Khata

Privacy

Last updated 7 November 2026

Khata is a tool for keeping track of shared expenses. It is run by Aback Group and its code is public, so everything described here can be checked in the source.

What we store

  • Your account: your name, email address, profile picture if you sign in with Google, your default currency, your UPI ID if you add one, and your email preference.
  • What you record: groups, members, expenses, how they are split, payments, notes, and a log of changes so everyone can see who did what.
  • Sign-in data: active sessions with the IP address and browser they came from, and, if you use Google, the link between your Google account and Khata. One-time sign-in codes are stored only as hashes and expire after 10 minutes.

We do not use analytics trackers, advertising cookies or third-party scripts.

Who can see what

  • Everyone in a group sees the group's shared expenses, payments and balances.
  • A private hisab inside a group, and a one to one hisab, can only be seen by the two people in it. The server enforces this on every request.
  • People you share a group or hisab with can see your name, email and, if you added one, your UPI ID.

When someone adds you

Anyone can add your email address to a group or a hisab. When they do, Khata keeps your email and the name they typed so the expense can include you, and sends you one email to let you know. You can sign in with that address to see everything, or ignore it.

Emails

We send sign-in codes, a note when someone adds you, reminders that people send you, and, if you leave them on, emails about new expenses and payments that involve you. You can turn the last kind off in settings. Emails are sent through Cloudflare Email Service.

Where it lives

Khata runs on Cloudflare Workers and stores its data in Cloudflare D1. Data is encrypted in transit and at rest by Cloudflare. We do not sell or share your data with anyone.

Taking it out and deleting it

You can export any group as CSV. Once you are settled up with everyone you can delete your account from settings: your name, email and sign-in methods are removed and you leave every group. Expenses you were part of stay for the other people, shown as a deleted account, because their balances depend on them.

Contact

Questions or requests: hi@aback.group.