Privacy policy

1Who is responsible

• Data controller: STARSLAPSE
• Contact: contacto@starslapse.com

2What data the app handles

You enter all of this information yourself, and it is stored in your phone's private storage. If you sign in, almost all of it is also backed up to the cloud (section 3.1):

Kontrol Finance does not connect to your banks. It never asks for bank credentials and does not read your SMS. You enter everything yourself; the only exception is recording Google Pay payments, which is optional and off by default (section 3.4).

3What leaves your phone

3.1 Backup and sync — off until you sign in

If you sign in with your Google account, your financial data is copied to Google Firebase (Firestore) so you can restore it or use it on another phone. It stays linked to your account and is not shared with anyone else.

From your Google account the app receives your name, email and profile photo, and stores them in your profile (users/{your id}) together with the app version, the date of your last visit, the start of your free month and whether you have an active subscription.

The Kontrol Finance administrator can see that profile (name, email, dates, subscription status and whether it is monthly or annual) to provide support and grant complimentary months or lifetime Premium. They do not see your financial data: neither the app nor the admin panel can read it, because the database security rules prevent it. Whoever manages the Google Firebase project could technically access it with Google's tools; we do not, unless you ask us to in order to fix a problem or the law requires it.

If you do not sign in, none of this happens. The app works just as fully on your phone.

You can delete your account and everything in the cloud at any time, from the app or by email (section 5).

3.2 Photos of receipts, debts, goals and transactions

If you signed in, your photos are backed up in your Firebase space, reduced and next to the rest of your data, so you can see them on your other phones; only you can see them. These are the photos you add to a debt (the car, the house), a goal (the trip, the phone) or a transaction, and your receipt and proof photos. If you don't sign in, they stay on your phone.

Receipt photos also have their own switch, Back up receipt photos, which is on by default: if you turn it off, new ones stop uploading. Each person has a backup space for photos (1 GB with Premium, 200 MB in the free month; it may change), and the app shows how much you have used and warns you as you get close. If it fills up, your photos are still saved on your phone; they just stop being backed up until you free space. A photo is deleted from the cloud when you remove it, when you delete what it belonged to, or when you delete your account.

3.3 Support reports

If you send a report from Help & support, we store in Firebase your Google name and email, the text and images you attach, the app version and your phone's model and Android version, so we can reply. Only you and the administrator can see them. They are deleted when you delete your account; you can also ask for a report to be deleted by writing to the contact email.

3.4 Google Pay payments (optional, off by default)

If you turn on Record Google Pay payments and give Kontrol "Notification access", the app reads only Google Wallet notifications and takes from them the amount, merchant, date and last 4 digits of the card, to record the expense or confirm a scheduled payment. Notifications from any other app are ignored and the notification text is not stored. Everything is processed on your phone; the recorded expense is backed up like any other transaction only if backup is on. You can turn it off at any time in Settings.

3.5 Subscription

Kontrol Finance includes a free month from the first time you open it, with no card required, and then a monthly or annual subscription, your choice. Payment is processed by Google Play: the app never sees or stores your card details. It only asks Google Play whether your subscription is active.

3.6 Requests to external services

The app queries these public services, and none of the requests include information about you:

These requests reveal which cryptocurrencies you are interested in, because prices are only requested for the ones you recorded. They do not reveal how much you hold, what it is worth or who you are.

3.7 What never leaves your phone

• The reading of your receipts. Recognition happens on your phone with ML Kit, offline: neither the photo nor its text is sent to any analysis service. (If you turn on Back up receipt photos, the photo and the text read from it are stored in your backup; section 3.2.)
• Your PIN. It is stored as a salted hash, encrypted, and never transmitted.
• Your electronic invoice files (the XML or JSON you import). They are read on your phone to link them to their expense; only the invoice ID and the issuer's tax ID are saved in the transaction (and backed up with it if backup is on). The file itself is not uploaded.
• App usage data or analytics. The app includes no analytics or advertising SDK. The only similar thing is the anonymous diagnostics of Google's receipt reader (ML Kit), described in section 3.6.

3.8 Free month record (also without an account)

So that uninstalling the app or clearing its data does not restart the free month, the app stores a record in Google Firebase with only two things: an anonymous code for the phone and the date your free month started. It is sent even if you do not sign in, because it is meant for people without an account.

• The code is an encrypted digest (SHA-256) of the identifier Android gives Kontrol on your phone. The original identifier is not sent, and the code is not linked to your name, your email or your financial data: it is useless outside this record.
• Nobody can list the records; each phone only reads its own.
• The identifier changes if you factory reset the phone, and the record then no longer matches your phone. Since it is not linked to you, we cannot identify it to delete it.
• Legal basis (GDPR): legitimate interest in preventing abuse of the free trial.

4Permissions and why

Notification access (optional): only if you turn on recording Google Pay payments; see section 3.4. No SMS, contacts, location or storage permissions are requested. To choose a photo the app uses the system picker, which gives access to that image and not to your gallery.

5How long data is kept

• On your phone: until you delete it or uninstall the app.
• In the cloud (only if you turned on backup): until you delete your account.

5.1 How to delete your account and your data

From the app (immediate): Settings › Delete my account and data. Kontrol asks you to choose your Google account again to confirm it is you, and at that moment deletes:

• your profile (name, email, photo, dates and subscription status),
• all your backed-up data (transactions, accounts, debts, goals, investments…),
• the photos of your debts, goals, transactions and receipts,
• your sign-in user.

Without the app: write to contacto@starslapse.com from your account's email address, with the subject "Delete my Kontrol Finance account". We reply to confirm and delete the same data as the in-app option within 20 business days. Instructions are also at https://kontrol-finance-app.web.app/en/delete-account.

What is kept: only the date your free month started, linked to your Google account's numeric identifier (without your name, email or financial data). It keeps the free trial from restarting if you create an account again. Google Play keeps its own record of your purchases, according to its own policy. The phone's free month record (section 3.8), which is not linked to your account, is also kept.

What is not deleted: the data on your phone, because it never left it. It is deleted when you uninstall the app or clear its data in Android settings.

Your subscription is not cancelled automatically when you delete your account: cancel it in Google Play › Payments & subscriptions.

6Your rights

At any time, without asking anyone:

• View and correct any data, from the app itself.
• Delete transactions, accounts or the whole app.
• Export your transactions to CSV, from Settings → Backup.
• Stop syncing by signing out. Your local data stays intact.
• Delete your account and your cloud data, from the app or by email (section 5.1).

To exercise your rights of access, rectification, cancellation and objection, write to the contact email.

6.1 If you live in the European Union, the European Economic Area or the United Kingdom

• Legal basis: we process your data to provide the app you asked for (performance of a contract) and, for the optional features (backup, receipt photos, Google Pay recording), with your consent, which you can withdraw at any time by turning them off.
• Your rights (GDPR): access, rectification, erasure, restriction, portability (the CSV export) and objection. Write to contacto@starslapse.com; we reply within one month.
• International transfers: the cloud backup is stored with Google Firebase, which may process data outside the European Union under the Standard Contractual Clauses approved by the European Commission.
• Complaints: you can lodge a complaint with the data protection authority of your country.

7Children

Kontrol Finance is not directed at children under 13 and does not knowingly collect data from them.

8Security

• The app's database is encrypted with SQLCipher (AES-256). Its key is random, unique to your phone, and protected by the Android Keystore; it never leaves the device.
• On top of that, device storage is already encrypted by Android.
• The PIN is stored as a salted hash, in encrypted storage.
• All traffic goes over HTTPS; the app refuses unencrypted connections.
• Android's automatic backup is turned off, so your financial data does not travel to Google Drive without your decision.

9Changes to this policy

If what the app does with your data changes, this document is updated and you are notified in the app before the change takes effect.