Last updated 25 June 2026. Kharcha is built privacy-first.
Your account email, a securely hashed password, and the expense data you choose to enter (amounts, categories, merchants, notes, clients, optional tax/mileage/FX fields). Expense data is stored on your device and synced to your private account so you can use it across devices.
You can export all your data at any time, and permanently delete your account and every associated record from Settings → Account & security. Deletion is immediate and irreversible.
Passwords are stored only as salted PBKDF2 hashes. Sessions use secure, HTTP-only cookies. All traffic is served over HTTPS on Cloudflare.