Kupio Privacy Policy
Effective date: 3 August 2026
Last updated: 3 August 2026
IN SHORT
Kupio keeps your financial records on your device. We don't create accounts, we never ask for your name, phone number or email, and we cannot see your spending.
Only what is strictly required for two features leaves your phone: reading a receipt from a photo, and answers from the AI advisor. That data is not linked to your identity.
1. WHO PROCESSES THE DATA
Kupio is developed and operated by an individual developer, Myroslav Koval, acting as the data controller.
Contact: mkoval2010@gmail.com
2. DATA THAT NEVER LEAVES YOUR DEVICE
The following is stored in your phone's memory and never leaves it without an explicit action from you:
— amounts, dates, categories, notes and members of transactions;
— financial goals and savings;
— custom ventures you create;
— settings: currency, language, appearance;
— receipt photos, which are not retained by the app after recognition.
We have no access to this data. If you delete the app, it disappears with it unless you made a backup beforehand.
3. DATA SENT TO OUR SERVER
3.1. Receipt recognition
When you photograph a receipt, the image is sent to our server (Cloudflare Workers) and on to Anthropic (Claude API), which extracts the total, merchant, date and category.
— the image is processed at the moment of the request and is not stored by us, nor, per Anthropic's terms, used to train models;
— only a text result is returned;
— the feature runs solely on your command.
3.2. AI advisor
When you ask the advisor a question, an anonymised summary is sent: totals per category for a period, income, expenses and goals. No names, no individual purchase descriptions, nothing about you.
The summary is then passed to Anthropic (Claude API) to produce a reply. Neither the summary nor the reply is stored by us.
3.3. Anonymous device identifier
On first launch the app generates a random identifier (UUID). It exists only to count requests against a monthly fair-use limit, so that the service is not abused.
The identifier:
— contains nothing about you, your phone or your location;
— is not linked to your Apple ID, phone number or email;
— is stored in Cloudflare KV as counters and expires automatically;
— is lost when you delete the app, and the link cannot be restored.
4. MICROPHONE AND SPEECH RECOGNITION
Voice entry uses the iOS speech recognition system. Audio is processed by Apple in line with the Apple Privacy Policy.
Kupio receives only the resulting text, does not record or transmit audio files, and does not store transcripts. Parsing the phrase into an amount and category happens inside the app, on your device.
5. CAMERA AND PHOTO ACCESS
The camera is used only to photograph a receipt; gallery access only to pick a receipt image. The app does not browse your photo library and has no access to it outside the moment of selection.
6. BANK STATEMENT IMPORT
Statement files (CSV) are processed entirely on your device. Their contents are not transmitted anywhere, neither to us nor to third parties.
7. BACKUPS
A backup is created on your command and saved wherever you choose (Files, iCloud Drive, email, messenger). We do not access these files and keep no copies.
Please note: the backup file contains all your transactions in plain form. Treat it as carefully as a bank statement.
8. PAYMENTS
This version of Kupio is free and contains no purchases. We do not process payments and hold no payment data.
9. ANALYTICS AND ADVERTISING
The app contains no advertising, trackers, pixels or third-party analytics. We collect no usage statistics and build no profile of you.
10. WHO RECEIVES DATA
— Anthropic (Claude API) receives a receipt image or an anonymised spending summary, in order to perform recognition and produce advice.
— Cloudflare receives technical requests and usage counters, as the hosting provider for our server.
We do not sell and do not share data with anyone else.
11. RETENTION PERIODS
— data on your device: until you delete it;
— server usage counters: up to 70 days, then deleted automatically;
— receipt images and AI requests: not stored.
12. YOUR RIGHTS
Because we hold no personal data and cannot identify you, you are fully in control of your information:
— view: everything is visible in the app;
— export: Profile, then Backup, then JSON or CSV;
— delete: Profile, then Start over, or delete the app.
If you are in the EU, you have GDPR rights (access, rectification, erasure, restriction and portability). Actions inside the app are sufficient to exercise them; contact us with any questions.
13. CHILDREN
The app is not intended for children under 13 and does not knowingly collect data about them.
14. CHANGES
If we make material changes we will update the date at the top and notify you inside the app.
15. CONTACT
Privacy questions: mkoval2010@gmail.com