Privacy Policy

Your expense data stays in your iCloud

Expenses, budgets, income settings, receipts you attach, and shared lists are stored on your device and in your personal iCloud account (Apple CloudKit). Shared lists live in CloudKit shared zones visible only to the members you invite. CHK GmbH has no access to your CloudKit data and cannot read your expenses. Kronkoll requires no bank login and never connects to your bank.

AI receipt and voice parsing

When you scan a receipt, import receipt images, or capture an expense by voice or text, the receipt image or transcribed text is sent over an encrypted connection to a parsing service operated by CHK GmbH (hosted on Vercel, EU region), which forwards it to OpenAI's API to extract the amount, merchant, date, and line items. This data is processed to return your result and is not stored by CHK GmbH. Per OpenAI's API terms, submissions are not used to train models and are retained by OpenAI for up to 30 days for abuse monitoring, then deleted. Speech-to-text for voice capture runs on your device (Apple speech recognition); only the resulting text is sent for parsing.

The friends directory

Kronkoll requires no sign-up. If you never set a nickname, no identifying data about you is stored on our servers - only the anonymous usage statistics described below, which cannot be linked to you. When you choose a nickname to be findable by friends, Kronkoll operates a small directory service (hosted on Vercel and Neon, EU region - Frankfurt) storing: your chosen nickname and display name, your Apple CloudKit user identifier, a hashed device credential, the push-notification token Apple assigns your installation (used only to notify you about invites and list membership), and pending invites (list name, inviter, share link). If you share a referral code, the code is recorded against your identifier so a friend's redemption can be attributed to you; no purchase amounts or payment details are stored. This is the only personal data CHK GmbH stores. You can delete your directory profile at any time in the app or by emailing us; deletion removes your nickname, identifier, push token, and pending invites from our servers. Your expenses and receipts are never on our servers - they live in your own iCloud.

Anonymous usage statistics

To see where people get stuck, Kronkoll sends a small set of anonymous usage events to our own server (hosted on Vercel and Neon, EU region - Frankfurt): which screens are opened and which features are used, each with a timestamp. It is on by default and you can switch it off at any time in Settings → Privacy ("Share anonymous usage statistics"). What can be sent is fixed by an allow-list enforced on both your phone and our server: an event name, a timestamp, a random per-install identifier, the app version, and a few short category values - never amounts, receipt contents, notes, merchant names, your nickname, your Apple identifier, or anything you type. The random identifier is created on your device, is not derived from your Apple ID or your directory profile, and is stored nowhere else, so this data cannot be linked to you. Switching the setting off stops uploads and deletes that identifier from your device, so nothing could ever be joined to what was sent before. We use this data only to improve the app; it is never used for advertising and never sold or shared.

What we don't do

No advertising, no ad SDKs, no third-party analytics SDKs, no tracking across apps or websites, no sale or sharing of personal data, no profiling. The only usage data we collect is the anonymous statistics described above, sent to our own server and to no one else. Exchange rates are fetched from public European Central Bank data without sending any personal data.

Legal bases & your rights (GDPR / FADP)

We process directory data to provide the service you request (Art. 6(1)(b) GDPR) and AI-parsing data on the same basis. Anonymous usage statistics are processed on the basis of our legitimate interest in improving the app (Art. 6(1)(f) GDPR); because they carry no identifier we can link to a person, we cannot single out or erase one person's records - the in-app setting is the control, and it takes effect immediately. You have the right to access, rectify, export, and erase your data, and to lodge a complaint with a supervisory authority. For anything in your iCloud, Apple's terms and your Apple ID controls apply; for directory data, contact us or use in-app deletion. We retain directory data until you delete it; server logs are retained briefly for security.

Children

Kronkoll is not directed at children under 13.

Changes

We'll update this page and the effective date when the policy changes materially.