How Kintribu handles your data
What is kept
Your email address, the name you chose, and everything you record: the amount, merchant, date and category of each expense, any recurring bills, and the photograph of any receipt you scan. If you share a household with somebody, the split you agreed, the settle-up history and the payments between you are kept too, and both of you can see all of it.
Expenses you file in your personal ledger are yours alone. The other person in your household cannot read them, and the app does not tell them those entries exist.
Once a day, and only if something happened, the person who runs Kintribu gets an email listing new accounts and anything that reached one of the app's limits. New accounts are listed by email address, so if you sign up, your address is in that message. It goes to one fixed address and nowhere else, and none of your expenses are ever in it.
Where it lives
In a PostgreSQL database, with receipt images in Cloudflare R2 object storage. Nothing is sold, shared with advertisers, or used to train anything.
What leaves, and where
When you scan a receipt, the photograph is sent to Anthropic's API to be read, along with your household's category names and today's date, so it can suggest a category and read the receipt's date correctly. Your email address is sent to Resend, the service that delivers every email this app sends: invites, password resets, signup links, the notice when an account is deleted, the reply when someone tries to sign up with an address that already has one, and the daily summary sent to the person who runs Kintribu. An invite also carries the inviter's name and the household's name, so it can be addressed. Nothing else leaves: not your expenses, not your receipts beyond the one being read.
What is thrown away, and when
Password reset links, invitations, and signup links are deleted 30 days after they were created, once they have been used, cancelled or expired. The app also keeps a count of the emails it has sent, so it does not send more in a day than it should. Those rows are deleted after 30 days too, and they record only the kind of message and the time it went, never an address. Your expenses are kept until you delete them or delete your account.
Taking it with you, and erasing it
Both live behind the gear on the account screen. Download my data gives you a spreadsheet of everything the app holds that you are allowed to read. Erase my account deletes the household and everything in it, receipts included, immediately, down to the signup link that created the account, if there was one. The one thing that stays is the count of emails already sent, and the row that pointed at your household is unlinked from it as part of the erasure, leaving a kind of message and a time. It is kept because the sending limits would otherwise reset every time an account was deleted, and there is nothing in it that says who you were.
One honest limit: if your household has two people in it, the app will not let you erase your account, because your shared expenses are half of somebody else's records and their settled months are built on them. There is no way to leave a shared household yet. Until there is, write to the address below and it will be handled by hand.
Asking about any of this
Write to info@epicmindstudiofx.com.