Kitty Keeper privacy policy
Kitty Keeper is made by Earthstorm Software. This policy explains what the app stores, what it sends to our server, and what you can do about it.
On your device
The kitties, people, amounts and notes you enter are stored on your phone or tablet. A kitty you don’t share never leaves your device.
Shared kitties
When you share a kitty, its contents sync through our server so everyone in it sees the same numbers. Before anything leaves your device, it’s end-to-end encrypted with a key that only the kitty’s members have. Our server stores it but can’t read names, amounts or notes, and neither can anyone with access to our hosting.
The server can see the ids of kitties, people and entries, when they changed, who is an admin and who holds the kitty cash, because it uses these to check who may change what.
Your devices
There are no accounts. Each install registers anonymously and gets a random id. We store which devices belong to you, each one’s platform and model (such as “SM-A366B”), when it last synced, and the name you gave it, encrypted so only your devices can read it.
If you save a recovery code, we store your keys encrypted with it. The code itself never leaves your device.
Subscriptions
Purchases go through Google Play. We store the purchase token Google gives us and check it with Google to see whether your subscription is active. We never see your payment details.
What we don’t do
We don’t ask for your email or phone number, and there are no ads, analytics or tracking. We never sell or share your data. The camera is only used to scan pairing QR codes, and the images stay on your device.
Where it’s kept, and for how long
Our server runs on Microsoft Azure in Germany. Server logs, which can include your IP address, are kept for 30 days to keep the service running and secure. If you don’t sync for 12 months, we erase your data.
Getting a copy of your data
“Download my data” in the app (on the list of kitties, tap the ⋮ menu, then Sync and devices) saves a file with what our server holds about you: your devices, the kitties you’re in, which subscription you have, and in each of those kitties your own entry and the entries your devices added or last changed. Everything else in those kitties is already in the app. The app unlocks what it has the keys for, so you can read it, and anything it can’t unlock stays encrypted, exactly as we hold it.
A few things are left out because they’re credentials rather than information about you: your encrypted keys, and your Google Play purchase token, which anyone holding could use to take over your subscription. Your purchase is in your Google Play account. Kitties you’ve left aren’t included: entries you added there stay, encrypted, as part of the other members’ records, and you’re no longer a member who can read them.
Deleting your data
“Delete my data” in the app erases your devices, recovery data, subscription record and kitty memberships from our server. See deleting your Kitty Keeper data for the steps and what’s kept.
Why we can’t handle requests by email
Kitty Keeper has no accounts: we never ask for your name, email address or phone number. So nothing on our server is linked to anything we could match an email to, and we have no way to check that the person writing to us is the person the data belongs to. Sending one person’s data to someone else, or deleting it on a stranger’s say-so, would itself be a breach of their privacy.
The only proof of who you are is your device. Each one holds a secret key that only the app has, and our server checks it. That’s why requests to see, download or delete your data have to be made in the app. If you email us, we’ll point you to the steps on this page.
If you’ve lost all your devices, set up Kitty Keeper on a new one with your recovery code, then use the app. Without a recovery code, no one, including us, can link the data to you, and it’s erased automatically once none of your devices has synced for 12 months.
Your rights
Under the GDPR you have the right to access, correct or erase your data, and to object to how we use it. Use “Download my data” and “Delete my data” in the app, as above. You can correct names, amounts and notes in the app itself, since only your devices can read them. For anything else, such as objecting to how we use your data or a question about this policy, email support@earthstormsoftware.com.
We use your data to provide the service you asked for (performing a contract) and to keep it secure (legitimate interests). You can also complain to your data protection authority.
Who we are
Earthstorm Software. Email: support@earthstormsoftware.com.
Changes
We’ll update this page if anything changes. Last updated: 23 October 2026.