreement on first launch and when you choose to create an account, and the performance of our contract with you for the account and sync features you ask us to provide.

You have the right to access, correct, export, or erase your personal data, to withdraw consent, and to lodge a complaint with Thailand's Personal Data Protection Committee. You can exercise most of these in the app — your data is visible and editable on every screen, and Delete my data erases it — or by e-mailing catpital.wealthcal@gmail.com, which we answer within 30 days.

Note that once an anonymous record has been unlinked it can no longer be tied to you, and anonymous data falls outside the scope of the PDPA.

12. Changes to this policy

If the app's data practices change, this policy will be updated with a new effective date and the change will be announced in the app before it takes effect.