Privacy

What we keep

Your first name, your email address, an encrypted password, and the contents of your groups: expenses, amounts, participants, repayments. Nothing else, apart from the sign-in log described below. No bank details, no postal address, no phone number.

Two images are added if you upload them, and only then: a receipt photo, and your avatar photo. Neither lives at a public address: they are only served to the members of the group concerned, and you can remove them at any time.

Who has access

The members of your groups see the expenses of those groups. Nobody else. Your data is neither sold, nor transferred, nor used for advertising purposes.

Sign-in security

Every attempt to sign in to an account leaves one line: the date, the email address presented, your IP address, and the result. That is what makes it possible to tell whether an account has been targeted by an attack, and nothing else: these lines are never used for advertising or analytics. They are deleted after 12 months.

Trackers

Kotisso sets a session cookie to keep you signed in, and a technical cookie for live updates. No advertising tracker, no third-party analytics.

Your rights

You can view, correct or have your data deleted at any time. Write to team@kotisso.com.