Kera is a household shopping assistant: a household captures what it needs, routes requests through approval, and buys — with budgets, recurring essentials, wishlists, price tracking, and an AI assistant you can chat or talk to. This Privacy Policy explains what personal data we collect, why, who we share it with, and the choices and rights you have.
It covers the Kera mobile apps (Android and iOS), the Kera web app, and this website. Kera is private by design: we do not sell your personal data, we do not share it with data brokers, and we do not run third-party advertising.
1. Who is responsible for your data
The data controller is:
- Legal entity
- SPIN LLC (Georgian: შპს სპინ)
- Company ID
- 405173191 (National Agency of Public Registry of Georgia)
- Registered office
- Ana Politkovskaia Street 22a, Floor 10, Apt 140, Vake District, Tbilisi 0186, Georgia
- Contact
- hello@spin.ge · hello@aikera.io
Your data is primarily hosted in the European Union (database and application backend). Some providers listed in section 7 operate elsewhere, under the safeguards described in section 8.
2. What we collect
- Account data — email address, display name, and a password, stored only as a salted hash and never in plain text.
- Household data — household name and type, your role (Requester, Buyer, or Admin), the members you invite, and invite codes.
- Shopping data — items, categories, quantities, notes, comments, stores, purchases and the prices you record, budgets, lists and templates, recurring essentials, pantry staples, wishlists and gift occasions, and product links you paste.
- Financial tracking data you enter — budget limits, expected and recorded prices, manual income and expense entries, reimbursements, and settle-up entries. These are figures you type in. Kera does not connect to a bank and does not process payments.
- Content you capture — photos you upload or take (products, receipts, barcodes) and voice notes you record.
- Voice audio — if you talk to the assistant, your audio is sent to our speech-to-text processor to be transcribed. We do not retain the raw audio afterwards.
- Assistant conversations — the messages you send and the replies, kept only while assistant memory is enabled. You can delete any conversation or switch memory off.
- Shopping preferences — brand, dietary, allergy, store, and avoid notes you record so the assistant respects them. Allergy and dietary notes may reveal health-related information; entering them is entirely your choice.
- Contacts (optional) — if you tap “pick from contacts”, we read only the specific contacts you select, and only to pre-fill an invitation. Your address book is never uploaded, indexed, or retained.
- Approximate location (optional, off by default) — for nearby-store suggestions you may share a device position, which we round to roughly a one-kilometre grid before storing, or simply type a country and city. We never store a precise GPS coordinate.
- Device and delivery data — push-notification token, device platform, and app version.
- Usage and reliability data — which features are used, and error and crash diagnostics.
We do not collect payment-card numbers, bank-account details, or government identification. We do not use advertising or cross-site tracking cookies.
3. How we use your data
- to run the core loop — request, approve, buy, and restock recurring essentials;
- to power the assistant and AI conveniences (see section 6);
- to send the notifications you opt into;
- to compute budgets, spending analytics, and currency conversions;
- to keep the service secure, including authentication, rate limiting, and abuse prevention;
- to improve the product, using aggregate and de-identified analysis;
- to respond to your enquiries and, where you asked for them, to send product updates.
Where the GDPR applies, our legal bases are performance of our contract with you, your consent (for optional permissions and marketing email), our legitimate interests in security and product improvement, and compliance with legal obligations.
4. Device permissions
Kera asks for a permission only when you use the feature that needs it, and every one is optional. You can revoke any permission in your device settings at any time; only the related feature stops working.
- Camera — photographing products, receipts, and barcodes.
- Photo library — choosing an existing photo instead of taking one. Only the images you pick are read.
- Microphone — talking to the assistant instead of typing.
- Notifications — approval requests, budget alerts, price drops, and reminders. Manage them per category in Settings.
- Contacts — pre-filling an invite from people you choose.
- Approximate location — suggesting nearby stores. Off by default, and rounded before storage.
5. The assistant is advisory, never automatic
Kera’s assistant can suggest items, find products, compare prices, and flag budget consequences. It never completes a purchase and never spends money for you. Anything it proposes is added to your list only after a person confirms it, and approvals, purchases, and budget changes are always made by a household member. Kera does not make automated decisions producing legal or similarly significant effects about you.
6. AI processing
Some features send data to AI providers acting as our processors. They return a result to us and, under their terms, are not permitted to use your data to train their general-purpose models.
- Chatting or talking to the assistant — your message and relevant shopping context (items, preferences, budget figures) go to OpenAI, Anthropic, or Google.
- Speaking to the assistant — your recorded audio goes to OpenAI or Google for transcription, and the reply text for speech.
- Photographing a product or receipt — the image goes to Anthropic or OpenAI to be read.
- Asking the assistant to find a product — your search terms go to Brave Search. We never send your name, email, or household identifiers.
- Adding an item with no matching picture — the item name is sent to Replicate as a generation prompt.
Household preferences you record, including allergy and dietary notes, are supplied to the assistant so it does not suggest something unsafe. You can turn AI features off: an administrator can disable them for the whole household, and assistant memory can be switched off so conversations are not kept.
7. Who we share it with
We do not sell your personal data. We share it only with providers that help us run Kera, under agreements requiring them to protect it:
- OpenAI — assistant replies, speech-to-text, text-to-speech, live voice.
- Anthropic — assistant replies, receipt and photo understanding, categorisation.
- Google — live voice conversation and speech processing.
- Brave Search — product and price search, search terms only.
- Replicate — generating an item image when no picture exists.
- Cloudflare R2 — storage of photos, voice notes, and logos.
- Neon and Fly.io — the managed database and application hosting, in the EU.
- Vercel — hosting for the web app and this website.
- Expo — push-notification delivery and app updates.
- Resend — transactional email, and storing early-access signups as contacts.
- Sentry — error and crash monitoring.
- Open Food Facts and related open product databases, Open Library, UPCitemdb — barcode lookup, using the scanned barcode only, with no personal identifiers.
- OpenStreetMap — nearby-store suggestions, using approximate rounded location only.
- Frankfurter / European Central Bank and a currency-rate API — exchange rates, using currency codes only.
We may also disclose data where required by law, to protect rights and safety, or in connection with a corporate transaction, with notice where required.
Affiliate links. Kera does not currently earn affiliate commissions, and we strip tracking parameters from product links you paste. If we introduce affiliate links we will label them clearly in the app and update this policy first.
8. International transfers
Your data is primarily stored in the European Union. Some providers above operate in other countries, including the United States. Where data leaves the EEA or the UK we rely on appropriate safeguards — the European Commission’s Standard Contractual Clauses, or an adequacy decision or equivalent certification where one applies. Write to hello@spin.ge for details.
9. How long we keep data, and how to delete it
- Account and household data — while your account is active.
- Shopping, budget, and purchase records — while the household exists; shared records stay visible to that household.
- Assistant conversations — until you delete them, switch memory off, or request erasure.
- Photos, voice notes, and item images — until deleted, or until erasure is completed.
- Voice audio — not retained after transcription.
- Error and usage diagnostics — up to 90 days.
- Backups — overwritten on a rolling cycle and purged within 30 days.
Deactivating your account. In the app, Settings → Privacy & data → Delete my account deactivates your account immediately and signs you out everywhere. A deactivated account can no longer sign in.
Erasing your personal data. Deactivation alone does not erase your records. To have your personal data erased, use our account & data deletion request page, or email hello@spin.ge from your account’s email address. We complete verified requests within 30 days and confirm by email.
When we erase your data we delete or irreversibly anonymise the personal data associated with you — your email address, display name, credentials, push tokens, assistant conversations, and uploaded content. Shared household records that other members rely on, such as a purchase recorded against a household budget, may be retained in anonymised form so the remaining members’ history stays intact. We may also retain the minimum required to meet a legal obligation or resolve a dispute.
10. Children
Kera is intended for adults (18+) and is not directed to children. Our Google Play listing declares an adult target audience, and we do not knowingly allow a child to create their own Kera account.
A household administrator may create a Requester profile for a child, managed entirely by that adult. Those profiles are deliberately restricted: they cannot buy or approve anything; they do not see household money, including budgets, spending, income, or price history; and location, contacts, and the voice assistant are not available to them. The parent or guardian controls that profile and can remove it, and its data, at any time.
If you believe a child has created an independent account, contact hello@spin.ge and we will remove it.
11. Your rights and choices
Depending on where you live you may have the right to access, correct, delete, port, or restrict your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. California residents may additionally request disclosure of the categories of data collected, and may opt out of “sale” or “sharing” — neither of which we do.
- Manage notifications per category in Settings.
- Grant or revoke camera, microphone, contacts, and location permissions in your device settings.
- Turn assistant memory off, or ask an administrator to disable AI features for the household.
- Export your household’s data from Settings → Privacy & data.
- Deactivate your account, and request erasure as described above.
To exercise any right, email hello@spin.ge. We respond within 30 days. You also have the right to complain to your local data-protection authority.
12. Security
Passwords are stored as salted hashes, traffic is encrypted in transit with TLS, access to production systems is authenticated and restricted, secrets are held outside our codebase, and we monitor for errors and abuse. No system is perfectly secure, but we work to protect your data and to respond promptly to any incident, including notifying you and the relevant authority where the law requires it.
13. Changes to this policy
We will update this policy as Kera evolves and post the new effective date here. For material changes we will give notice in the app or by email before the change takes effect.
14. Contact
Privacy: hello@spin.ge · Product support: support@aikera.io