Legal

Privacy Policy

What Khumio keeps about you, who can see it, and what you can do about it. Short, because there is not much to say.

Last updated 8 October 2026

Who we are

Khumio is made by Creative Blaq Studios in South Africa. If you have a question about your information, write to support@khumio.creativeblaq.com.

What we keep

  • Your account: your name, email address and, if you add one, a profile photo. Your password is stored only as a one-way hash, never as the password itself.
  • What you record: your wallets and what is in them, such as amounts, dates, shops, categories, notes, budgets, goals and bills.
  • Sign-in records: when you signed in and the address a request came from, to keep the service safe and working.

We do not sell your information, show you ads, or use analytics or advertising trackers.

What stays on your phone

Photos of receipts, invoices and payslips are read on your phone and stay there. They are never sent to us. If you connect your own AI account and choose to have it read a photo, Khumio asks first and then sends a copy of that photo to your AI provider, never to us.

Who can see it

  • You, on every phone you sign in on.
  • The people in a wallet you share. They see that wallet, what is recorded in it and who recorded it, and your name and photo. They never see your personal wallets.
  • The companies that run Khumio for us: Hetzner hosts our server in Germany, Cloudflare stores profile photos and our encrypted backups in Europe, and Resend sends the emails with your sign-in codes. They handle your information only to provide that service.
  • Authorities, only when the law requires it.

AI you connect

Ask Khumio, Insights and AI reading are optional and run on an AI account you connect yourself, such as Google, OpenAI or Anthropic. Khumio asks before anything is sent. Insights and Ask Khumio send the figures they need, never your name, anyone else’s name or your notes, and you can keep any wallet away from your AI. What you send there is handled under your AI provider’s own privacy policy.

How long we keep it

As long as you have an account. When you delete it, your account and everything only you could see are deleted at once. What you recorded in a wallet you share stays in that wallet, because the other members’ balances depend on it, but it shows as from a “Former member”, with nothing that identifies you. Our encrypted backups keep a copy for up to 35 days, then it is gone.

Your choices

  • Change your name, email address, password or photo in the app, under Account › Your profile.
  • Delete your account in the app, or ask us to delete it if you can no longer open the app.
  • Ask us what we hold about you, or to correct it, at support@khumio.creativeblaq.com.

Age

Khumio is for people aged 18 and over.

Changes

If we change this policy in a way that matters, we will tell you in the app first.