Privacy Policy

Effective Date: June 26, 2026

Kibo Finance ("we", "us", or "our") operates the Expense Tracker & Bill Splitter mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App. By using the App, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Financial Data (Stored Locally by Default)

All financial data you enter into the App — including transactions, accounts, balances, budgets, categories, goals, debts, and shared‑expense ("split") records — is stored on your device in a local database. By default this data never leaves your device. It only leaves your device if you enable the optional cross‑device sync feature, and only in encrypted form (see Section 1.3).

1.2 Google Account (Optional)

The App works without any account. If you choose to link a Google account, we collect your email address and name from your Google profile. We use this solely to identify you, personalize your profile, enable the optional cross‑device sync, and let you restore your Premium access if you switch devices or reinstall the App. You can unlink your Google account at any time while keeping your data. We never receive or store your Google password.

1.3 Cross‑Device Sync (Optional, End‑to‑End Encrypted)

If you enable cross‑device sync, an encrypted snapshot of your data is uploaded to our secure cloud storage (Google Firebase Storage), associated with your account identifier.

The data is encrypted on your device before it is uploaded, using a key derived from a passphrase that only you control (zero‑knowledge). As a result, neither we nor the storage provider can read the contents of your snapshot. You can disable sync or delete your cloud snapshot at any time. Local backups you create stay on your device unless you choose to share or move the file yourself.

1.4 Premium Subscription & Purchases

The App offers an optional Premium subscription processed through Google Play Billing. Your payment details are handled entirely by Google — we do not receive or store your payment information. To let you restore Premium across your devices, we store a minimal entitlement record (your account identifier and subscription status) in Google Firebase (Firestore). This record does not contain your financial data.

1.5 Advertising (Free Version)

The free version of the App displays ads through Google AdMob. To serve and measure ads, AdMob may process your device's advertising identifier and related technical data. In the European Economic Area, the United Kingdom, and other applicable regions, we request your consent (via Google's User Messaging Platform) before loading personalized ads. The Premium version does not display ads.

1.6 Crash Reports & Diagnostics (Firebase Crashlytics)

We use Firebase Crashlytics to collect crash reports and diagnostic data, which helps us identify and fix technical issues. This includes:

• Device model and operating system version
• App version
• Crash stack traces and error logs
• General device state at the time of a crash

Crashlytics does not collect the financial data or other content you enter into the App.

1.7 Biometric Authentication

The App supports fingerprint and face unlock for app access. Biometric data is processed entirely by your device's operating system. We never access, collect, or store biometric data. The App only receives a success or failure signal from the operating system.

1.8 Camera and Photos

The App may request access to your camera or photo gallery for two purposes:

• Receipt photos you choose to attach to transactions, which are stored locally on your device (and included in your encrypted snapshot only if you enable sync).
• QR code scanning to pair the App with the desktop version. The camera is used only on your device for this; no image is stored or transmitted.

1.9 Local Notifications

The App may schedule local notifications (e.g., daily logging reminders, monthly report availability). These are handled entirely by your device. No push‑notification server is used, and no notification content is sent externally.

1.10 Currency Exchange Rates

The currency converter fetches exchange rates from external public sources (e.g., Frankfurter / European Central Bank). These requests contain only the currency codes being queried — no personal or financial information about you.

2. Information We Do NOT Collect

• We do not collect location data.
• We do not read your device's contact list (friends for split expenses are created manually within the App).
• We do not use third‑party analytics or behavioral tracking SDKs (beyond Firebase Crashlytics for stability and Google AdMob for ads, as described above).
• We do not sell or rent your personal information to third parties.
• We do not track your behavior across other apps or websites.

3. Data Storage and Security

• Your financial data is stored locally on your device by default.
• Optional cloud sync snapshots are encrypted end‑to‑end before they leave your device.
• All network communication uses encrypted connections (HTTPS/TLS).
• The App offers an optional biometric lock (fingerprint/face) to control access.
• Android's automatic backup is disabled for the App, so your data is never exported through that channel.

Because your data is primarily on your device, its security also depends on your device. We recommend keeping your operating system updated, using a screen lock, and enabling the App's biometric lock.

4. Data Deletion

You have full control over your data:

• Delete individual records from within the App.
• Delete all App data: in the App, go to Profile → Delete data (this permanently removes your local data). You can also use your device's Settings → Apps → Expense Tracker & Bill Splitter → Clear Data.
• Unlink / sign out of your Google account within the App; your local data is preserved, and your associated cloud snapshot can be removed.
• Delete your cloud snapshot: disable sync and delete your cloud snapshot from within the App; the cloud copy stored with us is removed when you delete it or your account.
• Uninstall the App: removes all locally stored data.
• Revoke Google access at any time via your Google Account permissions.

For any deletion request you cannot complete yourself, contact us at the email below.

5. Children's Privacy

The App is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information through the App, please contact us so we can take appropriate action.

6. Third‑Party Services

The App integrates with the following third‑party services, each governed by its own privacy policy:

Service	Purpose	Data Involved
Google AdMob	Advertising (free version)	Advertising identifier, technical data
Firebase Crashlytics	Crash reporting & diagnostics	Crash/device info
Firebase Authentication	Account sign‑in	Account identifier, email
Firebase Storage	Encrypted cross‑device sync (optional)	Encrypted snapshot blob
Firebase Firestore	Premium entitlement (cross‑device restore)	Account identifier, subscription status
Firebase App Check	Abuse/fraud protection	Device integrity signals
Google Sign‑In	Authentication for sync/Premium restore	Google account token, email/name
Google Play Billing	Premium subscription/purchases	Handled by Google; we do not receive payment data
Currency rates (Frankfurter / ECB)	Exchange rates	Currency codes only

We encourage you to review:

• Google Privacy Policy
• Firebase Privacy
• How Google uses information from sites/apps that use its services

7. International Users

The App is available internationally, with a focus on Portugal, Cape Verde, PALOP countries, and Brazil. The third‑party providers above (Google) may process data on servers located in other countries, with appropriate safeguards. Where your encrypted snapshot is transmitted, it remains encrypted in transit and at rest. Processing is carried out in accordance with applicable data‑protection laws, including the EU General Data Protection Regulation (GDPR) and Brazil's Lei Geral de Proteção de Dados (LGPD).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we process.
• Request deletion of your data (most of which you can delete directly in the App).
• Withdraw consent for optional features (Google Sign‑In, sync, camera) and for personalized advertising.
• Lodge a complaint with your local data protection authority.

Because the majority of your data is stored locally and never reaches us, you exercise most of these rights directly on your device.

9. Advertising & Consent

In regions where consent is required (EEA/UK and others), the App presents a consent request (via Google's User Messaging Platform) before loading personalized ads. You can change your advertising choices through that flow, and you can reset or limit your advertising identifier in your device settings. Upgrading to Premium removes ads entirely.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App and/or on our app store listing, and the "Effective Date" above will be updated. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: