Your records stay on your phone only; Kartopu has no server. No ads. Usage statistics and crash reports are sent only if you allow them, and never include amounts.
Kartopu is an app that keeps your personal finances on your device. This policy explains what is stored where, and what is never sent anywhere. For the formal notice, see the KVKK notice; both describe the same behaviour.
What stays on your device
Everything you enter is kept only on this device, in the app’s own storage:
- Your assets, income and expenses, debts and receivables, goals and plans.
- Your answers to reviews, the change history of your records and period summaries.
- Your settings (language, theme, currency, review day, reminder preferences).
- Your name, if you choose to enter it (used only in greetings and notifications).
- A randomly generated support ID (see below).
- Your usage data preference and, if you allowed it, a pseudonymous install ID and usage events not yet sent (see below).
Android’s automatic backup and device-to-device transfer are turned off: your data is not copied to your Google account backup. When you change phones, your data moves only through the app’s own export.
On iPhone, app settings (including your preferences and the install ID) may be included in the device’s own iCloud or computer backup; restoring from that backup counts as the same installation.
Kartopu has no server. Your amounts, name, records and support ID are never sent to any server, analytics or advertising service. There are no ads. Only if you allow it are the usage statistics and crash reports described below sent.
Internet connection
The app works offline. When online, it only downloads current exchange rates and gold/silver prices from public sources. These requests contain no information about you.
Support ID
When first opened, the app generates a random ID (UUID) and stores it on your device. It is not linked to your name, device or records and is never sent anywhere (it is not used in usage statistics or crash reports either). You can see and copy it in Settings → Help. If you add it when writing to us, it is used only to match your request.
Usage statistics and crash reports (optional)
During setup and in Settings → Privacy you are asked for two separate permissions. Both start off; unless you turn them on, nothing is sent or even generated on the device. You can turn either off at any time.
- Product analytics: counts which features are used (e.g. “a record was added”, “a plan was created”, “a goal was reached”). Each event carries only values chosen from a fixed list: the record type (asset, income…), the goal category, whether a plan is cash or credit, and so on. The app version, operating system (Android/iOS), store and app language are also sent. Provider: PostHog, EU data centre.
- Crash reports: when the app hits an error or crashes, it sends the technical details (error type, where in the code it happened, app version, device type and operating system). Numbers longer than 3 digits, amounts with currencies and email addresses in the app’s own error messages are removed on the device before sending; no screenshots are taken. Crashes in the phone’s native layer are additionally filtered on the provider’s server side. Provider: Sentry, EU (Frankfurt) data centre.
Never sent: amounts, balances, rates, your name, the names and notes of your records, what you tell Karto, your support ID, contacts or location.
This data is sent with a pseudonymous install ID: it is generated randomly when either permission is first turned on and has no link to your name, device or support ID. It doesn’t identify you directly, but it links events from the same installation; that’s why we say “pseudonymous”, not “anonymous”. IP addresses are not stored by the providers.
- When you turn a permission off: pending events and crash reports are deleted from the device at once and sending stops. When both are off, the install ID is deleted too; turning them on again creates a new ID.
- Data already sent is not deleted automatically when you turn the permission off. If you want it deleted, copy the installation ID in Settings → Privacy before turning the permission off and write to destek@kartopu.app; the data for that ID will be deleted from the providers.
- Onboarding step: The onboarding comes before the permission question. Whether you skipped it (a single yes/no) waits only on your device until you are asked: if you allow analytics it is sent once, otherwise it is deleted.
- Retention period: Product analytics events are kept for 12 months and crash reports for 3 months, then deleted. Details: KVKK notice.
Notifications
Reminders and goal notifications are scheduled on your device (local notifications). Your permission is asked to turn them on; you can turn them off in Settings. Notification texts never include amounts.
App lock
You can lock Kartopu in Settings → Security → “App lock”. The lock uses your device’s own lock (fingerprint, face recognition or screen passcode); Kartopu has no access to these and stores no passwords or biometric data. Details: Security.
Support
When you email us (destek@kartopu.app), we only see what you send. The app never adds your name, amounts or records to your email.
Deleting your data
Settings → Your data → “Delete my data” deletes all your records, settings, name, support ID, usage data preference, install ID, and pending events and crash reports from this device; scheduled reminders and the background task are cancelled.
Since your records are not kept on a server, there is no separate deletion request to make for them. For usage statistics and crash reports already sent, write to us with your installation ID as described above (copy it before deleting). Uninstalling the app also deletes the data on the device.
This website
kartopu.app uses no cookies, analytics or advertising trackers. Details: Cookie policy.
Changes
When the app’s behaviour changes, this policy is updated first; the date at the top of the page changes.