Privacy Policy

1. Summary

• Your ledger data stays with you. Transactions, amounts, notes, accounts, categories, budgets and everything else you enter are stored on your device and, if you turn it on, in your own private iCloud storage. NetXSoft cannot see or access this data.
• No account, no bank linking, no advertising, no tracking.
• We collect limited, anonymous usage statistics through Google Analytics for Firebase to understand which features are used. These statistics never include amounts, notes, names of your ledgers, accounts, categories or tags, or addresses.
• The App makes only a few kinds of network requests: downloading public exchange rates, sending anonymous usage statistics, verifying in-app purchases, and Apple services you choose to use (such as iCloud and Maps).

2. Information Stored on Your Device

Everything you enter into Kiroku is stored locally on your device, including:

• ledgers, transactions, amounts, dates, notes and tags;
• accounts, account groups, categories, budgets, recurring rules and transaction templates;
• exchange rates you enter or download;
• custom icons you create from your own images;
• places you attach to transactions (see Section 4);
• your App settings and preferences.

Some of this data is placed in a storage area shared only between the App and its widgets on the same device, so widgets can display up-to-date summaries.

The App also generates a random identifier on first launch and keeps it on your device. It is used only to coordinate the automatic creation of recurring transactions between your own devices so that the same entry is not created twice. It is not linked to your identity and is not sent to us.

We do not have access to any of this information. If you delete the App without an export or iCloud copy, the data is permanently deleted and we cannot recover it.

3. iCloud Sync (Optional)

If you turn on iCloud sync, your Kiroku data is stored in the private CloudKit database of your own Apple Account so it can be synced across your devices. This data is stored and protected by Apple under Apple's Privacy Policy. NetXSoft has no access to your private iCloud data.

You can turn iCloud sync off at any time in the App's settings. You can delete Kiroku's iCloud data from your device in Settings → [your name] → iCloud → Manage Account Storage.

4. Location (Optional)

Kiroku can attach a place to a transaction and use nearby places to help you fill in entries faster. This feature is off until you use it, and iOS asks for your permission first. The App only requests location access while you are using it, and it never tracks your location in the background.

• When you use a location feature, your device determines its approximate position (to about 100 meters).
• To turn coordinates into a readable place name, or to let you search for an address, the App uses Apple's Core Location and MapKit services. Apple receives the relevant coordinates or search text to provide these results, under Apple's Privacy Policy.
• The place name and coordinates are saved with the transaction on your device and, if iCloud sync is on, in your private iCloud storage.
• Location data is never sent to NetXSoft or included in usage statistics.

You can change or revoke location permission at any time in Settings → Privacy & Security → Location Services → Kiroku.

5. Face ID / Touch ID

If you turn on App Lock, Kiroku asks iOS to verify your identity with Face ID, Touch ID or your device passcode. Authentication happens entirely within iOS. The App only receives a success or failure result and never has access to your biometric data.

6. Exchange Rates

When you download exchange rates, the App requests a public file of currency rates from a server hosted by Supabase. This request contains no information about you or your records. As with any internet request, the hosting provider may receive standard technical information such as your IP address and the time of the request, which it may keep in routine server logs.

You can enter exchange rates manually instead if you prefer not to make this request.

7. Anonymous Usage Statistics

To understand how the App is used and to improve it, we use Google Analytics for Firebase, provided by Google LLC. We have configured it to limit data collection:

• the App uses a version of the Firebase SDK that does not access your device's advertising identifier (IDFA);
• advertising personalization signals are turned off;
• automatic screen tracking is turned off; we only send events we have defined ourselves.

Events we send describe what kind of action happened, never the content of your records. For example:

• completing onboarding;
• creating a transaction, with the entry method (editor, template, quick action or widget, or Shortcuts/Siri) and transaction type (expense, income or transfer);
• viewing the purchase screen and the result of a purchase or restore (for example, success, cancelled or failed);
• exporting or importing data, with the date range or file format used;
• changing a setting such as iCloud sync, budgets, App Lock, language, theme or haptics;
• opening a screen of the App.

We never send amounts, balances, notes, the names of your ledgers, accounts, categories or tags, places or addresses, or any other content you enter.

Firebase also automatically collects certain technical information, such as an app-instance identifier, device model, operating system version, App version, language, and approximate location (country or region) derived from your IP address. Google processes this information under the Google Privacy Policy and Firebase privacy information. Statistics are not linked to your identity and are not used for advertising.

The App does not currently offer an in-app switch to turn off usage statistics.

8. In-App Purchases

Kiroku offers a one-time in-app purchase ("Kiroku Pro"). Payments are processed entirely by Apple through the App Store. We never receive your name, email address or payment card details.

To verify your purchase and restore it on your other devices, the App uses RevenueCat, provided by RevenueCat, Inc. RevenueCat receives an anonymous, randomly generated user identifier together with App Store transaction and receipt information (such as the product purchased, purchase date and country or region of the storefront), plus basic device and App information. See RevenueCat's Privacy Policy.

9. Import, Export, Widgets, Shortcuts and Siri

• Import and export: files you import are read on your device. Files you export are created on your device and go only where you choose to send or save them (for example, the Files app, AirDrop or email). Once you share an exported file, it is handled by the service or person you shared it with.
• Widgets and Control Center: widgets show a summary prepared locally on your device.
• Shortcuts and Siri: when you record a transaction through Shortcuts or Siri, the request is handled by Apple's system and passed to the App on your device. Apple's handling of Siri requests is governed by Apple's Privacy Policy.

10. When You Contact Us

If you email us, we receive your email address and whatever information you include in your message. We use it only to reply to you and to improve the App, and we delete it when it is no longer needed for those purposes.

11. Third-Party Services

The App does not contain any advertising SDKs.

12. How We Use Information

We use the limited information described above only to:

• provide App features you request, such as sync, exchange rates and purchases;
• understand which features are used so we can fix problems and improve the App;
• respond to your messages.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use it for automated decisions that have legal or similarly significant effects on you.

13. Data Retention

• Data on your device stays there until you delete it or delete the App.
• Data in iCloud stays in your Apple Account until you delete it.
• Usage statistics are kept in Google Analytics for no longer than the retention period we set there (currently at most 14 months) and are then deleted automatically.
• Purchase records are kept by RevenueCat for as long as needed to verify and restore your purchase and to meet legal and accounting requirements.
• Support emails are kept only as long as needed to help you.

14. Security

Your records are protected by iOS data protection, and iCloud data is protected by Apple's security measures. You can add App Lock for an extra layer of protection. No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we design the App to keep your data out of our hands entirely wherever possible.

15. International Data Transfers

NetXSoft is based in Canada. Our service providers (Google, RevenueCat, Supabase and Apple) may process the limited information they receive in the United States and other countries whose data protection laws may differ from those of your country. Where required, these providers use appropriate safeguards such as Standard Contractual Clauses.

16. Your Rights

Depending on where you live, you may have rights under laws such as the EU and UK General Data Protection Regulation (GDPR), Canada's PIPEDA, the California Consumer Privacy Act (CCPA/CPRA), Japan's Act on the Protection of Personal Information (APPI), and similar laws. These may include the right to access, correct, delete or port your personal information, to object to or restrict its processing, to withdraw consent, and to complain to your local data protection authority.

Because your ledger data is stored only on your device and in your own iCloud account, you can view, correct, export and delete it directly in the App at any time. For information held by our service providers (such as usage statistics or purchase records), contact us at the address below and we will help you exercise your rights. We will not discriminate against you for exercising them.

For users in the EU/UK, our legal bases are: performance of a contract (providing the App and your purchases), and our legitimate interests in understanding and improving the App (anonymous usage statistics).

17. Children

The App is not directed at children under 13 (or the minimum age of digital consent in your country, such as 16 in some EU countries). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

18. Changes to This Policy

We may update this Privacy Policy from time to time, for example when we add features or change service providers. We will post the updated version at this address and change the effective date above. If we make material changes, we will provide notice in the App or through the App Store release notes.

19. Contact Us

NetXSoft Inc.
Ontario, Canada
Email: kiroku@netxsoft.com