Tabi — Privacy Policy

Published by: Kuno Labs  ·  Last updated: 1 May 2026

This privacy policy describes what Tabi ("we", "us", "the app", developed by Kuno Labs) does and does not do with your data.

Plain-English Summary

• Your trip data stays on your device. Trips, expenses, captures, photos, and settings are stored locally in your device's app storage. We do not have a server that keeps a copy.
• AI features send data to third-party AI providers (Groq, Google Gemini, Anthropic Claude, DeepSeek) only when you actively use them — voice transcription, receipt OCR, expense extraction, the Ask tab, and voice trip creation. These providers process the request and return results; we do not store these requests on our infrastructure.
• Anonymous usage analytics are collected via PostHog: which features you use, how often, error rates, and aggregate retention. No personal information, trip contents, or expense details are sent.
• No advertising. We do not currently show ads or sell data.
• No account required. Tabi works without sign-in. An anonymous device-scoped identifier is generated on first launch for analytics correlation only.

Data Collected and How

1. Stored locally on your device only

• Trip names, dates, destinations, currencies, budgets
• Expense entries (amount, category, vendor, notes, receipt photos)
• Bookings and itinerary items
• Cash wallets and payment methods
• App settings (theme, display mode, watched currencies, voice language)
• API keys you enter for AI providers (stored in encrypted device storage via expo-secure-store)

This data is never sent to our servers because we do not operate a server.

2. Sent to AI providers when you use AI features

These providers process your request to generate a response. Their data handling is governed by their own privacy policies:

• Groq: https://groq.com/privacy-policy/
• Google Gemini: https://policies.google.com/privacy
• Anthropic Claude: https://www.anthropic.com/legal/privacy
• DeepSeek: https://www.deepseek.com/privacy

You can disable AI features by removing the corresponding API key in Settings; Tabi will fall back to manual entry.

3. Sent to PostHog (analytics)

We collect anonymous usage events to understand which features people use:

• App opens
• Feature usage counts (e.g. "voice_trip_recording_started", "trip_created", "fx_converter_opened")
• Error events (without sensitive context)
• Device type, app version, operating system version

We do not send: trip details, expense amounts, vendor names, photos, transcripts, voice recordings, API keys, or any personal identifiers.

The distinct identifier used by analytics is a randomly generated 32-character hex string created on your device — not your email, name, or device serial.

PostHog's privacy policy: https://posthog.com/privacy

4. Sent to currency rate provider

The free Frankfurter API (https://www.frankfurter.app) is used for FX rates. Only the currency pair (e.g. "AUD to JPY") is sent — no personal data.

Data We Do Not Collect

• Your name
• Your email address
• Your phone number
• Your physical location (we do not request location permissions)
• Your contact list
• Your photo library outside of receipt photos you explicitly capture
• Browsing or search history
• Any data from other apps

Permissions We Request

• Camera — to take receipt photos
• Microphone — for voice expense and voice trip features
• Photo library (read-only) — to select cover images for trips
• Notifications (future, optional) — for cancellation deadline reminders

You can decline or revoke any of these in your device settings; only the feature that needs that permission is affected.

Children's Privacy

Tabi is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has used the app, contact us at the email below and we will delete any associated analytics data.

Data Retention

• Local data: kept on your device until you delete a trip, clear app data, or uninstall the app.
• Analytics events: retained by PostHog for up to 7 years per their default policy. You can request deletion (see below).
• AI provider requests: retained per the respective provider's policy (typically 30 days or per their data deletion API).

Your Rights

You have the right to:

1. Access the data on your device — it's all visible in the app and exportable via the CSV export feature in Money tab.
2. Delete your data — uninstall the app, clear app storage, or delete individual trips/expenses.
3. Opt out of analytics — contact us to disable analytics for your distinct ID.
4. Request deletion of analytics — email us with your distinct ID and we will request deletion from PostHog.

Changes to This Policy

We may update this policy. Material changes will be reflected in the app's update notes. The "Last updated" date at the top of this document indicates the most recent revision.

Contact

For privacy questions or deletion requests, email: kunolabs.dev@gmail.com

Tabi is built by Kuno Labs. For privacy questions or deletion requests, email kunolabs.dev@gmail.com.