Privacy Policy

Kipi is a simple budget tracker at kipibudget.com and in the Kipi app for iPhone. It is run from California, USA ("Kipi", "we", "us"). This policy explains what we collect, why, and the choices you have. The short version: we only collect what Kipi needs to work, we never sell your data, and we never connect to your bank.

What we collect

• Account details. Your name and email address. If you sign up with email, your password is stored only in hashed form; we never see it. If you sign in with Google, we receive your name, email address and Google account ID from Google. If you sign in with Apple, we receive an Apple account ID, your email address (or a private relay address if you choose to hide yours) and, if you share it, your name.
• What you enter. The income and expenses you log (amounts, dates, descriptions, notes, categories), repeating entries, your bucket names, your targets and your income goal.
• Subscription details. If you subscribe to Kipi Premium, we receive whether your subscription or free trial is active, the plan, the store you bought it through, purchase and renewal dates, and transaction IDs. We never receive your card or bank details: payment is handled entirely by Apple in the app, or by our payment partner Paddle on the web.
• Technical information. Like most websites, our hosting providers record basic logs such as IP address, browser and device type, and the time of requests. We also use simple, privacy-friendly visit statistics (for example, how many people opened a page).
• Stored on your device. Kipi keeps your login session, your light/dark setting and a copy of your budget in your browser's or the app's storage so the app opens quickly. The copy is removed when you log out. We don't use advertising or tracking cookies. Because we don't track you across other websites or apps, we don't change anything when your browser sends a "Do Not Track" signal: there is no tracking to turn off.
• Using the iPhone app without an account. Until you create an account or sign in, everything you log is kept only on that iPhone, not on our servers, so we can't see it or restore it. The app also keeps the date you first opened it in the iPhone's Keychain, so the free trial isn't repeated; it can stay there after the app is deleted. If you subscribe before creating an account, RevenueCat links the purchase to a random ID for that iPhone. When you create an account or sign in, your budget and any purchase move into your account, the iPhone's copy is removed, and from then on this policy applies to them as to everything else.

Kipi does not ask for, and you should not enter, bank account numbers, card numbers or passwords for other services.

How we use it

• To run Kipi: keep your account, save your entries and show your budget on any device you sign in on.
• To provide Kipi Premium: check whether your subscription or free trial is active, and restore it on your other devices.
• To send account emails, such as confirming your email or resetting your password.
• To send two more account emails, each only once: a welcome email when you create your account, and a notice the day before your free trial ends that says what changes, including the price of Kipi Premium. That notice can include simple counts from your own account, such as how many entries you logged and on how many days. We don't send marketing emails without asking.
• To keep Kipi secure, prevent abuse and fix problems.
• To answer you when you contact us.

We don't sell your personal information, share it for advertising, or use your budget data to build profiles about you.

Legal bases (European Union and UK)

If you're in the European Union or the UK, we rely on these reasons to use your data:

• To provide the service you signed up for (contract): your account, your entries, your budget, Kipi Premium and account emails.
• Our legitimate interests: keeping Kipi secure, preventing abuse, fixing problems, simple visit statistics, and the welcome and trial-ending emails. You can object to these at any time by emailing support@kipibudget.com.
• Your consent: connecting Kipi to an AI app, which you give by choosing Allow and can take back by removing Kipi from that app.
• Legal obligations: keeping purchase records for tax and accounting.

Who we share it with

Only with the service providers that help us run Kipi, and only so they can do that work for us: our cloud hosting and database providers, our email delivery provider, Google or Apple if you choose to sign in with them and, if you subscribe, Apple (App Store purchases), Paddle (purchases on our website, where Paddle is the seller and handles payment and sales tax) and RevenueCat (which keeps track of your subscription status across the app and the web, linked to your Kipi account ID). They are not allowed to use your information for their own purposes. We may also disclose information if the law requires it, or to protect the safety and rights of our users or Kipi.

If you connect Kipi to an AI assistant (Claude by Anthropic, ChatGPT by OpenAI or Gemini by Google; see Support), it can see your entries, categories and monthly budget, and add entries, when it needs them to answer you. This only starts after you choose Allow and stops when you remove Kipi from that assistant. Kipi doesn't see your conversations with it, and Anthropic, OpenAI or Google handles what its assistant receives under its own privacy policy.

How long we keep it

We keep your information while your account is open. You can delete your account at any time in Settings → Delete account; this immediately removes your account and everything you entered. Copies in our providers' routine backups are removed within 90 days. Deleting your account doesn't cancel a Kipi Premium subscription; cancel it first (see our Terms of Use). Records of purchases (dates, plan, amounts and transaction IDs, never card details) are kept for as long as tax and accounting law requires, usually up to 7 years. Basic server logs are kept only for a short time by our hosting providers.

Your choices and rights

• You can view and change your entries, categories, targets and name in the app at any time.
• You can delete your account and all its data yourself in Settings → Delete account.
• You can ask us for a copy of your data or to correct it, or ask for help deleting your account, by emailing support@kipibudget.com.
• California residents have the right to know what personal information we collect and how we use it, to access, correct and delete it, and to not be treated differently for using these rights. We don't sell or share personal information as those terms are defined in California law.
• If you live in the European Union, the UK or another region with similar laws, you have comparable rights, including to object to processing and to complain to your local data protection authority.

We'll respond within 30 days and may need to confirm the request comes from the account's email address.

Security

Your data is sent over encrypted connections and stored with access controls so that only your account can read it. No service can promise perfect security, so please use a strong password and keep your devices secure.

Where your data is processed

Kipi is run from the United States, and our providers may process data in the United States and other countries.

Children

Kipi isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has signed up, contact us and we'll delete the account.

Changes

If we change this policy, we'll update the date above, and for important changes we'll let you know in the app or by email.

Contact

Questions or requests: support@kipibudget.com. See also our Terms of Use.