Privacy Policy
Draft for legal review. This policy describes how the app works today. It will be reviewed by counsel before a public launch. Questions: support@tamekame.com.
What Tamekame does
Tamekame reads the bank accounts and email inbox you connect to find ways to save money, such as price increases, duplicate charges, overlapping subscriptions, bank fees, and price drops on things you bought. With your sign-off on each one, it can send a request (for example, asking a merchant for a refund) from your email. It never moves money, pays bills, or makes purchases.
What we collect
| Data | Why | How it's kept |
|---|---|---|
| Your account email and password | Sign-in | The password is stored only as a salted, slow hash. Sessions last 14 days. |
| Bank transactions, read through Plaid | Finding savings across your accounts | Read when needed and not stored in bulk. Your Plaid access token is encrypted. What's stored: the findings you've seen with your decisions (no amounts or merchant names), bill review dates, and your savings over time (amounts, with merchant names encrypted). |
| Email, read through Gmail (read-only) | Order receipts for price drops; renewal and promotion notices for bills; and answers when you ask Tamekame about your email in chat | Tamekame searches for those kinds of emails, or for what you asked about. Chat keeps only Tamekame's answer, not the emails. Tamekame keeps the store, item, price, and order date from a receipt (encrypted, deleted when the 60-day price watch ends) and the renewal date and subject from a renewal notice (encrypted). Full emails are not stored. |
| Email sending (only if you allow it) | Sending a request you signed off on | Tamekame sends exactly the email you approved, once. It reads replies in that same thread and keeps a short, encrypted excerpt. |
| Chat with Tamekame | Answering your questions | Stored for your account until you clear it or delete your account. |
| Details you give Tamekame (for example, a ZIP code for price research) | Research you ask for | Encrypted; you can delete them. |
| Account activity log | Security | Event type and time only, no content, kept 365 days. |
Who processes your data
We don't sell your data or use it for advertising. We share it only with the service providers that run Tamekame, for that purpose only:
- Cloudflare: hosting, storage, and the AI models that read your data (DeepSeek and GLM models run on Cloudflare's servers). Requests go through an AI gateway with logging off and zero data retention.
- TypeSafe (Jev), through Cloudflare: sorting recurring charges into bill categories. It receives the merchant name, category, and recent dates and amounts, never your account numbers or tokens.
- Plaid: connecting your bank accounts. See Plaid's End User Privacy Policy.
- Google: Gmail access you grant, and revoke, in your Google account.
- Web search providers (through Cloudflare): only for research and price checks you ask for. Queries never include your email address, account numbers, or other long numbers.
- Email provider: password reset emails.
Google user data
Tamekame's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the features described above. It is not used for advertising, sold, or used to train AI models, and people don't read it except with your permission, for security, or to comply with the law.
Your choices
- Disconnect any bank or inbox at any time in Connections. Tamekame revokes its access with the provider and forgets the data that came from it.
- Start over clears every connection, finding, chat, and saved detail, but keeps your sign-in.
- Delete your account from the account menu to permanently remove everything.
- Every request Tamekame sends needs your sign-off, and you can cancel any request before it's sent.
How long we keep things
Bill category decisions: 30 days. Watched purchases: until the 60-day watch ends. Records of which order emails were read: 120 days. Findings not seen for 180 days are removed with your decisions on them. Bill reviews not seen for over a year are removed. Price and search caches: 1 day. Activity log: 365 days. Everything else stays until you remove it or delete your account.
Security
Connections are encrypted in transit. Access tokens and sensitive details are encrypted at rest with keys held separately from the database. Accounts are read-only except for sending emails you sign off on.
Children
Tamekame is for adults 18 and older.
Changes
If this policy changes, the app asks you to review and accept the new version before connecting new accounts.