Privacy Notice

Shitrit Family Office keeps a family's records for the family alone. This notice says what we collect and how, what we use it for, who processes it, what the assistant sends and what is yours to decide.

Last updated: September 9, 2026.

What we collect, and how

• Your account. Your email address and password when you sign up (by invitation), and your name and an optional photo if you add them in Account. A two-step verification secret if you turn it on.
• What you enter. Household payments, projects, investments, companies, insurance policies, family members, vendors, categories, notes, key figures and the reports you save. You type them in; we never connect to your bank.
• Files you attach. Receipt photos, documents (PDF) and spreadsheets, taken with the camera or chosen from your files, only when you choose them. They are stored privately with the record they belong to.
• Your conversations with Kira. What you write to her, any file you hand her and her answers, kept so you can return to them, and the things you ask her to remember.
• Technical data. The IP address and time of each request, in short-lived server logs used only for security and to keep the office running. No advertising or analytics trackers, no fingerprinting.

What we use it for

• To show you your own records and figures, and only to you.
• To answer you through Kira, and only after you allow her in the app.
• To send the emails you ask for: a report to your inbox, a password link.
• To keep the account secure: sign-in, two-step verification, abuse prevention.
• To keep encrypted backups so nothing is lost.

Nothing else. We do not sell your data, we do not use it for advertising, we do not build profiles, and no data is used to train any artificial-intelligence model.

Kira and artificial intelligence

Kira is the office's assistant: the readings, the facts and the answers come from her. To help you she sends, to Anthropic, PBC (United States): the question you type, the figures from your own records needed to answer it (payments, projects, investments, companies, insurance), your name so she can address you, and any file you hand her (a receipt photo, a policy PDF, a spreadsheet). Never your email, your password, or another family's records.

Nothing is sent until you allow it inside the app: the first time you enter, the office shows you exactly this and asks. Every screen that would use Kira asks again if you have not allowed her, and you can turn Kira off at any time in Account → Kira and your data. The office works fully without Kira; only the readings and the answers stop.

Anthropic acts as our processor under a data processing agreement: it handles this data only to produce the answer, encrypted in transit, does not use it to train its models, does not sell or share it, and deletes it after a short retention window kept for abuse prevention. This is the same protection we give your data ourselves.

Who processes it?

• Supabase stores the database, the documents and the passwords (encrypted), with a rule per person so nobody reads another's rows. It receives everything you keep in the office, because it is where the office lives.
• Vercel hosts the application and serves it over HTTPS. It receives the requests your browser or the app makes, with your IP address, and keeps short-lived technical logs.
• Anthropic, PBC runs the Claude model behind Kira. It receives what is needed to answer you only after you allow it, does not use it to train its models and keeps it only briefly, for abuse prevention.
• Resend delivers the emails the office sends (a report you send yourself, a password link). It receives your email address and the message.
• Twelve Data and Finnhub provide public market prices for the Investment section. They receive only ticker symbols, never anything about you.

Each of them is bound by a data processing agreement to protect your data as we do: to use it only on our instructions, to keep it encrypted, and to delete it when we delete it. We share nothing with anyone else.

Who can see your data?

Only you. The database has row-level rules that prevent one user from reading another user's information; documents and photos are private and served through links that expire. We do not sell your data and we share it with nobody beyond the processors above.

How is it protected?

Encrypted in transit and at rest, passwords never stored in clear, two-step verification available on every account, and encrypted daily backups. A copied link to a photo or a document stops working on its own.

How long we keep it

For as long as your account exists. Technical logs are kept only for days. Encrypted backups are replaced by newer ones on a rolling basis. When you delete your account, everything leaves the live system at once and the backups within their rotation.

What is yours to decide

You can see and correct every record from inside the office, export your data (Excel, PDF and a full encrypted backup from Account), allow or withdraw Kira, and delete the account yourself. For any question about your data, write to privacy@shitrit.io.

Deleting your account

From Account → Leaving the office you delete it yourself, whenever you want: your files go first, then every record, and the account. Nothing stays behind.

Who this is for

The office is for adults keeping a family's finances. It is not directed at children and we knowingly collect nothing from anyone under 18.