Your data is for you, not for us.
Effective July 8, 2026, updated October 29, 2026 · Versione italiana
Everything you enter — expenses, budgets, categories, plans — stays in a local database on your device, protected by the system's encryption. Kei works offline: no account, no bank linking, no server of ours. Something leaves your phone only if you choose it: the backup to your own cloud, anonymous usage statistics and, in the test version, the reports you send us.
Anonymous statistics (optional)
They are off until you turn them on: on first launch with the "Share anonymous statistics" checkbox, or in Settings › Privacy. You can turn them off at any time, and from then on nothing is sent.
- What is sent: the actions you take, described with our own details (for example "added an installment plan of 12 installments"), the screen you open, app launches, the outcome of backups and errors, with their type and the place in the code where they happen. Along with them: app version, phone brand, model and system, screen size, language and time zone.
- What is never sent: what you type. No amounts, names, notes or category names. We strip the message from errors, because it could contain them.
- To whom: PostHog, which stores them on servers in the European Union. They are tied to a random identifier created on the phone, not to your name or to the device's advertising identifier. No profile, no location derived from your IP address, which is not stored, no screen recording.
- Why and for how long: to understand which features are useful and to fix errors, based on your consent. They are kept for at most one year. "Reset anonymous ID", in Settings › Privacy, unlinks past statistics from future ones.
Reports (test version)
In the version for testers you can send us a report from the test menu or from the error screen. It goes out as an email from your own mail account, with a file stating the app version and build, phone model and system, language, the error if there is one and, if statistics are on, the anonymous identifier. Your data (expenses, plans, categories and periods) is attached only if you tick "Attach my data", and travels as readable as the rest of the email. We use the report only to understand and fix the problem, and delete it once it is no longer needed.
Backup (optional)
On iOS, the app can save a backup in the app's iCloud space: it lives in your Apple account, encrypted by Apple. On Android it saves it to Google Drive, in the folder reserved for the app: it lives in your Google account, Kei asks permission for that folder only, and no other app can read it. In both cases we cannot access it.
Retention and deletion
Your data stays as long as you keep the app: deleting the app deletes the local data; the backup can be deleted from Settings or from your iCloud or Google Drive storage. Anonymous statistics are deleted automatically after one year. For any question or request about your data, write to us.
App stores
If you install Kei from the App Store or Google Play, Apple or Google may collect installation and diagnostics data under their own privacy policies.
Who we are
Kei is developed by Matteo Granziera — granziera.matteo@gmail.com.
Changes
We will update this page (and the date above) before any change.