Legal
Privacy Policy
Last updated: June 1, 2026
Overview
Keep Track is a local-first personal finance app. Your financial data — transactions, budgets, debts, goals, and savings — lives entirely on your device. We never see it, store it, or have any access to it. Even with Keep Track Plus, we only store an opaque encrypted file on your behalf. We cannot open it, read it, or recover it under any circumstances.
What We Collect
We collect only the minimum needed to operate accounts and subscriptions:
- Account identity — your name and email from Google Sign-In, used only to identify your account and link it to a subscription.
- Subscription status — whether your account has an active Plus subscription. Processed by Stripe. We do not store card details.
- Support messages — your name, email, and message when you contact us. Used solely to respond to your inquiry.
What We Do Not Collect
- Your financial records of any kind — transactions, budgets, debts, savings, goals, or categories. None of this ever leaves your device in a readable form.
- The contents of your cloud backup. When you sync, we receive and store a single encrypted file. It is encrypted on your device with your password before upload. We have no key, no access, and no ability to recover it.
- Device identifiers, advertising IDs, or behavioral analytics.
- Any data from users on the free tier — there is no account, no server communication.
Cloud Sync (Plus)
Keep Track Plus gives you a server to link your devices together. When you sync, your app uploads a single encrypted file to our storage. That file is encrypted on your device using a password only you know — before it ever leaves your device. We store the file as an opaque blob. We cannot decrypt it, read it, or recover it if you lose your password. You own your data entirely. We are just the pipe.
How We Use What We Collect
- To authenticate you and associate your account with a Plus subscription.
- To store your encrypted backup file so your devices can retrieve it.
- To respond to support requests.
- To manage billing via Stripe.
We do not sell, share, or use your data for any purpose beyond operating the service.
Third-Party Services
- Google OAuth — used for sign-in. Subject to Google's Privacy Policy.
- Stripe — used for payment processing. Subject to Stripe's Privacy Policy.
- Vercel Blob — used to store encrypted cloud backups. Data is encrypted before upload.
Data Retention
Account and subscription data is retained as long as your account exists. Your encrypted backup file is overwritten each time you sync — only one copy is ever stored. Support tickets are retained for up to 12 months. You may request deletion of your account and all associated data at any time via the support page.
Your Rights
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us via the support page.
Contact
Questions about this policy? Reach us via the support page or at Ko-fi: ko-fi.com/khesirr.