Privacy policy
The short version. Everything you type into KKB starts and stays on your phone. Data reaches our servers only when you publish a group to share it, scan a receipt, or turn on backup. We do not sell your data, we do not run our own advertising on it, and you can delete your account and everything attached to it from Settings in the app.
1. Who we are
KKB is operated by Techmori, based in the Philippines (“Techmori”, “we”, “us”). Techmori is the personal information controller for the data described here under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. You can reach us at developer@techmori.com.
2. What stays on your phone
KKB is local-first. The following is stored in a database on your device and is not transmitted to us unless you take one of the actions in section 3:
- Your display name and avatar settings.
- Personal groups, the people you name in them, expenses, line items, splits, covers, payments and settlements.
- Contacts you create inside KKB (a name and, if you add it, a phone number). KKB does not read your phone’s address book.
- Individual debts and their payment history.
- Expense categories and your in-app preferences.
If you uninstall the app or lose the phone, this data is gone unless you backed it up (Premium) or published the group. We cannot recover it for you.
3. What goes to our servers, and why
| When | What we store | Legal basis |
|---|---|---|
| First use of any online feature | An anonymous account: a random user id, your display name and avatar settings, the time it was created and last used. | Performance of our contract with you (the Terms). |
| You add an email and password, or a phone number | The email or phone number, a hashed password (we never see the plain password), and verification status. | Contract. |
| You publish or join a shared group | The group, its members’ seats and display names, expenses, line items, splits, covers, payments and the invite code. Other members of that group can see all of it. | Contract. |
| You scan a receipt | The downscaled photo, a hash of it, the extracted result, which AI model read it, token counts and cost, and a timestamp. The photo is kept as an attachment on the expense and is visible to members of that group. If the photo is not a receipt it is deleted immediately. | Contract, and our legitimate interest in detecting abuse and improving accuracy. |
| You turn on backup (Premium) | One snapshot of your personal groups, contacts, debts and categories, readable only by your account. | Contract. |
| You buy Premium or a scan pack | Whether your account has Premium, a ledger of scan credits granted and spent, and the store transaction id that RevenueCat reports to us. We never receive your card or bank details. | Contract, and legal obligations around records of sales. |
| You watch a rewarded ad | A signed callback from Google AdMob confirming the view, with its transaction id, so we can grant the reward once. | Contract. |
| You enable notifications | A push token for your device, so we can tell you about activity in your shared groups. | Consent, which you can withdraw in your phone’s settings. |
| Always, while using online features | Standard technical logs: IP address, device type, operating system version, app version and request timestamps, kept briefly for security and debugging. | Legitimate interest in keeping the service secure and working. |
We do not collect precise location, your phone’s contact list, biometrics, or any special category of personal information. Please do not put sensitive personal information in group names, expense notes or receipt photos; other members of a shared group can see them.
4. How we use it
We use the data above to run the features you asked for, to keep balances in sync between members of a shared group, to extract line items from receipts, to grant and count scan credits and shared-group slots, to prevent abuse of free scans and invite codes, to answer support requests, and to understand aggregate usage of the app. We do not profile you, make automated decisions with legal effect about you, or use your content to train AI models.
5. Who else handles the data
We use a small number of service providers, each acting on our instructions as a personal information processor, or as an independent controller where noted:
- Supabase hosts our database, file storage, authentication and server functions. Our project is hosted in Singapore.
- Anthropic provides the AI model that reads receipt photos. Photos and extracted text are sent to Anthropic’s API in the United States for that purpose only. Under Anthropic’s commercial terms, API inputs and outputs are not used to train its models.
- RevenueCat links in-app purchases to your account and tells us what was bought. Google Play and the Apple App Store process the payment itself under their own privacy policies, as independent controllers.
- Google AdMob serves rewarded ads to free accounts that choose to watch one. AdMob may use a device advertising identifier and acts as an independent controller for that data under Google’s privacy policy. On iPhone, Apple’s App Tracking Transparency prompt appears before the first ad and you can decline; ads still work, they are just less relevant. Premium accounts are never shown ads.
- Expo (EAS) delivers push notifications and over-the-air app updates, which involves your push token and basic device information.
Some of these providers are outside the Philippines. Where personal information leaves the country we rely on contracts with the provider that require a level of protection consistent with the Data Privacy Act.
We may also disclose data when the law requires it, to protect the rights, safety or property of Techmori or others, or as part of a sale or transfer of the business, in which case this policy continues to apply.
6. How long we keep it
- Anonymous accounts that have not used the app for twelve months are deleted automatically, together with everything they own.
- Permanent accounts are kept until you delete them.
- Receipt photos are deleted with their expense, with the group, or with the account, whichever comes first. Photos that fail the receipt check are deleted at once.
- Scan logs (extracted results and usage counts, without the photo) are kept for up to twelve months for abuse prevention and accuracy work, then deleted or anonymised.
- Purchase and credit records are kept for as long as the law on commercial records requires, even after account deletion, in a form that no longer identifies you where possible.
- Technical logs are kept for up to 30 days.
7. Deleting your data
In the app, open Settings and choose Delete my account. This removes your account, receipt photos, scan credits, backup and every shared group you created, for everyone in them. Groups you joined but did not create continue without you: your seat becomes an unnamed placeholder so the other members’ records still add up, and nothing on it identifies you.
If you cannot open the app, email developer@techmori.com from the address on the account and we will delete it within 30 days. Unused scan credits and Premium are not refunded on deletion.
8. Your rights
Under the Data Privacy Act you have the right to be informed, to access the personal information we hold about you, to correct it, to object to processing, to have it erased or blocked, to data portability, to be indemnified for damages caused by a violation of the Act, and to lodge a complaint with the National Privacy Commission (privacy.gov.ph). Most of these you can exercise yourself in the app: view and edit everything on your profile, export your data (Premium), and delete your account. For anything else, email us. We will respond within 15 working days and may ask you to verify that you control the account.
9. Security
Data in transit is encrypted with TLS. Server data is protected with row-level access rules so that members can read and write only their own groups, and receipt photos are stored in private buckets reachable only through signed, short-lived links. Your session is kept in your phone’s secure storage. No system is perfectly secure, and you are responsible for keeping your device and account credentials safe. If we learn of a breach that is likely to cause you real risk, we will notify you and the National Privacy Commission as the Act requires.
10. Children
KKB is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, email us and we will delete it.
11. The website
This website is static. It sets no cookies, runs no analytics and collects nothing unless you email us.
12. Changes
If this policy changes in a way that matters, the date at the top changes, the app shows a notice, and continued use after the effective date means you accept the new version. Earlier versions are available on request.
13. Contact
Techmori, Philippines. Data protection contact: developer@techmori.com.