Kosh is a personal finance app that works entirely on your phone. It collects no personal data, and it cannot send any: the app has no internet permission.
What Kosh keeps
Your accounts, transactions, budgets, categories, recurring payments and any receipts or documents you attach. They are stored in a database inside Kosh's private storage on your phone, and no other app can read them.
What leaves your phone
Nothing. Kosh does not declare the internet permission or the network-state permission, so Android itself prevents it from opening a connection. There is no account to sign in to, and no analytics, crash reporting, advertising or tracking of any kind.
Permissions
- Notifications (optional): budget and low-balance alerts you turn on. They are generated on the phone.
- Biometrics (optional): used for the app lock. Android handles the fingerprint or face check, and Kosh never sees biometric data.
- Kosh does not request camera, location, contacts, storage or internet permission.
Bank messages (SMS)
The version of Kosh on Google Play does not request SMS permission and never reads your messages.
The version distributed directly by the developer has an optional SMS capture feature, which is off until you turn it on. When it's on, Kosh reads incoming bank messages on the phone to find amounts and offers them to you as suggested transactions. Message text is not stored and never leaves the device.
Backups
A backup is a file that Kosh writes only to a location you choose. It never passes through any server. You can protect it with a passphrase. What happens to a backup file after that, such as copying it to a cloud drive, is up to you.
Deleting your data
Use Settings › Erase all data, or uninstall the app, to permanently remove everything Kosh holds on your phone. There is nothing to delete anywhere else, because Kosh never sends data anywhere. Backup files you have written are yours to delete.
Google Play
If you install Kosh from Google Play, Google handles the download and updates under Google's Privacy Policy. Google gives developers aggregate statistics, such as install counts. If you have chosen to share usage and diagnostics with Google, it may also provide anonymous crash reports. Kosh itself sends nothing to Google or to the developer.
Children
Kosh is intended for adults. It collects no data from anyone, including children.
Changes
Any change to this policy will be published at this address with a new effective date.
Contact
Questions about privacy: thedipeshpatel@gmail.com