Privacy, in plain words.

1. What we collect

Your account

• Your email address and password. We only store a hash of the password.
• If you sign in with Apple or Google: your email, your name if you share it, and the account ID that Apple gives us.
• If you sign in with Apple, a token from Apple. We keep it so we can end Kibo's access to your Apple ID when you delete your account.
• If you use Kibo without an account: a random ID created on your phone, which keeps your guest account.
• Your language and region (for example es_ES). We use them to pick your currency.

What you log

• Expenses and income: amount, currency, title, category, date and note.
• Categories, budgets, Spaces, subscriptions and fixed costs.
• Bank statements you import as a CSV file. We keep the rows you import, not the file.
• If you invite a friend, their email address, so we can send the invite and tell you when they join.

Receipts

Kibo reads receipts on your phone. The photo does not leave your device. We receive only the text read from it, use that text to create the expense, and don't keep it.

Saved places (iPhone)

If you save a place, we store its name, its exact coordinates, the radius you pick and the expense to log there. The map starts at your current position, so a saved place is often where you stood when you saved it. Your phone checks when you arrive. When it logs an expense at a place, we store that expense with the place and the time. We don't receive your live location. To search places and draw the map, the app uses Apple Maps, which receives your search and the map area. You can delete a saved place at any time. Saved places are not in the Android app yet.

Notifications and purchases

• A push token, your device model and your app version, so we can send the notifications you allow.
• For Premium: the store's order or transaction ID, the plan and its dates. Apple or Google take the payment. We never see your card.

How the app is used

• Firebase Analytics, by Google, records screens you open, buttons you tap and events such as "expense created". It is linked to your Kibo user ID. It uses an app instance ID and, on Android, your device's advertising ID. Google works out an approximate location (country or city) from your IP address.
• On Android, we tell Google Ads when someone who installed Kibo from one of our ads creates an expense. That is how we measure our ads. On iPhone, Apple tells us which Apple Search Ads campaign and keyword led to your install, if any.
• Firebase Crashlytics, by Google, receives crash reports with your device model, system version, language and Kibo user ID. A report can include the last things the app did, such as an expense title or a search. Our server sends its own errors to Sentry, and those reports can include your email address.

We don't collect your contacts, your photos, recordings of your voice, your browsing history or data from other apps.

2. How we use it

• To run the app. Sync your data across devices, render your dashboards, and send reminders you've opted into.
• To suggest categories and read receipts. Google's Gemini models on Vertex AI process expense titles, receipt text, quick-add text, the first rows of an imported statement and Space names. They suggest a category, an amount or an image. Google does this on our behalf, under the Google Cloud terms.
• To fix bugs and measure our ads. Analytics and crash reports show us what breaks and which of our ads bring people who use Kibo.
• To send transactional emails. Sign-in confirmations, security alerts, and (if you opt in) occasional product updates. You can unsubscribe from the marketing list with one click.

3. Who we share with

We don't sell, rent or trade your data. These companies process it for us:

• Google Cloud hosts the server and the database, runs Gemini, and keeps our server logs and backups.
• Google Firebase runs analytics, crash reports, Android push notifications and remote settings.
• Google Ads measures installs, and expenses created, after one of our Android ads.
• Apple handles Sign in with Apple, App Store purchases, iPhone push notifications and Apple Search Ads attribution.
• Google Play handles purchases and Google sign-in on Android.
• Resend sends our emails: verification, password reset and invites.
• Sentry receives our server's error reports.

Some of them process data outside the EU, mainly in the United States. Google and Sentry rely on the EU-US Data Privacy Framework, and on the EU Standard Contractual Clauses where the framework does not apply. Resend is certified under the EU-US Data Privacy Framework and also uses the EU Standard Contractual Clauses.

We have never been asked by a law-enforcement body for user data; if we were, we would publish the request in a transparency report and contest anything overbroad.

4. Security

Your data travels over HTTPS. The database runs on Google Cloud, which encrypts disks at rest. Only the developer can reach the server and the database.

No system is perfect. If a breach affects your account, we will tell you within 72 hours, in plain language.

5. How long we keep it

We keep your data while you have an account. When you delete it, we delete your data from the database straight away. Copies stay in encrypted backups for up to 90 days, in server logs for up to 30 days and in error reports for up to 90 days. After that, they expire. Apple and Google keep their own purchase records under their own policies.

6. Your rights

You can, at any time:

• Export your expenses as a CSV file from the app. For anything else, write to privacy@ki-bo.com and we'll send you a copy.
• Correct anything that's wrong.
• Delete your account and its data from the app (Profile, then Delete account) or from the delete account page.
• Opt out of marketing emails (you can keep the security ones, we recommend it).

If you're in the EU, UK, or California, the GDPR and CCPA give you these rights by law. We extend them to everyone, because it's the right thing. In the EU you can also complain to a data protection authority. In Spain, that is the AEPD (aepd.es).

7. Children

Kibo is not directed at anyone under 13. If you believe a child has signed up, write to us and we'll remove the account.

8. Changes

If we change this policy, we'll bump the date at the top and email everyone if the changes are material. We will not quietly change the bits that matter.

9. Contact

Kibo is responsible for your data under the GDPR. For any privacy-related question, write to privacy@ki-bo.com. You'll hear back from a human within a few days, usually faster.