Privacy policy

What data we store

Your account

Your email address and, if you sign in with Google, your name and profile picture. If you create a password, we store it encrypted; we never see it.

What you add

Expenses, income, recurring expenses, categories, payment methods, groups and settlements. They’re yours and we only use them to show them to you.

Your profile and your friends

Your username, your friends and friend requests. When you share an expense or a group, the people included can see that expense, your name and the balance between you. If you share an event link, anyone who has it can view the event and add expenses, even without an account.

Notifications

If you turn on notifications, we store the identifier your browser gives us so we can send you reminders. You can turn them off at any time.

Technical data

IP address, device and browser type, and error logs. We use them to keep the app secure and fix problems. We also keep a log of your account’s sensitive actions (connecting or disconnecting an AI assistant, changing your email or password, downloading your data, deleting your account), with the IP stored as a code it can’t be recovered from.

What we use it for

• Giving you access to your account and showing you your expenses.
• Converting amounts between currencies at the day’s exchange rate.
• Suggesting a category for each new expense.
• Sending you the notifications you turned on, such as bill reminders or requests.
• Detecting errors, preventing abuse and improving the app.

We don’t sell or rent your data, we don’t use it for advertising and we don’t build profiles for third parties.

Who we share it with

We use these providers to run Kenzio. Each one only accesses what it needs:

• SupabaseDatabase and sign-in, in the United States.
• VercelHosting and aggregated, cookie-free visit statistics, in the United States.
• SentryTechnical error logging, with no data that identifies you.
• Vercel AI Gateway and BasetenAI category suggestions. They receive the description of the expense you’re adding, your categories and descriptions of previous expenses; never your name or email. Processed in the United States.
• GoogleSign-in, if you choose to sign in with Google. Google also provides the logos of services like Netflix or Spotify: we only send it the service’s domain.
• Your browserApple, Google or Mozilla deliver push notifications.

Exchange rates come from DolarApi and ArgentinaDatos; we don’t send those services any of your data. Providers that process data outside Argentina (in the United States) do so as data processors, only to provide their service to us and with equivalent security measures, as required by Law No. 25,326.

AI assistants

You can connect Kenzio to Claude, Anthropic’s AI assistant. This only happens if you authorize it: from then on, the assistant can read, add, edit and delete data in your account, and what you share with it is subject to Anthropic’s privacy policy. You can revoke access at any time from Settings → AI integrations.

Cookies

We only use necessary cookies: your session cookie, a few preferences such as language or theme and, if you join an event through a link without an account, one that remembers who you are in that event. We don’t use advertising or tracking cookies.

How long we keep it

For as long as you have your account. When you delete it, we delete your data right away. Expenses you shared with other people stay in their accounts, because they’re also part of their history, but without your account: your share shows as “Deleted account”, and in events you stay as a member without an account, under the name you had in the event. The log of sensitive actions is kept for one year.

Your rights

You can download all your data and delete your account yourself in the app, under Settings → Account. You can also ask us to access, correct, export or delete your data by writing tokenzio.app@gmail.com. We respond within the time limits set by Argentina’s Personal Data Protection Law No. 25,326.

The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, paragraph 3 of Law No. 25,326. The Agency for Access to Public Information, as the supervisory authority of Law No. 25,326, has the power to handle complaints and claims filed by anyone whose rights are affected by non-compliance with the personal data protection rules in force.

Children

Kenzio is not intended for children under 13 and we don’t knowingly collect their data. If you believe a child has given us their data, write to us and we’ll delete it.

Security

Your data is encrypted in transit and each account can only read its own records and what other people share with it. Account numbers and payment links of your bills are stored encrypted in the database, with a key kept separately; invite links and integration keys only as a code they can’t be recovered from. Your account’s sensitive actions are logged. No system is foolproof: if we detect a problem that affects you, we’ll let you know.

Changes

If we change this policy, we update the date above. If the change is significant, we’ll let you know by email or in the app.

This is a translation of the Spanish version. If they differ, the Spanish version prevails.