Privacy Policy
Last updated: October 22, 2026
Kilter Money is a personal-finance app for tracking spending, income and budgets. It's made by BTIME LTDA, a company based in Brazil ("we", "us"). This policy covers the Kilter Money app on the web, iOS and Android, this website, and the Kilter Money connector for AI assistants like ChatGPT and Claude. It explains what data we collect, why, who receives it, how long we keep it, and what you can do about it.
The short version: you type in your own numbers, we store them so the app works, and we don't sell them or use them for ads. We never connect to your bank. An AI assistant only sees your data if you connect it yourself, and only what a tool returns when you ask for something.
What we collect
- Account info. Your email address and, if you add one, your name. You sign in with a one-time code we email you or with Google. Regular accounts don't have a password. While a sign-in code is waiting to be used we store a hashed copy of it.
- Settings. Your currency, language, and choices like whether budgeting is turned on.
- Financial data you enter. Categories, budgets, recurring bills and income, one-off expenses and income, notes, and receipt photos you attach. For an expense that's its title, amount, date, category (or how it's split across categories), note, and the card it went on. If you add credit cards, we keep the nickname you give each one, its network (like Visa), optionally its last 4 digits, its statement closing and due days, and which purchases and card payments you've marked as paid. We never ask for or store a full card number, a bank login or a government ID. There is no bank linking or transaction import.
- Household sharing. If you invite someone, we store their email address and the invite until it's used or withdrawn, and then their membership in your household.
- Subscription status. If you subscribe, your plan, its status, renewal date and which store it came from. Stripe (on the web) or the App Store and Google Play (through RevenueCat, in the mobile app) take the payment. We never see your payment card.
- AI assistant connections. If you connect an assistant, we store the name the assistant registered with, the permissions you granted, and hashed access tokens with their expiry dates. See AI assistants below.
- Usage counters. How many receipt scans and spoken entries you used each day (for the daily limit), how many AI tokens your account used each month, and when you last logged an entry. These are counts and dates only, with no amounts or text.
- Messages you send us. Your email address and message when you use the support form or join a waitlist.
- Server logs. Our hosting provider keeps standard request logs (such as IP address, time and which endpoint was called) and our error logs. They don't include your financial entries.
We don't use analytics, advertising trackers or tracking cookies in the app or on this website. The app keeps a copy of your data in your browser or device storage so it opens quickly and works offline. Signing out of the web app doesn't clear it from that browser, so use your own device.
How we use it
- To run the app: show your dashboard, budgets and bills, and sync between your devices and household.
- To sign you in and keep your account secure.
- To fill in an entry from a receipt photo or from what you said, when you use Scan or Speak.
- To answer requests from an AI assistant you connected.
- To manage your subscription.
- To send you sign-in codes, invites and account notices. We don't send marketing email unless you ask for it.
- To answer support requests, prevent abuse (for example the daily scan limits) and fix bugs.
- To see in aggregate how many accounts sign up and stay active. Our internal admin tool shows account status and dates, never amounts, entries or notes.
We don't use your financial data to train AI models, and we don't sell it or use it for advertising.
Who receives your data
- Google Firebase and Google Cloud store your data, handle sign-in and run our server code.
- Anthropic reads receipts and spoken entries. When you use Scan, we send the receipt photo to Anthropic's API (Claude) so it can read the lines. When you use Speak, we send the text of what you said. With either one we send your category names and, for Speak, your card nicknames and last 4 digits and your recurring bills' and incomes' names and amounts, so it can match what you said to them. Under Anthropic's commercial terms, API data isn't used to train its models. Turning your speech into text is done by your device's or browser's own speech service, under that provider's terms.
- SendGrid (Twilio) delivers our emails, so it receives your email address and the email's contents.
- Stripe, RevenueCat, Apple and Google handle subscription payments and tell us your subscription status.
- The AI assistant you connect, such as OpenAI (ChatGPT) or Anthropic (Claude), receives the results of the tools it calls on your behalf. See AI assistants.
- People in your household see and edit the shared data, if you use household sharing.
- Authorities, only when the law requires it.
AI assistants (ChatGPT, Claude and other MCP clients)
Kilter Money has an optional connector, built on the Model Context Protocol (MCP), that lets an AI assistant read and log data in your account when you ask it to, for example "log a $12 coffee" or "how's my budget this month?" It does nothing until you connect it yourself.
- How you connect. You add Kilter Money from the assistant's app or connector directory, then sign in and approve access on a page hosted by Kilter Money (standard OAuth). The assistant never sees your sign-in code or Google password.
-
What it can reach. Only your own account, or your
household's if you share one. Never anyone else's data. Access is
split into two permissions shown on the approval page:
finances:readto view your entries, budgets, bills, cards and summaries, andfinances:writeto add expenses, income and recurring bills, create or edit budgets and categories, and delete expenses. - When data is sent. Only when the assistant calls a tool in response to your request, and only that tool's result. There's no background sync or bulk export to any AI provider.
- What the provider does with it. Once a result reaches the assistant, it becomes part of your conversation there and is handled under that provider's own privacy policy (for example OpenAI's or Anthropic's), including how long the chat is kept and whether it's used to improve their models.
- How to stop. Disconnect from Connect AI agent in the app's menu, or from the assistant's own connector settings. It takes effect immediately. Data the assistant already received stays in your chats until you delete them there.
Every tool, what the assistant sends to it, and what comes back:
| Tool | The assistant sends | Kilter Money returns |
|---|---|---|
get_financial_summary |
A month (optional) | Your currency; that month's income total, spending by category, fixed bills compared with income, each budget's allocated and spent amounts, on-track status, the change from last month, and what you owe on each card with its next due date |
list_expenses |
A month (optional) | Each expense's title, amount, date, category or split, note, card nickname, whether it has a receipt (not the image) and, for card purchases, when it was paid |
list_recurring_bills |
A month (optional) | Each bill's name, amount, category, schedule, start and end dates, card, that month's due dates and installment progress |
list_categories |
Nothing | Category names, type (spending or fixed), whether archived, and the budget each belongs to |
list_budgets |
Nothing | Budget names, percent of income or fixed amount, and their categories |
list_cards |
Nothing | Card nickname, network, last 4 digits (if you added them), closing and due days, how it's usually paid, what's owed and the next due date |
add_expense |
Title, amount, date, category or split, note, card, and whether it's already paid | The saved expense |
add_income |
Name, amount and date | The saved income |
create_recurring_bill |
Name, amount, category, schedule, start date, and optionally a card and note | The saved bill |
delete_expense |
Which expense | The deleted expense's title, amount and date. The expense and its receipt photo are permanently removed |
create_budget, update_budget,
delete_budget |
Budget name, percent or amount, and which categories it covers | The saved budget, or which categories were left without one |
create_category,
update_category |
Category name, type, budget, whether it's a need or a want, and whether it's archived | The saved category |
Results also carry internal ids (like a category's id) so the assistant can refer back to a record. They never include your email address, name, account or user ids, receipt photos, timestamps of when records were created, or payment details. We don't keep a copy of your conversations with the assistant. We only see the tool calls it makes, and we don't log what they send or return.
How long we keep it
- Your account and financial data: until you delete it. Deleting an entry removes it right away. Deleting your account removes all of it, including receipt photos, household invites and AI connections, and frees anyone you invited to keep using the app on their own.
- Sign-in codes: expire after 10 minutes and are removed with your account.
- AI connections: an approval code lasts 5 minutes, an access token 1 hour, and a refresh token 90 days (replaced each time it's used). Expired and disconnected tokens stop working right away and are removed with your account.
- Usage counters: removed with your account.
- Subscription records: we keep your plan and status after your account is deleted, as a billing record. Stripe, Apple, Google and RevenueCat keep their own payment records under their policies.
- Support messages and waitlist sign-ups: until we've dealt with them, or until you ask us to delete them.
- Server logs: about 30 days, under Google Cloud's default retention.
We don't keep backups of your data, so once deleted it can't be recovered.
Your controls and rights
- See and correct: everything you entered is in the app, where you can edit it.
- Delete: remove single entries, or go to My account, Danger zone, to start over with Reset account or delete your whole account. See how to delete your account, which also works by email if you can't sign in.
- Disconnect AI assistants: from Connect AI agent in the app's menu, at any time.
- Get a copy: email us and we'll send you your data in a common format.
- Other rights: depending on where you live (for example under Brazil's LGPD, the GDPR or California law), you may also have the right to know how your data is handled, object to or restrict a use, or complain to a data protection authority. Email us and we'll answer within 15 days.
Where it's stored and how it's protected
Your data is stored by Google Cloud in the United States. Traffic is encrypted in transit, and Google encrypts stored data. Our security rules only let a signed-in user, or a member of their household, read or write their own account. Sign-in codes and AI access tokens are stored as hashes, never in plain text. Receipt photos are limited to images under 5 MB and aren't publicly accessible.
Children
Kilter Money isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has an account, email us and we'll delete it.
Changes to this policy
If this policy changes, we'll update the date at the top. For significant changes we'll also tell you in the app or by email before they take effect.
Contact
BTIME LTDA, Brazil. Questions about this policy or your data: hello@kiltermoney.com.