Privacy Policy

Dettox is operated by Alpha Kabine Kaba, based in Montréal, Québec, Canada. It provides debt-payoff planning, payment tracking, and spending summaries at dettox.app. In this policy, “we” and “us” refer to Alpha Kabine Kaba operating Dettox.

For privacy questions, complaints, or requests, contact Alpha Kabine Kaba, Privacy Officer for Dettox, at hello@dettox.app.

The launch waitlist is closed. If you previously joined, your email address and signup time may remain in Supabase for the launch notification you requested. This did not create an app account or start a subscription. We do not use these records for unrelated marketing. To request deletion, email hello@dettox.app.

The former waitlist also stored keyed hashes for spam prevention, rather than raw IP addresses. New waitlist submissions are no longer accepted.

• Account information: your email address, authentication identifiers, account preferences, and onboarding answers. If you use a password, authentication is handled by Supabase.
• Information you enter: debt names, balances, interest rates, payment amounts, account names and types, notes, and your selected payoff strategy.
• Imported transactions: dates, descriptions, amounts, categories, account associations, and payment matches from accounts you connect through Plaid or from bank CSV files you upload, along with connection, synchronization, and import metadata. For CSV uploads, we store the parsed transaction rows, not the original file. Descriptions may contain names or account references from your bank statement. From connected accounts we also receive account balances, currencies, and available debt details such as interest rates.
• Billing information: Stripe customer and subscription identifiers, subscription status, and billing-related records. Stripe collects payment-card and billing details through its checkout; Dettox does not store your full card number or security code.
• Technical, analytics, and support information: operational logs, request and device information processed by our hosting providers, the product events described below, and messages you send us. On public pages, PostHog briefly processes the connection IP address and raw browser user-agent to calculate the daily cookieless identifier described below; it strips both before storing the analytics event.

If you choose to use our hosted feedback form, Tally processes the feedback type, message, optional reply email, and any screenshots or videos you choose to attach so we can review your report and respond. Reports are private, not posted on a public feedback board. You can also contact us by email.

We do not prefill the form with your Dettox account, bank records, balances, or screenshots. Feedback works independently of optional analytics. Please leave financial details out of your message.

If you choose Google sign-in, Google shares basic identity information, such as your email address, name, profile picture when available, and a provider identifier. Supabase processes that information to authenticate you and maintain your account. Dettox uses it for sign-in, account identification, and account-related communication.

Dettox does not request access to your Gmail messages, Google Drive files, contacts, or calendar. We do not send your Google profile to the AI categorization provider or use Google user data for advertising. Other sign-in providers, when offered, are used for the same authentication purpose.

You can remove Dettox’s Google connection in your Google account settings. Disconnecting Google does not itself delete your Dettox account or cancel a subscription; those controls are available in Dettox Settings.

We use information to provide the features you request: create your account, import and categorize transactions, match debt payments, calculate payoff estimates, show spending summaries, process subscriptions, provide support, and let you export or delete your data. We also use information to maintain security, troubleshoot problems, improve the service, and comply with legal obligations.

When you connect supported accounts through Plaid, Dettox receives available transaction, account, balance, and debt information. Dettox does not receive your bank password or move money between accounts. Disconnecting a bank revokes Dettox’s access through Plaid and stops future updates; previously imported history remains until you delete it. We do not sell personal information or use it for targeted advertising.

Bank-connected features use Plaid to access the accounts you authorize. Available information varies by institution and can include account names, types, balances, transactions, suggested categories, and debt details. Plaid handles the bank connection under its End User Privacy Policy. Connecting a bank requires your authorization through Plaid.

Plaid supplies categories for synced transactions. You can review and correct them. The bank-sync path does not send transactions to Anthropic for categorization.

The CSV import workflow uses Anthropic’s Claude API to help categorize transactions that are not resolved by existing merchant matches or rules. For those transactions, we send a transaction identifier, the bank’s transaction description, the amount, and the account type. A description can contain personal information supplied by your bank; it is not necessarily anonymous.

We do not send your entire CSV file, sign-in password, or Google profile as part of this categorization request. Anthropic processes the information to return category suggestions under its commercial service terms and data-handling policies. Learn more in Anthropic’s Privacy Policy.

To monitor reliability and operating costs, we keep private usage records linked to your account: request times, transaction counts, retries, token counts, and estimated API costs. These records do not copy transaction descriptions, amounts, or AI response content and are separate from optional product analytics. They are deleted with your account.

Categories can be wrong. You can review and correct them and confirm debt-payment matches. AI categorization does not make payments or provide financial advice.

We share information with service providers as needed to operate Dettox:

• Anthropic for categorizing CSV transactions that saved rules do not resolve.
• Supabase for authentication and database services.
• Vercel for website hosting and operational infrastructure.
• Plaid for bank connections, financial data, and categorization.
• Stripe for payments, subscriptions, invoices, and billing management.
• PostHog in the United States for cookieless public-page audience measurement and, when accepted, product analytics, selected masked recordings, and optional error reports.
• Tally for the hosted feedback form when you choose to submit a report.
• Your chosen sign-in provider and email-delivery providers for authentication and account communications.

We may also disclose information when legally required, to address fraud or security threats, to protect people’s rights, or as part of a business transfer subject to applicable privacy obligations. Providers may process information outside Québec and Canada, including in the United States, where privacy laws may differ.

Dettox uses cookies and similar browser storage to keep you signed in and support authentication and onboarding. Blocking these may prevent account features from working.

On public pages, PostHog provides cookieless audience measurement for sanitized page paths, referral and campaign labels, landing-section exposure, calls to action, and broad device categories. This tier creates no person profile, identifies no Dettox account, stores nothing in PostHog cookies or browser storage, and does not record a session.

To estimate which public-page events likely came from the same browser during one day, PostHog calculates a one-way hash on its server from the Dettox PostHog project, a random daily salt, the website hostname, the connection IP address, and the browser user-agent. The raw IP address and user-agent are stripped before the event is stored. PostHog deletes the salt after that day’s events are processed, so the hash changes daily and is not connected to an account or to a later consented identity. Cookieless visitor counts are estimates and can merge or split visitors who share or change networks and browsers.

With your acceptance, PostHog additionally records onboarding steps, payment confirmations, upload outcomes, and other allowlisted product events. It can associate those consented events with a pseudonymous account identifier after sign-in. We do not send financial amounts, statement contents, merchant descriptions, email addresses, filenames, or onboarding answers in analytics events.

A sample of consenting landing, signup, and sign-in sessions may be recorded with text and inputs masked before transmission. Financial and onboarding screens are excluded from recordings. Browser storage remembers the optional choice and connects consented visits. Declining prevents account-linked analytics, optional errors, and recordings; anonymous cookieless public-page measurement continues.

You can change your browser choice through “Analytics choices” in the landing footer and your account preference under “Product analytics” in Settings. “Send error reports” separately controls sanitized errors and diagnostic context for signed-in accounts. Anonymous error reports require acceptance. These choices do not disable essential security logs, authentication, or billing records.

We keep account and transaction information while it is needed to provide your account and the service. You can delete your account in Settings. Any connected banks must be disconnected first, so that bank access is revoked before deletion. Deletion removes your account and associated application records, including stored bank-connection tokens, from the active database and cancels its Stripe subscription.

PostHog’s daily cookieless salt is deleted after that day’s events are processed. Stored cookieless events, consented product events, errors, and permitted recordings remain subject to the configured PostHog product-retention periods. Contact hello@dettox.app to request deletion of account-linked analytics data. Application account deletion does not itself immediately remove data from PostHog; we handle that through the privacy-request process.

Limited records may remain where required for legal, tax, accounting, fraud-prevention, or dispute purposes. Provider backups and logs may persist until their retention cycles expire. Payment providers may retain records under their own legal obligations.

We protect information with access controls that limit each account to its own data, encryption in transit (HTTPS/TLS) and at rest, and an additional layer of encryption for stored bank-connection tokens. Administrative access to our systems requires multi-factor authentication. No internet service can guarantee absolute security. Keep your credentials private and contact us if you suspect unauthorized access.

You can edit your account’s financial information, correct transaction categories, export transactions as CSV, export your debts, accounts, settings, and transactions as JSON, and delete your account from Settings.

Cookieless public-page events cannot be retrieved or deleted by Dettox account because they are never linked to an account or a persistent browser identifier. Account-linked analytics begins only after acceptance and can be addressed through a verified privacy request.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to certain processing, withdraw consent, or complain to a privacy regulator. Contact hello@dettox.app to make a request. We may need to verify your identity. Withdrawing information needed to run your account may mean we cannot continue providing those features.

In Québec, you may contact the Commission d’accès à l’information about your privacy rights or a complaint.

Dettox is intended for adults and is not directed to children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy as the service changes. We will update the date above and provide additional notice of material changes where required. You can always find the current policy on this page.