Privacy
Last updated 15 August 2026
Kinsum holds a household’s money in one place, which is about as personal as software gets. This says what is kept, who else ever sees it, and how to get rid of it. It describes what the app actually does today, not what it might do later.
Who this is
Kinsum is a small, independent product. Questions about anything on this page, including a request to see or delete what is held about you, go to hello@kinsum.co and are answered by a person.
What is collected
What you enter
- Your email address. It is the identity — there is no username and no password — and it is where sign-in links and invitations are sent.
- Your household. A family name, a time zone, a currency, and the people in it, including the names you give children who do not sign in.
- Your figures. Accounts and balances, what came in and what went out, budgets, bills, income, goals, and the notes and categories attached to any of them.
What connecting a bank adds
Only if you choose to connect one. Bank credentials are entered on your bank’s own page through Plaid and never reach Kinsum: what arrives here is account balances and transaction history, plus a token that lets the connection be refreshed. There is no path by which a password could be received, because none is ever sent.
What photographing a receipt does not add
The photograph is read in one request and forgotten. It is not written to the database, not uploaded to storage, and there is no album of your shopping anywhere: what is kept is the four fields the entry needed — merchant, amount, date, category — exactly as if you had typed them.
What the site itself collects
One cookie, kinsum_session, set when you sign in. It holds a random token and nothing about you, is unreadable to scripts on the page, and expires after thirty days. There is no analytics, no advertising, no tracking pixel, and nothing that follows you to another site. Joining the waiting list stores the address you typed and the fact that you typed it, and nothing else.
Who else sees it
Four companies, each doing one job, and none of them given anything beyond what that job needs. Nothing is ever sold, and nothing is shared for advertising.
- Cloudflare runs the app and holds the database. Everything above lives there.
- Resend delivers the email — sign-in links, invitations, waiting-list confirmations. It receives the recipient’s address and the message. Messages are sent through Resend’s United States region.
- Plaid connects the bank, only for a family who connects one. It is the party your credentials are entered with; Kinsum receives balances and history from it.
- Google reads the photographs, through the Gemini API, only when someone photographs a receipt or a bill. The picture is sent, the four fields come back, and it is not kept here. Google applies its own retention to API requests, and on its free service tier may use them to improve its models — so a receipt showing something you would rather no model ever saw is one worth typing in by hand.
Beyond those, information is disclosed only where the law requires it, and only what it requires.
How long it is kept
- Your ledger is kept until you delete it. That is the point of it: a record that expires is not a record.
- A sign-in link works once and for twenty minutes, and is marked spent the moment it is used.
- A signed-in browser is remembered for thirty days, and signing out ends it immediately.
- A waiting-list address is kept until there is room for you or until you ask for it to be removed.
Deleting everything
Write to hello@kinsum.co from the address you sign in with and the household and everything in it is deleted, including anything Plaid holds for the connection. There is no self-service button for this yet, and rather than imply otherwise: it is a person doing it, within thirty days and usually the same week.
Individual entries, budgets, goals, people and bank connections can all be removed from inside the app at any time, and removing a bank connection ends Plaid’s access to that account.
Your rights over it
Depending on where you live you have the right to see what is held about you, to correct it, to have it deleted, to object to how it is used, and to receive a copy of it in a portable form. All five are exercised the same way — email the address above — and none of them costs anything or requires a reason. If a request cannot be met, you will be told why.
Where it is
The app runs on Cloudflare’s network and its database is hosted by Cloudflare. Email is sent through Resend’s United States region, and Plaid and Google process requests on their own infrastructure. If you are in the United Kingdom or the European Economic Area, this means information about you is transferred outside it, under the safeguards those providers publish for such transfers.
Children
A child in Kinsum is a name and a pocket-money figure entered by an adult in the household. Children do not sign in, are not asked for anything, and Kinsum does not knowingly collect information directly from anyone under 16.
Changes
If this page changes in a way that matters, the date at the top changes and the families using Kinsum are emailed. It will not change quietly.
The short version: your email, your figures, one cookie that only signs you in, four companies each doing one job, no photographs kept, no advertising, and an address that deletes the lot.