KoshPrivacy policy
Who we are
Kosh is made by KMF Ventures LLC, a Wyoming limited liability company ("KMF Ventures", "we", "us"). We make the Kosh app for Mac and iPhone and run this website, getkosh.app. Questions about privacy go to legal@getkosh.app.
The short version
- Kosh has no servers that receive your information, and you don't create an account with us.
- Your financial data lives on your devices and in your own private iCloud. We can't see it.
- Kosh has no analytics, no advertising and no trackers.
- We don't sell, rent or share your personal information.
What Kosh stores, and where
- On your device: your accounts, balances, transactions, categories, budgets, rules, notes and settings, in an on-device database.
- In your iCloud: if iCloud is available, the same data syncs between your Mac and iPhone through Apple's CloudKit private database. That database belongs to your Apple Account; KMF Ventures has no access to it.
- In your iCloud Keychain: the access keys that let Kosh read your connected accounts (such as Plaid access tokens and your Plaid keys, or your SimpleFIN access key). Kosh never sees or stores your bank password.
What leaves your device
Kosh talks to other services only to do things you asked for. Each of these is governed by that provider's own privacy policy.
| Service | When | What it involves |
|---|---|---|
| Plaid | If you connect banks with Plaid | You sign in to your bank in Plaid's own screen. Kosh requests your accounts, balances, transactions and holdings from Plaid using Plaid keys that belong to you, and the data comes back to your device. |
| SimpleFIN Bridge | If you connect banks with SimpleFIN | You link banks on SimpleFIN's website. Kosh requests your account data from SimpleFIN with the access key you pasted in. |
| Bank websites and Google | To show a bank's logo | Kosh may fetch a logo from a bank's public website and, if that fails, from Google's favicon service. These requests contain the bank's website address and your device's IP address, like any web request. They contain no financial data. |
| Apple | iCloud sync, Face ID, notifications | Sync runs through Apple's iCloud. Face ID and Touch ID are handled by your device. Notifications are created on your device. |
Kosh uses Apple's on-device language model to suggest categories. The transaction text it reads is processed on your device.
What we collect
Because Kosh has no servers of its own, we do not collect your financial data or personal information through the app. We don't use analytics libraries, advertising identifiers or crash reporters of our own. If you install Kosh through TestFlight or the App Store, Apple may share aggregate, anonymized usage or crash information with us according to your Apple device settings and Apple's policies.
This website
getkosh.app is a static website. It sets no cookies and runs no analytics. It is served by Cloudflare, which processes standard request information (such as IP address and browser type) to deliver and protect the site, under Cloudflare's privacy policy. If you email us, we use your message and address to reply, and keep them as long as needed to do that.
Your choices
- Export: Settings → Security and data → Export transactions (CSV).
- Erase: Settings → Security and data → Erase all data removes accounts, transactions and rules from your device and your iCloud.
- Disconnect a bank: remove it in Kosh, and revoke access with your provider (Plaid at my.plaid.com, or SimpleFIN Bridge) or your bank.
- Remove everything: delete the app, and delete its data in iCloud settings if you want it gone from Apple's servers.
- Lock it: turn on Face ID / Touch ID in Settings.
Security
Kosh relies on the protections built into Apple devices: on-device encryption, iCloud encryption and Keychain. Anyone with access to your unlocked device or your Apple Account may be able to see your data, so keep both secure. No system is perfectly secure.
Children
Kosh is not directed to children under 13, or under 16 where the law sets a higher age, and we do not knowingly collect information from them.
Your rights
Depending on where you live (for example California, or the EU and UK), you may have rights to access, correct or delete personal information, or to object to its use. Since we don't hold your financial data, there is usually nothing for us to access or delete, but you can write to us at any time and we will help.
Changes to this policy
If this policy changes in a meaningful way, we will update the date above and describe the change on this page and in the app's release notes.
Contact
KMF Ventures LLC, a Wyoming limited liability company.
Privacy and legal: legal@getkosh.app
General questions: contact@getkosh.app