Privacy Policy

Summary

• Kurrflow is a personal cash-flow planner. It only knows what you type in.
• It does not connect to your bank today, and it does not see your bank passwords.
• We do not sell your data, and we do not use it for advertising or tracking. There is no advertising or analytics software in the app.
• Your data is stored in your account so it can sync between your devices. You can export it, and you can delete your account and all your data from inside the app.

1. Who we are

Kurrflow is published by Erick Andreazza, an individual ("we", "us"). You can reach us at kurrflow@icloud.com.

2. Information we collect

Information you give us

• Account information: your email address and, if you use Sign in with Apple or Sign in with Google, the identifier from that provider and the name and email it shares (with Apple you may choose a private relay address). If you create an account with email, we also store your password in hashed form (we never see it in readable form). We never receive your Apple or Google password.
• Financial information you enter: account names, colors, currencies, opening balances; transactions (type, amount, date, category, description); recurring items and the paid or received status of each; transfers between your accounts; categories and budgets; credit-card due dates and which account pays the card.
• Planning settings you enter: retirement-planning inputs such as date of birth, target retirement age, desired monthly income, expected return and inflation, and the accounts included.
• Preferences: theme, language, main currency, exchange-rate choices, and your notification choices.
• Messages to us: emails you send to support.

Information processed automatically

• Server logs. Our hosting providers (listed below) automatically process technical data needed to deliver and secure the service, such as your IP address, device or browser type, and the time of a request.
• Information stored only on your device. Your app-lock PIN (stored only as a hash), the identifier of a biometric credential if you enable it, reminder settings, and a local copy of your data so the app works offline. This stays on your device and is not sent to us. Reminders are scheduled by your device; we do not run a push-notification server.

What we do not collect. Bank or card credentials, bank account numbers, government IDs, precise location, contacts, photos, advertising identifiers, or analytics about how you use the app.

3. How we use information

• To provide the service: sign you in, store your data, sync it between your devices, and calculate balances and projections.
• To keep the service safe: prevent abuse, fix problems, and protect against fraud and unauthorized access.
• To answer your requests and support emails.
• To meet legal obligations and to protect our rights.

We do not use your information to advertise to you, to build profiles for advertising, or to make automated decisions about you with legal or similar effects.

4. Who receives information

We share information only with service providers that help us run the service, under their own terms, and only as needed:

• Supabase (database, authentication and storage). Receives all data you save in your account. Your data is stored in the United States (AWS us-east-2, Ohio).
• Vercel (hosting of the web app and these pages). Receives request data such as your IP address when you use the web app.
• Apple and Google (Sign in with Apple, Sign in with Google, and the app stores). Receive what is needed to sign you in, and the stores' own data about downloads.
• Exchange-rate sources (frankfurter.app and open.er-api.com). Receive a currency code and, as with any web request, your IP address. They do not receive your email or financial data.
• Web app only: the web version loads fonts from Google Fonts and a JavaScript library from Cloudflare's cdnjs, which receive your IP address and browser information. The mobile app includes these files and does not load them from those sites.

We may also disclose information if the law requires it, to protect rights, safety or security, or in a business transfer (such as a sale of the service), in which case this policy would continue to protect your information or you would be told of a change.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

5. Where information is processed

Our database is hosted in the United States (Ohio) and our website is served from the United States (Washington, D.C.) and a global content network. Our other providers may process information in the United States and other countries. If you use the service from outside the United States, your information is transferred to and processed there.

6. How long we keep information

We keep your information while your account is active. You can delete it at any time (see section 8). When you delete your account, your sign-in account, your accounts, transactions, settings and everything else linked to you are erased from our database right away. Our database plan does not include automated backups, so we do not keep backup copies of your data; once deleted, it cannot be recovered. You can export your data from the app at any time. Emails to support are kept as long as needed to help you. We do not keep any record after deletion, including the record that you accepted these documents.

7. Security

Information is encrypted in transit (HTTPS). Our database provider encrypts stored data, and each user's data is separated by access rules in the database so that one user cannot read another's. We keep secret keys out of the app. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission. If there is a breach that affects your information, we will notify you and the authorities as the law requires.

You can help by choosing a strong password or using Sign in with Apple or Google, and by using the app lock.

8. Your choices and rights

• Access and export: in the app, Settings (More) lets you export your data as JSON, CSV or an HTML report.
• Correction: you can edit your data in the app at any time.
• Delete your account and data: in the app, go to Settings → Danger zone → Delete my account and confirm (this is being moved to More → Account and profile → Danger zone in a coming update). The page https://kurrflow.com/delete-account also explains it, and you can email us from the address you use in the app if you cannot sign in. We erase the account within 7 days of that request.
• Notifications: you can turn them off in the app or in your device settings.

If you live in California or another US state with a privacy law: you may have the right to know what personal information we collect, to request a copy, to correct or delete it, and not to be discriminated against for using these rights. We do not sell or "share" personal information as those laws define them, so there is nothing to opt out of.

If you live in Brazil (LGPD) or the European Economic Area / UK (GDPR): you may have the right to confirm that we process your data, access it, correct it, delete it, port it, object to processing, withdraw consent, and complain to your data protection authority.

To use any of these rights, email kurrflow@icloud.com. We may need to confirm it is really you before acting.

9. Children

Kurrflow is for people who are at least 18 years old. We do not knowingly collect information from anyone younger. If you believe a child has given us information, contact us and we will delete it.

10. Changes to this policy

If we make material changes, we will tell you in the app and ask you to accept the new version before you keep using the service. The version and date at the top show which one applies.

11. Contact

kurrflow@icloud.com