Kunatra never sells, rents, or shares your data — financial, personal, or property — with third parties for
advertising, marketing, or commercial gain. We process your data only to provide the services you choose, and we
minimize what we send to any supporting infrastructure or service providers.
What we store
What you enter to build your mirror: your name, email and phone; your household's members, salaries and spending;
your assets, property details, loans and rent; photos you attach; and monthly history so you can see trends. If you
record ID numbers (PAN/Aadhaar), they are stored encrypted, with only the last four digits visible. We also keep
a short sign-in history (place, device, time) so you can spot access you don't recognise.
Who can see what
Your household decides. Owners control access. Members manage only their own salary and assets. Operations
helpers see upkeep tasks — never money. Advisors are read-only.
Even Kunatra's operator cannot see your holdings. Our admin view shows counts (how many users, how many
properties) — never names of assets, values, balances or documents. This is enforced in code, not by promise.
No one outside your household can see your data, full stop.
What leaves our servers — named, not vague
Amazon Web Services hosts everything (database, files, compute). The database is encrypted at rest and all
traffic is encrypted in transit.
Email & SMS (AWS) receive only your address or number and the message we're sending you.
AI property estimates (AWS Bedrock) receive property characteristics only — city, locality, size, type,
prices. Never your name, contacts, asset names, or household finances.
That's the whole list. No analytics trackers, no ad pixels, no third-party scripts — anywhere.
Your rights
Take your data: ask and we'll give you a complete export.
Delete everything: deleting your household permanently removes all of its data — assets, documents, photos,
history, the lot. There is no soft copy kept.
Correct anything: everything you see, you can edit.
Sign-in history is kept for 180 days, then deleted automatically.