Privacy Policy
Konto is a manual-first personal and household finance app. This policy explains exactly what information we collect, why, who processes it, and the controls you have over it. We keep it specific because a finance app should.
Konto ("Konto", "we", "us", or "our") is a personal and household finance application operated by DelmDev, an independent developer. This Privacy Policy describes how we handle personal data when you use the Konto mobile app and the service behind it.
For any privacy question, or to exercise the rights described in this policy, contact us at delmdev@gmail.com.
This policy covers the Konto mobile app and the Konto service it connects to. It does not cover third-party services that are not part of Konto, nor any website or product that links to Konto but is operated by someone else.
Konto is manual-first by design: you record your own transactions. We do not connect to your bank, import statements automatically, or access your banking credentials. This is a deliberate product decision, and it means an entire category of sensitive data simply never enters our systems.
We collect only what the app needs to work. Everything below is stored securely and encrypted, unless stated otherwise.
| Category | What it includes | Why we need it |
|---|---|---|
| Account & identity | Email address, first and last name, and — unless you sign in with Google — a password (never stored in a readable form) | To create and secure your account and sign you in |
| Sign in with Google (optional) | If you choose to sign in with Google: your name, your email address, whether Google has verified that email, and your Google account ID. We save your name and email on your Konto account and keep your Google account ID so we recognise you the next time you sign in with Google. We never receive your Google password, and we do not store your Google profile photo | To create your account or sign you in without a Konto password, and to connect Google sign-in to an existing Konto account that uses the same verified email |
| Financial data | Transactions (amount, category, merchant or description, note, date/time, and whether a transaction counts toward who paid or toward a savings goal), account names, balances and currencies, budgets, recurring-transaction rules, savings goals (name, target and deadline), how a shared space shares its costs (equal, or a percentage per member), and the settle-ups members record between each other | This is the core of the app — the money you choose to track |
| Spaces & membership | Space names and types, memberships and roles, and invite codes | To run personal and shared spaces and let members you invite collaborate |
Google sign-in shares only your basic profile. Konto asks Google for your name, email address and account ID — nothing else. It cannot see your Gmail, contacts, calendar, Drive, or any other Google data.
Konto's use of information received from Google adheres to the Google API Services User Data Policy, including the Limited Use requirements.
| Category | What it includes | Why we need it |
|---|---|---|
| Device timezone | Your device's timezone, captured at signup | So recurring transactions are generated at the correct local time |
| Sign-in and security | Your active sign-in sessions, and the one-time codes we send to verify your email or reset your password (never stored in a readable form) | To keep you signed in and to verify email and reset requests securely |
| Subscription data | Your subscription status and plan, and purchase details from the app store (such as the store and the product you bought) | To unlock and manage paid features (such as receipt scanning, spoken entries, balances and savings goals) |
| Receipt-scan usage | Per scan: which account and space it was for, whether it worked, and when | To enforce monthly scan allowances and prevent abuse |
| Spoken-entry usage | Per spoken entry: which account and space it was for, whether it worked, and when | To enforce monthly allowances and prevent abuse |
| Product-analytics events | Non-financial feature-usage events tied to your user id and email address, plus app and device metadata (app version, device model, OS version, language) and an approximate location derived from your IP address | To understand how features are used and improve the app (see §08). No financial content is included |
| Error reports | When the app or our service hits an error: the error details, your user id, and app and device metadata (app version, device model, OS version) | To find and fix crashes and failures, such as a sign-in that could not finish. No financial content is included |
Usage records contain no content. For receipt scans and spoken entries we record only that one happened and its outcome — never the image, never what you said, and never any text read from them. See §07.
Application logs (retained for a limited period) may incidentally contain identifiers such as your user id or request data. We do not use logs to build profiles of you.
Being specific about what we don't do matters as much as what we do:
The app requests a small number of permissions, only at the moment they're needed and only for the purpose described:
On your device, your sign-in is kept in the phone's secure storage and removed when you sign out. Konto doesn't keep passwords or receipt images on your phone.
We use the information above to:
We do not use your financial data for advertising or profiling, and we do not sell it.
Receipt scanning and spoken entries are optional paid features that fill in a transaction for you to check. Both use an AI service provider that works on our behalf.
Your receipt image is never stored. It is used once to read the receipt and then discarded. It is not saved to our database or our logs, and the text read from it is not stored either.
What you say is never stored. The text is used once to suggest the fields and then discarded. It is not saved to our database or our logs, and it is not sent to our analytics provider.
The AI service provider processes receipts and spoken text only to return suggestions to us, and is not allowed to use them to train its models.
To understand how Konto is used and where it can be better, we use a product-analytics service in the released app. This is first-party product analytics — it measures how features are used. It is not advertising, and it never receives your financial details.
No screen recording and no blanket tracking. We do not use session replay, and we do not automatically capture your taps or the text on your screen. Only the specific events described above are recorded.
Analytics runs only in the released app. Our analytics provider processes this data on our behalf (see §09) and does not use it for its own purposes.
Your data is stored with our cloud hosting provider in the United States. If you use Konto from outside the United States, your data is transferred to and processed there. Product-analytics data is also processed in the United States.
We keep your personal and financial data for as long as your account is active, so that your history and balances stay correct.
You can request to delete your account from within the app. This starts a 14-day grace period: your account is locked immediately and you are signed out, but nothing is destroyed yet. If you change your mind, you can cancel any time before the 14 days end simply by signing back in — your account is fully restored, with nothing lost. If you take no action, we process the deletion permanently after 14 days.
Konto keeps a complete history of transactions so that balances always add up. Because of this, we delete your data by anonymizing it rather than erasing every record. Your email, name, and password, the link to your Google account if you signed in with Google, the descriptions, notes, and merchant names on your transactions, and your account and personal-space names are erased or replaced with anonymous values, so the remaining records can no longer be linked to you. This is irreversible.
If you shared a space with other people, removing your data entirely would corrupt their balances and history. So for transactions in a shared space, we keep a minimal, de-identified financial record — the amount, date, and category — and remove everything personal to you: your name, notes, and descriptions. To the other members, those entries appear only as "Transaction from a former member."
Accounts you owned are frozen and removed from any shared space — an account is your own asset and leaves with you. If you owned a shared space that other members still use, ownership passes to a remaining member so the space keeps working for them.
Deleting your Konto account does not cancel any paid subscription. Subscriptions are billed by the app store you downloaded Konto from (the Apple App Store or Google Play), not by us. To stop being charged, you must also cancel your subscription directly in that store.
We may retain limited information where we are required to for legal obligations, to resolve disputes, or to enforce our agreements. De-identified records may remain in that history, and copies made before anonymization may persist in encrypted backups for a limited period before those backups automatically expire. Certain server logs are retained only for a short window.
You have control over your data in Konto:
Depending on where you live, you may have additional rights under local law — such as the right to access, correct, delete, or port your data, to object to or restrict certain processing, or to lodge a complaint with a data-protection authority. To exercise any right, contact us at delmdev@gmail.com.
Konto is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us at delmdev@gmail.com and we will remove it from their account as described in §11.
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of Konto after an update means you accept the revised policy.
Questions about this policy or your data? Reach us at:
DelmDev
delmdev@gmail.com
This policy is governed by the laws of Mexico.