Kipoo Privacy Policy

Effective date: 2025-12-28
Last updated: 2025-12-28

1) Who we are

“Kipoo” (“we”, “us”, “our”) provides a mobile budgeting app that lets you track accounts/accounts and log transactions primarily through an AI-driven chat experience.

Contact: kipoo@upvoy.com

If you have questions or requests about this Privacy Policy, contact us using the details above.

2) What data we collect

A. Account and budgeting data (you provide)

  • Accounts / accounts: name, type (e.g., cash/card/bank/savings), currency, starting balance, inclusion in totals.
  • Transactions: amounts, currency, date, category, merchant/source text you provide, notes, account/account assignment.
  • Budgets: category limits and related settings (if enabled).
  • Exports: CSV files generated at your request.

B. Chat inputs (you type)

The text you enter into the Kipoo chat to describe spending, income, or transfers.

C. Uploads (images/documents you upload)

Receipts, screenshots, or other documents you choose to upload for extraction.

D. Device and usage data (automatically collected)

  • App version, device type, operating system version, language/locale, and diagnostic logs.
  • High-level usage events (e.g., “draft created”, “transaction saved”, “export CSV tapped”).

E. Authentication data (if you sign in)

If you sign in with Apple, Google, or email, we receive identifiers needed to authenticate you (e.g., a provider ID or email). We do not receive your Apple ID password or Google password.

3) How we use your data

We use your data to:

  • Provide the core product features: accounts, transactions, balances, dashboards, budgets, and CSV export.
  • Power the AI chat experience: interpret your messages and generate draft transactions/transfers for your confirmation.
  • Improve reliability and prevent abuse (e.g., debugging crashes, preventing spam).
  • Communicate with you about important service updates (where applicable).

Important: Kipoo uses a confirm-before-save design: drafts created by the assistant are not saved as transactions until you confirm.

4) AI processing and uploads (“process then delete”)

A. Chat and AI assistance

Kipoo uses AI to interpret your messages and produce structured “draft” entries (expense, income, transfer). Depending on how Kipoo is implemented in your version of the app, AI processing may occur:

  • On-device, or
  • On our servers, or
  • Through trusted AI service providers acting as processors on our behalf.

We aim to minimize data shared for AI processing. For example, we may send only the message content and minimal context (e.g., account names and currencies) needed to interpret your request.

B. Uploads (receipts/documents)

When you upload an image or document:

  1. Kipoo processes it to extract structured fields (e.g., total amount, currency, merchant, date).
  2. We delete the upload immediately after extraction.
  3. We keep only the structured fields that you confirm/save (e.g., amount, date, merchant, category, account).

If you discard the draft, the extracted fields are not saved as transactions.

5) What we do not do

  • We do not sell your personal data.
  • We do not intentionally store your uploaded receipts/documents after extraction.
  • We do not auto-save transactions without your confirmation.

6) Legal bases for processing (EEA/UK users)

If you are in the EEA/UK, Kipoo processes personal data under these legal bases:

  • Contract: to provide the app features you request.
  • Legitimate interests: to maintain security, prevent fraud, and improve performance.
  • Consent: where required (e.g., certain marketing communications, optional analytics settings if you implement them).

7) Sharing your data

We share data only as needed to operate Kipoo, including:

A. Service providers (processors)

  • Cloud hosting and storage (if you enable sync)
  • Authentication providers (Apple, Google)
  • Analytics/crash reporting (configured to avoid collecting raw chat text when possible)
  • AI processing providers (for message/receipt interpretation)

Service providers are permitted to process data only to provide services to Kipoo and are bound by contractual confidentiality and security obligations.

B. Legal requirements

We may disclose data if required by law, regulation, legal process, or governmental request.

C. Business transfers

If Kipoo is involved in a merger, acquisition, restructuring, or asset sale, your data may be transferred as part of that transaction, subject to standard protections.

8) Data retention

We retain your data only as long as necessary for the purposes described:

  • Saved structured data (accounts, transactions, budgets): retained until you delete it or delete your account.
  • Uploads (images/documents): deleted immediately after extraction.
  • Drafts: retained temporarily until confirmed or discarded; may be stored locally on-device.
  • Analytics/diagnostics: retained for a limited period (e.g., 30–24 months) depending on configuration.

9) Your choices and controls

Depending on your version of Kipoo, you may be able to:

  • Edit or delete transactions and accounts.
  • Export your transactions as CSV.
  • Clear local app data and/or chat history (if stored).
  • Delete your account (which deletes or de-identifies associated data, subject to legal obligations).

10) Your rights (GDPR/EEA/UK) and (US privacy laws)

A. EEA/UK rights (GDPR)

You may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Restrict or object to certain processing
  • Data portability
  • Withdraw consent where processing is based on consent

You can make a request by contacting us at the email above.

B. US rights (e.g., California)

Depending on your state, you may have rights to:

  • Know what data we collect and how we use it
  • Request deletion
  • Request correction
  • Opt out of certain “sharing” (Kipoo does not sell data)
  • Non-discrimination for exercising privacy rights

We may need to verify your request before responding.

11) Security

We use administrative, technical, and physical safeguards designed to protect your data, such as:

  • Encryption in transit (TLS)
  • Access controls and least privilege
  • Secure token storage on device (for authentication)

No system is perfectly secure; you are responsible for keeping your device secure.

12) International transfers

If you use Kipoo from the EEA/UK and your data is processed outside your country, we use appropriate safeguards (e.g., standard contractual clauses) where required.

13) Children’s privacy

Kipoo is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided personal data, contact us to remove it.

14) Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or other appropriate means. The “Effective date” above indicates when this policy last changed.

15) Contact

Email: kipoo@upvoy.com

You can also contact us for data requests, questions, or complaints.

Appendix A — Suggested CSV export fields (reference)

  • transaction_id
  • type (expense/income/transfer)
  • amount
  • currency
  • date
  • merchant/source
  • category
  • account/account
  • notes
  • created_at
  • updated_at