What Kalman knows about you
Last changed 11 September 2026.
This is written plainly rather than legally, on purpose. It is an honest description of what the platform actually does — not a lawyer's document, and not checked by one. Before anybody pays for this, a lawyer needs to read it.
The short version
Kalman holds the figures you type in and the headlines it read for you. It does not hold your bank passwords, your account numbers or your ID number, and it never asks for them.
Nothing you enter is sold, shared, or used to advertise to you. There is nobody to sell it to — this is one person's tool, not a business built on data.
What it keeps
- To let you in
- Your email address, a scrambled version of your password that cannot be turned back, and your name if you gave one.
- Your money
- What you own and owe, what you paid, what it is worth, and every entry in your ledger — because a true return cannot be worked out without them.
- Your papers
- Whatever you upload: leases, contracts, statements. These often hold somebody else's details too, which is why they are never given a public address.
- Your decisions
- What reached you, what you did about it, and the reason you wrote at the time.
- How you use it
- When you last logged in, from which devices, and a log of every change made to your data.
What it deliberately does not keep
- Bank passwords or logins. It never asks.
- Account numbers or ID numbers.
- The text of news articles — only the headline and the link.
- Your card details. There is nothing to pay for.
- Broker reports you upload to be read. The figures are kept; the file is thrown away, because those reports hold account numbers.
- Anything at all about your papers, anywhere but here. They are never sent to another program or another company to be read.
How long it keeps it
- Kept for good
- Your ledger, your monthly snapshots, your decisions, your papers, and the exchange rates for each day — these cannot be rebuilt later.
- Two years
- News that reached your inbox.
- Ninety days
- Headlines read from your sources.
- Thirty days
- Headlines that were read and never shown to you. Only the counts survive.
Old news is worthless and old decisions are priceless. That is why the two are treated so differently.
Where it lives
On a rented computer on the internet, reachable only over an encrypted connection.
Wherever it runs, your data is kept separate from everybody else's, and nobody sees yours unless you invite them.
Who else sees it
- Anybody you invite, at the level you chose, until you cancel it. That is you handing somebody a key — never this platform showing anybody anything.
- The news sites Kalman reads for you see that something asked them for their public list of headlines. They are not told who you are or what you own.
- Your mail service, once one is set up, sees the emails sent to you. Those emails carry no figures, which is why they are written that way.
- Nobody else. There are no advertisers, no analytics companies, and nothing loaded from anybody else's computer.
What actually leaves this computer
Four things are fetched from outside. Three of them are the same request whoever makes it, so they learn nothing. One is not, and it is listed here rather than glossed over.
- Exchange rates
- The Bank of Israel is asked for the published rates of the last few days. The same request for everybody. It learns nothing.
- Pension, gemel and hishtalmut figures
- The month is copied for every fund in the country — about a thousand — and yours is looked up here. Asking about one fund would tell them which fund is yours, so it never asks about one.
- News
- Whole public lists of headlines, exactly as anybody else would read them. No search, no question about you.
- Share prices
- This is the one that gives something away. For each holding you asked to be kept up to date, the price source is asked about that ticker — so it can tell that somebody, somewhere, is watching it. It is not told who you are, how many you hold, or what you paid. Untick the box on a holding and it is never asked about.
Your papers are in none of that list. Nothing you upload is ever sent anywhere — not to be read by a program, not to be turned into text, not anywhere. A file this platform cannot read stays unread.
What you can do about it
- See everything it holds — every screen is that.
- Correct anything. Nothing is written in stone.
- Take a copy of the lot, as one file, whenever you like.
- Delete your account and everything in it, permanently.
If something goes wrong
If your data is ever exposed, you will be told plainly and quickly — what happened, what was affected, and what to do about it. Keeping little is the main protection: what is not held cannot leak.