Last updated: 7 September 2026
Kivo is a personal expense tracker. You upload a bank or card statement, and the app sorts your transactions into categories and shows you where your money goes.
This policy explains what information Kivo collects, why, and what control you have over it. It describes what the app actually does.
Kivo is developed and operated by an individual developer. Throughout this policy, "we", "us" and "our" refer to the developer of Kivo, and "you" refers to the person using the app.
If you have any question about this policy or your data, contact us at vasusharma25011@gmail.com.
We collect only what the app needs in order to work:
We do not collect your phone number, your postal address, your location, or your contacts.
When you upload a bank or card statement, Kivo reads the transactions it contains — the date, description, amount, and whether money came in or went out. This information is stored in your account so the app can show your spending, categorise it, and highlight unusual activity.
We do not connect to your bank. We never ask for, receive, or store your bank login details, card numbers, PINs, or passwords. The app only reads the statement file you choose to upload.
Statement data is stored on our server, linked to your account and visible only to you. When you delete an imported statement, its transactions are permanently deleted with it.
When you export your data, long digit sequences such as account or card numbers are masked so that only the last four digits remain.
You can create an account and sign in using Google or Apple instead of a password.
When you do, we receive your email address and, if you choose to share it, your name. We use these only to create and identify your account. We do not receive your Google or Apple password, and we cannot access anything else in those accounts.
If you use Sign in with Apple and choose to hide your email address, Apple gives us a private relay address instead. That relay address is what your account is identified by, and it works normally for our purposes.
Google and Apple handle the sign-in itself, and their own privacy policies apply to that step:
If you turn on biometric unlock, your device's Face ID, Touch ID, or fingerprint sensor is used to unlock your saved sign-in session on that device.
Your biometric data never leaves your device and is never sent to us. We do not receive, see, or store any fingerprint or face data. The app only asks your device to confirm that the check succeeded.
Some features work entirely on your phone, and the data involved is never sent to us:
Kivo asks for camera permission for one purpose only: photographing a receipt so its text can be read on your device. We do not access your photo library, and we do not upload photographs. You can decline camera access and continue to use every other part of the app.
If you allow notifications, Kivo can show you reminders about your spending and budgets. These notifications are created and scheduled on your own device. We do not operate a push notification server, and we do not send your device information to a third party in order to deliver them.
You can turn notifications off at any time in your device settings.
Kivo contains no advertising, no analytics, and no third-party tracking. We do not build advertising profiles, and we do not sell or share your information with data brokers or advertisers.
Passwords are never stored in a readable form. They are hashed using PBKDF2 with 600,000 iterations and a unique salt for each account.
Sign-in sessions are stored only as a hash, so even a copy of our database cannot be used to sign in as you. Sessions expire automatically.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do take the measures described above to protect your information.
Your account and transaction data is stored on servers operated by our hosting provider on our behalf. That provider stores the data for us and does not use it for its own purposes.
We do not sell your personal information. We do not share it with advertisers, data brokers, or marketing companies. We would disclose information only if required to do so by law.
We keep your account and transaction data for as long as your account exists, because the app needs it in order to show you your spending history.
When you delete an imported statement, its transactions are deleted immediately. When you delete your account, your data is deleted with it.
If you would rather ask us to do any of this for you, email vasusharma25011@gmail.com.
Kivo is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
If this policy changes, we will update this page and change the "Last updated" date at the top. Significant changes may also be announced inside the app.
If you have any questions about this Privacy Policy, email us at vasusharma25011@gmail.com.