kashkit·
Join waitlist
How it worksProductsAboutFAQContactJoin waitlist
Privacy Policy

What we collect, why, and what you control.

Last updated: June 9, 2026Effective: Pending launch
Draft — pending attorney review. This is a working template for the KashKit Privacy Policy. It is not legally binding and has not been reviewed by counsel. Final terms will be posted before any loan is originated.

1. Who we are

KashKit is operated by Mak & Brothers Development LLC, a Texas LLC headquartered in San Antonio, TX. For privacy questions, email legal@kashkit.us.

2. What we collect

From you

  • Your name, email address (school .edu and personal), phone number, date of birth, and Social Security Number.
  • School verification: enrollment status, school name, and a photo of your student ID.
  • Identity verification: a government-issued ID photo and a selfie used for liveness checks.

From your bank

  • Via Stripe Financial Connections, read-only access to your linked checking account: account/routing numbers (tokenized), balances, and transaction history used to assess affordability and schedule repayment.
  • We never see or store your bank login credentials. You can disconnect your bank from the app at any time.

Automatically

  • Device information (model, OS, app version), IP address, and basic interaction events for fraud prevention and product quality.

3. How we use it

  • To verify your eligibility and process loans.
  • To send funds to and collect payments from your linked bank account.
  • To send you required loan disclosures, payment reminders, and product updates.
  • To detect and prevent fraud and to comply with our legal obligations as a Texas-licensed lender.

4. Who we share it with

We share information only with the service providers necessary to operate KashKit and only under data-protection agreements:

  • Stripe, Inc. — payment processing and bank linking (Financial Connections).
  • Supabase, Inc. — hosted database and authentication.
  • Resend, Inc. — transactional email delivery.
  • Expo (EAS) — mobile push notifications.
  • Apple, Inc. / Google LLC — app distribution and push routing.
  • Regulators, including the Texas OCCC, when required by law.

We do not sell your personal information.

5. Data retention

We retain account and loan records for at least 36 months after your last loan as required by Texas consumer-credit regulations, then delete or anonymize. You may request earlier deletion of marketing data at any time by emailing legal@kashkit.us.

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Bank linking uses bank-grade encryption and read-only OAuth tokens. Internal access is least-privilege and audited.

7. Your rights

You can:

  • Request a copy of the personal information we hold about you.
  • Correct inaccurate information.
  • Disconnect your bank account from the app.
  • Request deletion (subject to our retention obligations as a licensed lender).
  • Opt out of marketing communications. Transactional emails (payment reminders, receipts) cannot be opted out of while you have an active loan.

Email legal@kashkit.us to exercise any of these.

8. Children

KashKit is not directed to anyone under 18 and we do not knowingly collect data from minors.

9. Changes to this policy

We will notify you of material changes by email at least 30 days before they take effect. Older versions of this policy are archived and available on request.

Privacy questions: legal@kashkit.us. To file a regulator complaint, see our OCCC Notice.

Back to home