Privacy Policy

Kokuko stores circles and their members, tasks and time contributions, shopping lists and history, expenses and receipts, balances, notes, cards, activity and notifications on our servers. People with access to a circle can see its shared records. A member name or avatar may appear beside contributions. Circle owners and members control what they add and whom they invite.

Removing an installation or leaving a circle does not necessarily erase shared records that other members still need. A circle can be deleted by an authorised member; contact us if you need help with a deletion request.

• Access and migration. The current app creates an installation identity instead of requiring an email account. We keep its identifier and access records. Circle join and recovery codes give access to circle data; member passwords are used only for protected members. The app keeps tokens and recovery codes in the device Keychain. If you choose to move a circle from the old app, we use your old account email and one-time code to authenticate and transfer the selected circle.
• AI and uploads. If you use assisted entry or planning, the text, images and relevant circle context you submit are processed by Google Gemini. AI drafts are returned for your review; they do not write circle data automatically. Uploaded receipts and other images may be stored with the related record. Photos of receipts can contain merchant, amount and other personal details.
• Service and purchases. Our servers receive IP address, request and device details, language, push token, usage and error data to run and protect Kokuko. Firebase Cloud Messaging delivers optional push notifications. Apple handles App Store payments; we receive transaction identifiers and subscription status, not card details. If you contact support, we use your message and contact details to reply.

We use this data to provide the features you request, protect and maintain the service, meet legal obligations, and respond to you. These purposes rely, as applicable, on our contract with you, legitimate interests, legal obligations or your consent. We do not sell your data or use it for advertising across apps.

Our backend uses DigitalOcean hosting and storage in Frankfurt, Google Gemini for AI, Firebase for push delivery, and Sentry for backend error monitoring. The website uses Cloudflare for delivery and Google Fonts. Apple processes App Store purchases. These providers receive only the data needed for their roles and may process it outside Switzerland, the UK and the EEA. Where required, we rely on adequacy decisions or contractual safeguards, including standard contractual clauses. Contact us for information about those safeguards.

We keep circle data while the circle is active and as needed for its members. The previous backend schedules archived circles for deletion after 90 days. Other records, including installation, purchase, security, support and migration records, are kept only as long as needed for their purpose, disputes or legal duties. Provider backups and security logs may last longer under their retention settings. Deleting the app does not cancel a subscription or remove server data. Contact us to request access, export or deletion; we may need a recovery code or other information to verify that you can act for a circle.

You can turn off push notifications in the app or device settings and choose whether to use AI and migration. Depending on applicable law, you may request access, correction, deletion, portability or restricted use of your personal data, object to processing, or withdraw consent without affecting earlier processing. Email us to exercise these rights or challenge a decision. You may complain to the Swiss FDPIC or your local data protection authority. Kokuko is intended for people aged 16 or over. We will update this page and give additional notice of material changes.