Privacy Policy

The short version

Kinora runs on your phone. We do not have servers, and we do not receive your information. The app does not send anything over the internet. No usage data, no crash reports, nothing in the background.

Everything below is the detail behind that.

What information we collect

We do not collect anything.

There are no accounts and no sign-in, so you never give us your name, email, or phone number. There is no analytics, no crash reporting, and no advertising in the app. We do not track your location, and we do not read your contacts, photos, camera, or microphone.

We have nothing about you to sell, share, or hand over.

What is stored on your phone, and why

Everything you enter is kept on your device, because that is the only place it exists. It is stored so the app can show it back to you and build your Emergency Packet:

• Assets, including names, balances, account numbers, and nominee names
• Family members and their contact details
• Important contacts, such as your CA, lawyer, or financial advisor
• Documents: the title, the type, and where the physical papers are kept
• Your Emergency Checklist notes
• Your PIN for private assets, stored in a scrambled form that cannot be turned back into the PIN itself
• Your settings

This is saved in the app’s own private storage. On a normal phone, other apps cannot read it.

Data storage and security

Your information stays in the app’s private storage on your device. Android keeps that storage private from other apps, and your phone’s own screen lock protects it while the phone is locked. Kinora adds its own locks on top: a PIN or fingerprint lock, auto-lock, a separate PIN for private assets, and a one-tap option to hide all balances.

Your vault is encrypted on your phone. Everything you enter is stored in a database protected with AES-256 encryption (SQLCipher). The key that opens it is created on your phone the first time you use the app and kept in the Android Keystore — hardware-backed storage other apps cannot read and that never leaves your device. If someone copies the database file off your phone, takes a copy of the app’s storage, or gets hold of your backup, they cannot read any of it.

The key lives on your phone, though, because the app has to be able to open your vault — that is what lets it work with no account and no password you could forget. So encryption cannot protect you from someone who has taken control of your phone while it is unlocked, since at that point they can reach your information through the app itself. We would rather tell you this than let you assume more protection than you have.

Because of that: do not put passwords, OTPs, or ATM PINs into this app. Write down where things are kept, not the things themselves.

Backups are encrypted. When you use “Back up my data”, the backup file is encrypted on your phone using AES-256-GCM before it leaves the app. The app also shows you a recovery code, which you need to open that backup on a different phone. We do not have a copy of it and cannot give you a new one.

On Android, screenshots are blocked while the app is open, and the app hides its contents in the recent-apps preview. We say “on Android” because that is the truth. iPhones do not let an app block screenshots, and if Kinora ever ships on iPhone this protection will not be there.

Third-party services

The app itself uses no third-party services. There is no analytics provider, no advertising network, no cloud database, and no crash-reporting service. Nothing is sent to any third party from inside the app.

Two things sit outside that boundary, and you control both:

• Wherever you send a backup or an Emergency Packet. The file is created on your phone and handed to your phone’s share menu. Once you send it to Google Drive, WhatsApp, email, or anywhere else, that file is covered by that service’s privacy policy, not ours.
• Google Play. If you install Kinora from the Play Store, Google handles the download and any of its own data collection under Google’s privacy policy. That is between you and Google, and we receive nothing from it.

Analytics and tracking

There is none. Kinora contains no analytics SDK, no advertising identifier, no tracking pixels, and no crash reporting. We cannot see how many screens you opened, what you recorded, or whether you use the app at all.

The app does request the Android Internet permission, and we would rather name that than have you find it: it is currently unused. Nothing is sent. It is reserved for a feature we may add later. If that ever changes, we will update this policy and the Play Store details before the feature reaches you.

The other permissions the app uses are fingerprint or face unlock (only if you turn it on), and notifications, vibration and restart-after-reboot (only used if you set a reminder on an asset, and reminders are created and shown entirely on your phone). The app does not ask for contacts, photos, camera, microphone, or location.

Your rights and choices

Because we hold nothing about you, the usual rights of access, correction, portability and erasure are all things you exercise directly on your own device, without asking us:

• Access and correction. Everything is visible and editable in the app at any time.
• Portability. “Back up my data” gives you an encrypted copy of everything, and the app can also export CSV and PDF.
• Erasure. See the next section.
• Withdrawal of consent. There is no account and no processing by us to withdraw from.

Deleting your data

You have two ways to delete everything, and both are immediate:

• Settings › Delete all my data permanently removes your vault from the phone.
• Uninstalling the app deletes everything with it, including private assets.

There is no account to close, because there is no account, and there is nothing on our side to request the deletion of. Any backup files you saved elsewhere are yours. It is up to you whether to keep or delete them.

Please do take a backup before deleting. We hold no copy of your information, so if the phone is lost and there is no backup, the information is gone.

Moving to a new phone

Android will not quietly copy your vault to Google Drive. Most apps allow that by default and we have turned it off. The one exception, which we would rather name than have you discover: if you use Android’s phone-to-phone transfer during setup, your vault comes across. That is a direct transfer between your two phones. It does not go over the internet, and it does not come to us.

Children's privacy

Kinora is meant for adults organising a household’s financial information. It is not directed at children, and it has no social, messaging, or user-to-user features. When you set up your profile, the app asks you to confirm you are at least 16.

Because the app collects nothing and has no accounts, we hold no information about any user, including any child who might use a parent’s phone.

Changes to this policy

If we change what the app does with your information, and especially if we ever add anything that uses the internet, we will update this policy and the Play Store details before that change reaches you. The “last updated” date at the top will change with it. This document is kept alongside the app’s source code, so its history is on record.

Contact us

If you have a question about this policy, or about your privacy, write to us at support@beliefsoft.com.

See also our Terms & Conditions.