How Konnie handles household data.

Data Konnie may collect

Depending on what you use, Konnie may process:

• account details such as email address, authentication identifiers, display name, app account status, and subscription entitlement status;
• household details such as household name, invite status, membership, member display names, region, currency, and app settings;
• household content such as budgets, categories, spending records, receipt totals and line items, notes, lists, reminders, events, spaces, household records, activity history, and audit-style change records;
• receipt scan information, including receipt photos, text read from receipts, corrected line labels, totals, merchant information, and review notes where receipt scanning or scanner reporting is used;
• support, feedback, and problem report messages, including optional contact details if you choose to provide them;
• content-free usage and reliability metrics where enabled, such as feature keys, app version, platform, optional feature toggle state, and hashed install identifiers;
• device, notification, crash, update, and security information needed to operate and protect the service.

How Konnie uses data

Konnie uses data to provide the app and keep the household picture working. This includes account access, household sync, spending and planning tools, receipt review, notifications, support, bug investigation, scanner improvement, subscription checks, abuse prevention, legal obligations, and product improvement.

Receipt photos become review drafts. Konnie may suggest or organise receipt lines, but users should check and edit receipt drafts before saving.

We do not sell your household information, receipts, or identifiable household data as part of Konnie's normal product model.

Household documents and vehicle records

Details and photos saved in Household documents and Vehicles are end-to-end encrypted for approved household phones. Titan Arch systems and storage providers receive encrypted copies, encrypted record envelopes, object size and integrity information, and access audit metadata. They do not receive the document keys or readable document content.

A record can be managed by the household or assigned to one primary member. Household records are available to approved household phones. An assigned record has its own key issued only to the named member's approved phones, so other household members cannot open its current synced copy.

Each approved phone receives its own encrypted copy of the household document key. When a phone is removed, Konnie blocks document transfer while the remaining approved phones rotate that key. Removing access cannot erase a document or key that was already downloaded to the removed phone.

Document recovery depends on a remaining phone that can open the record. If all authorised phones and their secure keys are lost, encrypted records may be unrecoverable. Do not use Konnie as the only copy of an official or essential document, and do not save passwords or account recovery codes there.

Archiving a record hides it from the normal Household Documents view but keeps its encrypted details. Removing an attachment requests deletion of its encrypted household copy from active service storage. Copies already downloaded to approved phones cannot be recalled, and backup, legal, security, or operational retention may still apply.

Konnie does not determine legal ownership of household documents or mediate disputes between household members. Users should review membership and approved phones when circumstances change. Titan Arch remains responsible for operating and securing the service in line with its legal obligations.

Read the Household Documents security and privacy statement.

Receipt scanner improvement

Receipt scanner improvement sharing is optional and starts switched off for each app install. You can choose to turn it on, and you can change that choice later in the app.

If scanner improvement sharing is on, or if you manually report a receipt scanner issue, Konnie may send an example receipt scan to Titan Arch. That may include receipt photos, text read from receipts, where receipt lines appear on the page, corrected receipt lines, merchant and total information, app version, device details, and details that help us understand scan problems.

We use shared receipt examples to investigate scanner problems, improve receipt reading, learn common receipt wording, and test future scan improvements. They are handled as private household data.

Who data may be shared with

Konnie data may be shared with:

• active members of your household for household-visible features;
• trusted service providers who help operate Konnie, such as sign-in, hosting, storage, notifications, app distribution, support, and issue handling;
• app stores and payment processors for subscription and entitlement checks;
• authorised Titan Arch people and systems where needed for support, security, scanner improvement, and product reliability;
• professional advisers, regulators, courts, law enforcement, or public authorities where required or permitted by law.

At launch, Konnie expects to use trusted providers for sign-in, hosting, storage, notifications, app distribution, support, and on-device receipt text recognition. No third-party AI provider is part of the production app data path at launch.

Retention

Konnie keeps personal data for as long as needed to provide the app, maintain household history, support subscriptions, resolve support issues, improve scan technology, meet legal obligations, and protect the service.

• Account and household data is kept while the account or household is active, unless deletion, legal, security, dispute, accounting, or household-history reasons apply.
• Encrypted Household Documents record details remain while active or archived. Removing an attachment requests deletion from active service storage, while downloaded copies and normal backup retention cannot always be recalled immediately.
• Shared receipt scan examples may be kept for up to 24 months for support, scanner improvement, quality testing, and common receipt wording improvements.
• Support, feedback, and user report messages may be kept for up to 24 months after the last action on the report.
• Basic usage metrics, where stored, may be kept for up to 12 months. Aggregated or de-identified feature statistics may be kept for longer.
• Billing, subscription, tax, and accounting records may be kept for the period required by law.

Export, correction, deletion, and rights

Konnie is designed so household data can be exported. The app supports CSV export for household spending, receipt lines, and activity where available. You can also contact Titan Arch about access, correction, export, or deletion requests.

If you are part of a shared household, deleting your account may not delete household content created by other members or records that the household still needs for shared history. Some data may also need to be retained for legal, accounting, security, dispute, or household-history reasons.

Archiving a Household Documents record is not deletion. Removing an attachment requests deletion of its encrypted copy from active service storage, but cannot remove copies already downloaded to approved phones.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal data, and to withdraw consent where processing is based on consent.

Request account or data deletion

For UK users, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. Please contact us first if you can, so we have a chance to resolve the issue.

Contact

For privacy, export, correction, deletion, support, or website requests, email:

support@titan-arch.com

The email button starts a privacy request subject line so it can be routed quickly.