Kopiyka Privacy Policy

1. What data the app processes

Kopiyka is a personal finance app. The accounts, transactions, categories, budgets, goals, debts and recurring payments you create are stored on your device in a local database. We have no access to them. If you turn on a shared budget yourself (section 4), encrypted copies of your records are kept on our server in a way that only your devices — not we — can read.

2. Automatic records from bank notifications (optional)

If you turn on “Automatic bank records” and grant the app Android notification access, Kopiyka receives the notifications that appear on your phone. The app analyses only the notifications of the bank apps you enable in its settings and takes the amount, currency, merchant or sender and the last card digits from them to record the transaction in the account you chose. Other notifications are not read or stored.

To show the list of banks, the app remembers only the package names of the apps that posted payment notifications. All processing happens on your phone: neither the text nor the content of notifications is sent anywhere. You can turn the feature off and revoke access at any time in the app or in Android settings.

3. monobank sync (optional)

To connect monobank, you obtain a personal token yourself on the official api.monobank.ua website. The token gives read-only access to your statement, is stored encrypted (Android Keystore) only on your device and is sent exclusively to monobank servers (api.monobank.ua) to fetch balances and transactions. You can disconnect monobank in the settings at any time and revoke the token on api.monobank.ua.

4. Shared budget and sync (optional)

If you create or join a shared space, your records (accounts, transactions, categories, budgets, goals, debts, templates, recurring payments and the base currency) are synced between the space’s devices through our server on Cloudflare (the kopiyka-sync service, Cloudflare D1 storage).

Every record is encrypted on the device with the space key (AES-256-GCM) before it is sent. The key travels between your devices only inside the invitation link or the recovery key and never reaches the server, so we cannot read the contents of your records.

The server stores:

• the encrypted records, their technical identifiers, type (for example, “transaction”) and change number;
• the names of the space’s devices (phone model), when they were added and when they last connected;
• hashes of device tokens, one-time invitation codes (valid for 72 hours) and the recovery key.

Receipt photos are not synced. You can save the recovery key to Google Password Manager on your device — this happens through the system Credential Manager, and we never receive it. When the last device leaves a space, the server deletes all of the space’s records; a removed device loses access. To prevent abuse, the server temporarily (for up to three hours) counts attempts to create, join or recover a space per IP address.

5. AI features (optional)

Receipt scanning, AI quick entry and the AI assistant work only when you explicitly start them. Then our proxy server (Cloudflare Workers) receives:

• for receipt scanning — the receipt photo you chose and the names of your categories;
• for quick entry — the text you entered and the names of your categories and accounts;
• for the AI assistant — your messages, aggregated summaries (monthly income and spending totals, top categories, budgets, goals) and, when your request needs them, the individual transactions or records (accounts, categories, recurring payments) the assistant reads or changes to carry out your request. The chat history with the assistant is kept only on your device and is deleted with the “New chat” button.

Voice input (in quick entry and in the assistant) is recognised by your phone’s system speech recognition service (usually Google): the app receives only the finished text, which is then processed the same way as typed text.

The proxy forwards the request to the Google Gemini API and returns the result to the app. We do not store request contents or photos. To prevent abuse, the server keeps only daily request counters — one for a random installation ID that is not linked to your identity and one for the IP address the request came from; these counters are deleted automatically after 7 days. Requests are processed by Google under the Gemini API Additional Terms of Service and the Google Privacy Policy.

6. Exchange rates

The app downloads official rates from the open API of the National Bank of Ukraine (bank.gov.ua). None of your data is sent.

7. Purchases and app rating

Kopiyka Pro is paid for through Google Play. Payment details are processed by Google; we never receive them. The app only checks the purchase status. After a few weeks of use, the app may suggest rating it through the standard Google Play dialog — the rating and review are processed by Google as well.

8. Backups, import and export

You can manually create a backup file or a CSV export — it is saved wherever you choose. If you turn on automatic backups, the app saves a copy every week to its own protected storage on the device (the last five copies) and, if you picked a folder, to that folder too — including a cloud drive folder if you decide so; in that case the data goes only to the service you chose.

Statement files (CSV and Excel) that you import, and text or photos you share with Kopiyka from other apps, are processed on the phone (a receipt photo or text is sent to the AI features only when you start scanning or recognition). Android may also include the app’s data in your Google account backup according to your device settings; in that case the monobank token is not restored on another device.

9. Ads and analytics

The app contains no ads, third-party trackers or analytics.

10. Permissions

• Internet — exchange rates, monobank, the shared budget, AI features, purchases.
• Notifications — reminders about payments and budgets (if you want them).
• Biometrics — app lock (if you want it).
• Camera — only through the system camera app when you photograph a receipt.
• Microphone — not requested: voice is recognised by the system service through its own interface.
• Notification access — only if you turn on automatic bank records; used as described in section 2.
• Install updates — only in the version from this website: so Kopiyka can install its new version.

11. Deleting data

You can delete all data in the app (“Settings → Delete all data”) or by uninstalling it. A phone in a shared space leaves it before deletion; to delete the space’s records from the server, all of its devices must leave the space (or write to us — we will delete the space by its identifier).

12. Children

Kopiyka is not intended for children under 13, and we do not knowingly collect their data.

13. Changes and contact

We will announce significant changes to this policy in an app update and update the date at the top of this page. Send privacy questions to the developer of Kopiyka — Steppe: jason.statusom@gmail.com.