Privacy
Short and to the point: what Kopi stores, where it goes and how to delete it all.
The main thing. Your spending is seen by you and — according to your settings — your family. Data is not sold or shown to anyone else. You can export or delete everything in the app: Profile → “Data”.
What is stored
- Your Telegram ID and name — to recognize you.
- The expenses and income you entered: amount, category, store, description, receipt items.
- Settings: currency, budget, payday, language, evening summary; piggy banks, shopping list, "store → category" rules.
- If you're in a family — your role and family link; for kids — pocket money.
- The PIN is stored only as a hash: it can't be recovered from the database.
- In group funds (class fund, gift collection, etc.) — the name, member list, contributions, purchases and receipt photos the treasurer attached to purchases. They are visible to the treasurer and fund members, and to anyone the treasurer shares the report link with.
What is not stored
- Receipt photos, screenshots, statements and voice messages. They are needed only for recognition and are not kept afterwards. The exception is receipts the treasurer moved or attached to a group fund.
- Bank passwords and card details — Kopi never asks for them and never connects to your bank.
Who data is shared with
- DeepSeek — text messages about expenses and receipt photos are sent for recognition if DeepSeek is enabled in the bot. It is a service from China: the data is processed on its servers.
- Groq — voice messages are transcribed into text (the Whisper model) if speech transcription is enabled in the bot. The text is then processed like a typed message.
- Google Gemini — voice messages and statements are sent for recognition if Gemini is enabled in the bot (texts and photos too, when DeepSeek is not). On the free tier of the Gemini API, Google may use the submitted content to improve its services. If that matters to you, enter expenses as text without extra details.
- Telegram — the chat with the bot and the mini app run through it.
- No one else. No ads and no third-party analytics.
Who sees your spending in a family
Shared expenses are seen by members whose role allows it. Only you see your personal expenses; in "One shared budget" mode they count toward the family total as a single "Personal" line, without details. A child's expenses are seen by adults with the "Manage kids" permission.
How long it's kept
As long as you use Kopi. After deletion, data disappears from the database immediately and from backups within 7 days.
Your rights
- Export all your data as a CSV file: app → Profile → “Export my data”; the file arrives in the chat with the bot.
- Delete everything for good: app → Profile → “Delete all my data”. You'll leave the family, and your expenses will also be removed from the family history.
- Protect the mini app with a PIN: Settings → PIN.
Contact
via the bot: the /privacy command
Updated: October 23, 2026.