KipuApp
KipuApp
Privacy policy
In effect since 29 July 2026.
KipuApp stores what you log: amounts, categories, merchants, and little else. This page says exactly what is stored, where, what for, who else sees it, and how to make it go away.
Who processes your data
The data controller is TODO legal name and address, which owns KipuApp. For anything to do with this policy: soporte@getkipu.app.
What KipuApp stores
- Your account. The identifier Apple hands the app when you sign in with CloudKit. KipuApp never sees your password or your Apple Account, and never asks for your name or phone number.
- Your transactions. Amount, currency, date, category, merchant, tags and any note you write.
- Your setup. The categories, tags and budgets you create.
- Technical data. The ordinary server logs — timestamp, IP address, error returned — plus crash and sampled performance reports from the app. They keep the service running and help track down faults; the «Error reports» section says what they carry.
KipuApp does not connect to your bank, does not read your bank transactions, and never asks for credentials from any financial institution. Everything in it was typed by you.
How it gets there
You type transactions in the app, or they arrive from a Shortcuts automation using the Registrar gasto action, and they travel encrypted to KipuApp's servers. The account identifier comes from Apple when you sign in. There is no other way in.
What it is used for
- Showing you your transactions, your category totals and your budgets, and syncing them across your devices.
- Suggesting a category when you create a transaction without choosing one (see the next section).
- Keeping the service up: backups, security and fault-finding.
It is not used for advertising, not sold, not passed to data brokers, and not matched against third-party profiles.
Who it is shared with
No one beyond the providers KipuApp needs to run. All of them process the data on KipuApp's behalf, under a data processing agreement, and the same protection described in this policy extends to them.
Category suggestion
When you create a transaction without choosing a category, KipuApp sends a language model provider — currently TODO provider: DeepSeek by default — the description and merchant you typed, along with the names of your own categories, so it can suggest one of them. The amount, the date, your account identifier and your notes are not sent. The provider returns a category name, and that is the end of the exchange.
If you pick the category yourself, nothing is sent. TODO if you would rather turn the suggestion off entirely, write to us and we'll do it on your account.
Error reports
When something fails, the report goes to Sentry so it can be fixed. This happens on both sides:
- In the app. A Sentry component collects crashes and a sample of performance data — one session in five — along with the iPhone model, the iOS version and the requests the app made: their address and the status the server returned, not what they carried.
- On the server. The report of the failed request, including your user identifier and your IP address.
The content of your transactions is not sent, unless it is the very data that caused the failure.
Hosting and email
The data lives in KipuApp's database, hosted at TODO provider and country. Emails KipuApp sends you go out through TODO email provider.
How long it is kept
Your transactions are kept for as long as your account is open: they are your history, and deleting them by age would make the app useless. Technical server logs are kept for TODO period. When you ask for your account to be deleted, all of the above is erased within 30 days at most, including any backups it appears in.
Deleting your account and your data
Write to soporte@getkipu.app from the address you use with KipuApp and ask for deletion. It is confirmed by email and carried out within 30 days at most. You don't have to say why.
TODO once the app offers deletion from Settings, this section has to say so and describe where it is.
Your rights
You can ask for access to your data, its correction, its deletion, its portability in a file you can take with you, restriction of processing, and you can object to it. You'll get an answer within a month. Write to soporte@getkipu.app.
If you think KipuApp has got it wrong, you can complain to the Spanish Data Protection Agency (aepd.es) or to the supervisory authority in your country.
Legal basis
Processing your transactions and your account rests on performance of the contract: without them there is no app to use. Sending error reports and maintaining security rest on the legitimate interest of keeping the service running. The analytics cookies on this website rest solely on your consent, and are detailed below.
Children
KipuApp is not aimed at children under 14 and does not knowingly collect their data.
Cookies on this website
getkipu.app loads nothing from third parties: the typeface and the images are served from this same domain. The only thing that can be stored are the analytics cookies, and only if you accept them in the notice.
What gets set if you accept
| Cookie | What for | Lifetime | Set by |
|---|---|---|---|
_ga | Telling your browser apart from the rest so one visit is not counted twice. | 2 years | |
_ga_<id> | Keeping the measurement session state. | 2 years |
They are first-party cookies, set by this domain, and processed by Google Analytics 4. They serve one purpose: knowing how many people come in and which pages they read, so we can decide what to improve. They are not used for advertising or profiling — ad measurement and personalisation are explicitly denied in the configuration.
If you don't accept
No cookie is set and nothing is loaded from Google. The site works the same. Your answer is kept in the browser's local storage, which is not a cookie and never travels to a server.
Legal basis and withdrawal
The legal basis is your consent, and nothing else: without it, nothing is stored. You can withdraw it whenever you like from the Cookies link in the footer of any page, with the same effort it took to give it. Withdrawing deletes the cookies already set and stops the measurement. After 24 months you'll be asked again.
Google and international transfers
KipuApp is the controller of this measurement; Google acts as processor. The data — truncated IP address, pages viewed, country, device type and browser — may be processed on servers outside the European Economic Area, including in the United States, under the EU-US Data Privacy Framework and Google's standard contractual clauses. Google retains the property's data for TODO GA4 retention period, which is configured in the tool itself.
Blocking them yourself
Beyond the notice, you can delete and block cookies from your browser settings, or install Google's Analytics opt-out add-on. If you clear local storage, the notice will ask you again.
Changes
If this policy changes, the date at the top changes with it, and if the change affects what is done with your data you'll be told inside the app before it takes effect.