Kesto is a budgeting app for two people. It handles money data, so this page is specific about what is stored, where, and who can see it. Kesto has no advertising and no advertising identifier, nothing about you is ever sold, and the only thing measured is which screens of the app are used, never what you put in them.
Kesto is made and operated by an independent developer in the Netherlands. For any privacy question, including a request to see or delete your data, write to rostami@outlook.com.
Kesto does not connect to your bank, and never asks for bank credentials, card numbers or account numbers.
Your data is stored in Google Firebase (Cloud Firestore and Firebase Authentication), on Google Cloud servers, under Google's security. The people who can read your household's data are: you and the partner you paired with. The developer does not read household data as a matter of course, and only ever would with your explicit request, for example to help recover something you asked about.
Kesto's smart helpers can read a receipt photo, turn a typed line into a spend, or take a short voice instruction. When you use one, the content of that request (the photo, the text or the audio clip, and the names of your budgets so the answer can fit them) is sent to Google's Gemini models through Firebase AI Logic and handled under Google's terms for that service. It is not sent anywhere else, and nothing is sent at all unless you use one of those features.
You can turn the smart helpers off completely in Settings, and the app remains fully usable: everything they do can be done by typing it yourself.
If you buy Kesto Plus, the payment is processed by Apple or Google. Kesto never sees your card details. Purchase status (which plan, and until when) is handled by RevenueCat on our behalf, keyed to your Kesto account identifier, so that your subscription can also unlock Plus for your partner.
Kesto records how the app itself is used, through Google Firebase Analytics, so that the parts where people get stuck can be found and fixed. This is counting, not reading: an event says a spend was logged by voice, the plan screen was reached, or this month's smart helpers ran out. It never carries an amount, a budget or member name, a note, a category you typed, or any other content from your household. Screen names are recorded with the identifiers removed, so one household's envelope cannot be told from another's.
These measurements are not linked to an advertising identifier, are never used to build a profile about you, and are never sold or shared for anyone else's purposes.
Your data stays until you delete it. Deleting your account in Settings removes your household's budgets, spends, bills, incomes and attachments, and your account itself. If a partner is still in the household, your own membership and account are removed while their shared data stays with them, which is deliberate: your leaving must not delete their budget.
The full procedure, including how to ask if you have already uninstalled the app, is on the delete your account page.
Under the GDPR you can ask for access, correction, deletion, or a copy of your data. Kesto is built so you do not have to ask: Settings gives you a CSV export and a complete JSON backup of everything, free, at any time, and account deletion is one screen away. For anything that needs a human, email rostami@outlook.com.
Kesto is not directed at children under 13 and does not knowingly collect their data.
If this policy changes, the date at the top changes with it, and material changes are announced in the app.