Konto

Konto Privacy Policy

Effective date: 2026-09-01

1. Scope

This Privacy Policy explains how Konto handles personal data when you use the app locally and when you choose to enable optional online features such as a Konto user account, synchronization, shared business workspaces, server-backed recovery, or other network services. It also covers optional device features, imports, exports, and user-directed sharing. Konto is referred to as we, us, or our in this Policy.

2. Information Konto handles

Konto can handle business and accounting information entirely on your device. This may include accounts, transactions, sales, purchases, debts and loans, payments, inventory, products, parties, customer or supplier contact details, notes, business settings, images, and other records you choose to create or import.

If you enable account-backed or other online features, account and identity data may include your phone number or email address used for authentication, display name, Konto user identifier, business memberships, roles, and authentication state. Device and security data used by online services may include device and session identifiers, registered-device information, cryptographic public-key or integrity information, synchronization cursors and sequence information, authentication events, and security or diagnostic records needed to protect and operate those services.

When you choose optional device features, Konto may also handle contacts you select or import, camera or photo content you capture or choose, barcode or image input, notification permission and delivery information, and files you open, export, import, or share. Biometric matching is performed by the device operating system. Konto receives the result needed to unlock or verify an action and does not receive your fingerprint, face image, or biometric template from the operating system.

3. Why we use information

We use information locally to provide the bookkeeping, accounting, inventory, reporting, security, import, export, and other app functions you request. If you choose online features, we use the information necessary to create and authenticate accounts, protect sessions and devices, synchronize and restore authorized business data, support shared workspaces and permissions, deliver requested network services and notifications, detect abuse or integrity failures, investigate errors, maintain service reliability, and comply with legal obligations. We do not use your accounting records to build advertising profiles.

4. Offline-first and local-only processing

Konto is designed to be offline-first. Core bookkeeping, accounting, inventory, reporting, and record-management data is stored and processed locally on your device and can be used without enabling Konto online services. Online features are optional.

If you do not enable or use online features and do not deliberately export, share, or send information, Konto does not transmit your local business and accounting records, imported contacts, attached images, notes, or other app content from your device to Konto backend infrastructure or service providers merely because those records exist in the app. In that local-only mode, the local data remains under the control of your device and the actions you take in Konto.

Data leaves your device when you deliberately use a feature that requires transmission or when you intentionally export or share it. Examples include optional account authentication, multi-device synchronization, shared business workspaces, server-backed recovery, online lookups or downloads, support submissions, and user-directed exports or shares. When you enable an online feature, Konto transmits only the information reasonably necessary to provide that feature.

Some product-information lookups are made directly from your device to public data providers. A barcode or product lookup can send the scanned barcode, GTIN, UPC, or ISBN and, where needed to return an appropriate result, app-language or lookup metadata. As with any direct internet request, the destination can also receive ordinary network metadata such as your IP address, user-agent information, and technical request headers. Direct public product lookups do not send your accounting records, imported contacts, notes, attached product images, prices, stock levels, supplier details, warehouse data, or Konto internal record identifiers. Features explicitly described as local or on-device AI perform their inference on the device; using an optional network action associated with such a feature is separate from local inference.

5. Permissions

Konto requests device permissions only when they are relevant to a feature. Contact access is used for contact features you choose to use: importing contacts, automatic contact sync, and saving a party to your phone contacts. Automatic contact sync is off until you turn it on for yourself in a workspace, and Konto explains what it copies before your device asks for contact access. While it is on, new contacts on your phone are added to that workspace as parties and phone edits update them, and new parties you create in Konto are added to your phone as new contacts. Konto never changes or deletes contacts on your phone, never deletes anything in Konto because of a contact change, uses contacts only for your own records in Konto, and never uses them to message, call, or market to the people in them. Turning sync off stops it immediately. Parties created from your contacts are handled like any other party: they stay on your device in a local-only workspace, and in a shared online workspace they are synchronized to the workspace's authorized members. Camera and photo access is used for features such as scanning or adding images. Notification access is used to deliver notifications you enable. Biometric APIs are used for local authentication when you enable them. Denying an optional permission prevents or limits the related feature but does not grant Konto access through another route. Imported or selected information becomes Konto data only when you choose to add or use it in the app.

6. How information is shared

In local-only use, local business and accounting data is not sent to third parties because it is not transmitted from the device. When you choose an online feature, the recipient depends on that feature and the information is limited to the relevant purpose:

Konto requires every third party with whom it shares user data to provide the same or equivalent protection of that data as stated in this Privacy Policy and as required by applicable App Store rules and law. For providers acting on Konto's behalf, this protection is required through the applicable contractual, processing, or service terms. For direct external feature providers, Konto only integrates a provider where its applicable terms, commitments, and permitted use of the transmitted data are compatible with that same or equivalent level of protection. Konto does not authorize third parties receiving user data from Konto to use it for unrelated advertising, cross-app tracking, or unrelated profiling.

Konto does not sell your personal data and does not use it for third-party advertising or cross-app tracking.

7. Exports, KXP, and user-directed disclosure

Database exports, imported backup files, KXP files or QR codes, screenshots where the operating system permits them, and other user-directed sharing can contain sensitive business or personal information. Once you choose to send or save that information outside Konto, the recipient or destination may handle it under its own terms and privacy practices. Review the recipient and destination before sharing.

8. Retention

Data that exists only in local-only mode remains on your device until you change or delete it, remove the app or its storage, reset or replace the device, or otherwise act on that local data. Konto cannot retain a server copy of local-only business data that was never transmitted to Konto.

If you enable online services, we keep account and synchronized service data for as long as needed to provide the active feature or Konto user account, preserve legitimate shared-business records, maintain security and integrity, resolve disputes, and meet applicable legal or accounting obligations. Retention periods can differ by data type and purpose.

9. Account deletion and the 30-day grace period

This section applies if you create or enable a Konto user account that exists on Konto online services. You can request deletion of that Konto user account from within the app. After confirmation, the account enters a 30-day grace period. During this 30-day grace period you can cancel the request and restore the account. After the grace period expires, deletion becomes permanent and we delete or de-identify personal account data associated with the account, except information we must retain for legitimate legal, accounting, security, fraud-prevention, dispute, audit, or integrity reasons. Data may also remain where it is part of a shared business record that other authorized members or the business itself must retain. Where reasonably possible, the personal account identity of the deleted user is removed or disassociated from retained shared records without destroying the business history.

If you use Konto only locally without an online Konto user account, there is no server account for Konto to delete; your local records remain controlled through the app and device. Deleting an accounting or financial account inside a business does not delete a Konto user account.

10. Shared businesses

A shared business workspace can contain records created by several users and information about customers, suppliers, employees, partners, or other contacts. Authorized members of that workspace may continue to access those synchronized records according to their permissions. If you add information about another person, you are responsible for having an appropriate basis to do so and for using it consistently with applicable law.

11. Security

Konto uses technical and organizational safeguards appropriate to the relevant mode of use. Local protections include encrypted local storage and protected backup formats where supported by the relevant feature. Online protections can include authenticated sessions, device and permission controls, cryptographic device information, and synchronization integrity controls. No storage or transmission system can be guaranteed completely secure, so you should protect your device credentials, PINs, backup passwords, exported files, and shared codes.

12. International processing

Local-only data that is never transmitted remains on your device and is not transferred internationally by Konto. If you choose an online feature, Konto infrastructure or service providers may process the information required for that feature in countries other than the country where you use the app. Where applicable law requires safeguards for such transfers, we will use the protections required for the relevant processing arrangement.

13. Your choices and rights

Konto provides controls for optional permissions, security preferences, exports, online business access, and account deletion where an online Konto user account exists. Depending on the law that applies to you, you may also have rights to request access, correction, deletion, restriction, objection, or a portable copy of personal data held by Konto. Use the support or contact method available inside Konto or in the official App Store listing to make a privacy request that cannot be completed directly in the app. We may need to verify the requester before acting on a request that affects protected account or business data.

14. Children

Konto is intended for people who can lawfully use an accounting or business service. It is not directed to children who are not legally able to create such an account without the authorization required by applicable law.

15. Changes and contact

We may update this Policy when Konto, the law, or our data practices change. The current version and effective date remain available in the app. Questions or privacy requests can be submitted using the support or contact method made available inside Konto or in the official App Store listing.

Operator: Ahmed Al-Tameemi and Junaid Muhi

Contact: support@kontolab.work