Kesto is a budgeting app for two people. It handles money data, so this page is specific about what is stored, where, and who can see it. Kesto has no advertising and no advertising identifier, nothing about you is ever sold, and the only thing measured is which screens of the app are used, never what you put in them.
Kesto is made and operated by an independent developer in the Netherlands. For any privacy question, including a request to see or delete your data, write to rostami@outlook.com.
Kesto does not connect to your bank, and never asks for bank credentials, card numbers or account numbers.
Your data is stored in Google Firebase (Cloud Firestore and Firebase Authentication), on Google Cloud servers, under Google's security. The people who can read your household's data are: you and the partner you paired with. The developer does not read household data as a matter of course, and only ever would with your explicit request, for example to help recover something you asked about.
Kesto's smart helpers read things for you: a receipt or bill photo, a bank statement, a line you type, or a short voice instruction. To do that they send what you give them to Gemini, Google's AI service, through Google Firebase (Firebase AI Logic). Google reads it and sends the answer back to Kesto.
Kesto asks first. The first time you use a helper, Kesto shows what will be sent and to whom, and sends nothing unless you tap Allow. You can change your answer at any time in Settings, under Smart helpers (Google Gemini); with it off, nothing is sent to any AI service and the app remains fully usable, because everything the helpers do can be done by typing it yourself. Each partner answers for their own phone.
What is sent, and only when you use a helper (or, for the payday recap, only after you have allowed the helpers):
Nothing else is sent: not your name or email, not your partner, not your account identifier, and not your other spends. This content is used only to produce the answer you asked for.
How Google protects it. Google acts as our service provider for these requests, under the Firebase and Gemini API terms for paid services. Under those terms Google does not use the content of these requests or the answers to improve its products or for advertising, and processes it under its data protection terms, which protect it at least as well as this policy does. It is not sent anywhere else.
If you buy Kesto Plus, the payment is processed by Apple or Google. Kesto never sees your card details. Purchase status (which plan, and until when) is handled by RevenueCat on our behalf, keyed to your Kesto account identifier, so that your subscription can also unlock Plus for your partner.
Kesto records how the app itself is used, through Google Firebase Analytics, so that the parts where people get stuck can be found and fixed. This is counting, not reading: an event says a spend was logged by voice, the plan screen was reached, or this month's smart helpers ran out. It never carries an amount, a budget or member name, a note, a category you typed, or any other content from your household. Screen names are recorded with the identifiers removed, so one household's envelope cannot be told from another's.
These measurements are not linked to an advertising identifier, are never used to build a profile about you, and are never sold or shared for anyone else's purposes.
Your data stays until you delete it. Deleting your account in Settings removes your household's budgets, spends, bills, incomes and attachments, and your account itself. If a partner is still in the household, your own membership and account are removed while their shared data stays with them, which is deliberate: your leaving must not delete their budget.
The full procedure, including how to ask if you have already uninstalled the app, is on the delete your account page.
Under the GDPR you can ask for access, correction, deletion, or a copy of your data. Kesto is built so you do not have to ask: Settings gives you a CSV export and a complete JSON backup of everything, free, at any time, and account deletion is one screen away. For anything that needs a human, email rostami@outlook.com.
Kesto is not directed at children under 13 and does not knowingly collect their data.
If this policy changes, the date at the top changes with it, and material changes are announced in the app.