Effective 3 October 2026
Your money stays yours.
This policy explains how the current Kasmora mobile app handles data. We keep the language direct so you can understand what leaves your device and what does not.
What Kasmora stores
Kasmora stores transactions, categories, goals, notes, and preferences on your device. You can record transactions offline. When you sign in and use account sync, your transactions, categories, goals, and related notes are also sent to Loomora's servers so the account can access them across devices.
What we collect
Account features process your email address, account identifier, profile information, authentication credentials, and financial records you sync. Our email provider, Resend, processes your email address to deliver sign-in codes. Server infrastructure processes requests and operational logs to run the service. The app does not include advertising or analytics SDKs or cross-app tracking.
Backup and sharing
Kasmora can create a local JSON backup when you ask it to. The backup is not encrypted by Kasmora. If you share or store that file through another app or cloud service, that provider’s privacy terms apply. Android cloud backup is disabled for Kasmora’s private app storage.
Your control
You can remove local financial records from Kasmora's settings. Uninstalling the app removes local app data, but does not delete an online account or server records. Exported backups remain wherever you saved them. You can permanently delete your account and synced server records from the Account screen, or verify your email at kas.heyloomora.com/delete-account. This also revokes existing sessions. Account data on the device where you delete in-app is removed; other device copies and exported backups must be removed separately. Local recording can be used without creating an account.
Security
Kasmora uses the app sandbox and device security controls for local data, native secure storage for account sessions, and HTTPS for production account and sync requests. Financial records on the device and exported JSON backups are not encrypted by Kasmora. Keep your device locked and treat exported files as sensitive information.
Children
Kasmora is a personal finance product for adults and is not directed to children. We do not knowingly collect personal information from children.
Policy changes
We may update this policy when Kasmora’s data practices change. The effective date on this page will identify the latest version.
Account deletion
Contact
Questions about this policy can be sent to support@heyloomora.com.