Privacy Policy
Effective date: October 2, 2026 Last updated: October 2, 2026
Klovo ("we," "us," or "our") provides the Klovo mobile application (the "App" or "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By creating an account or using Klovo, you agree to this Privacy Policy.
If you don't agree with this policy, please don't use Klovo.
1. Information We Collect
Information you provide to us
- Account information. A phone number or email address (used to sign you in via a one-time code — Klovo does not use passwords), and a display name. By providing your phone number, you consent to receive SMS text messages from Klovo containing one-time passcodes for signing in and verifying your account. Message frequency depends on your sign-in activity; message and data rates may apply.
- Payment handle. Optionally, your Venmo username, so friends can pay you back directly through Venmo.
- Ledger and expense information. Anything you or people you share a ledger with add: ledger names, expense titles, amounts, currencies, categories, dates, who paid, who owes, settlement records, and any notes attached to a payment.
- Contacts (optional). If you grant Klovo permission to access your contacts, we may use them to help you find friends who are already on Klovo. We do not access your contacts unless you grant this permission, and you can revoke it at any time in your device settings.
- Communications. If you contact us for support, we collect what you send us (e.g., your email and the content of your message).
Information collected automatically
- Device and usage information. Device type, operating system, app version, and general usage/diagnostic data, collected to keep the app working and to fix problems.
- Push notification token. A token issued by Apple/Google's push notification services (relayed through Expo's push service) so we can deliver notifications to your device — for example, when someone adds an expense or settles up in a ledger you share.
- Crash and error data. If the app crashes or hits an unexpected error, we collect technical diagnostic information (e.g., a stack trace, device model, OS version, and app version) through our error-monitoring provider to help us fix it. We do not configure this provider to collect your IP address, and we tag diagnostic events with an internal account identifier only — never your name, email, or phone number.
- Server logs. Like most online services, our infrastructure providers automatically log standard technical information (such as IP address, request timestamps, and device/browser type) as part of operating the Service securely and reliably.
Information we do NOT collect
Klovo does not collect precise device location, and we do not process, transmit, or store any payment card, bank account, or other payment credential information. Klovo is not a payment processor — see Section 3 for how settling up through Venmo works.
2. How We Use Information
We use the information above to:
- Create and maintain your account, and authenticate you via one-time codes sent by SMS or email;
- Operate the App's core features: shared ledgers, expense tracking, currency conversion, balance calculation, and settle-up;
- Send you push notifications you've opted into (e.g., a friend added an expense, someone settled up, you were added to a ledger);
- Help you find friends already on Klovo, if you've granted contacts permission;
- Diagnose and fix bugs, crashes, and performance issues;
- Respond to support requests, including, when necessary, by accessing your account data directly through our database and backend tools to investigate or resolve the request;
- Detect, prevent, and address fraud, abuse, or security issues; and
- Comply with legal obligations.
3. How We Share Information
We do not sell your personal information, and we never have.
We share information only in the following circumstances:
- With other members of your shared ledgers. Your display name and the expense/settlement activity you add to a shared ledger are visible to the other people in that ledger. Your phone number and email address are never shown to other users — they're used only for signing you in and for account-recovery/notification purposes.
- With service providers who help us run Klovo, under contractual obligations to protect your information and use it only to provide services to us:
- Supabase — our database, authentication, and backend infrastructure provider, which stores your account and ledger data.
- Twilio — delivers the SMS one-time codes used to sign in with a phone number. Your phone number and SMS consent are never shared with any third party for marketing or promotional purposes.
- Resend — delivers the email one-time codes and notification emails used to sign in or verify an email address.
- Expo — relays push notifications to Apple's and Google's push notification services.
- Sentry — provides crash and error monitoring, as described in Section 1.
- Apple — delivers push notifications to iOS devices and provides App Store distribution.
- Venmo — but we don't send Venmo your data. When you choose to settle up via Venmo, Klovo opens the Venmo app (or a web page) on your device with a pre-filled amount and note. This happens locally on your device — Klovo does not transmit your information to Venmo, and Venmo's own handling of any information you provide it directly is governed by Venmo's own privacy policy, not this one.
- For legal reasons. If required to by law, subpoena, or other legal process, or if we believe in good faith it's necessary to protect the rights, property, or safety of Klovo, our users, or the public.
- In a business transfer. If Klovo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy (or a policy at least as protective).
4. Your Choices and Rights
- Access and update your information. You can update your display name, Venmo username, phone number, and email directly in the app's account settings.
- Notification preferences. You can turn off push notifications, or specific categories of them, in the app's notification settings, or at the OS level in your device's Settings app.
- Delete your account. You can permanently delete your account at any time from within the app (Account → Delete account). This removes your login and personal profile information. Because Klovo's shared ledgers are, by nature, shared with other people, expense and settlement history you were part of remains visible to the other members of those ledgers, but is shown under a generic "Deleted User" label instead of your name.
If you're in California
Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to:
- Know what personal information we've collected, used, and disclosed about you;
- Delete personal information we've collected from you (see "Delete your account" above);
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information — though as noted above, we don't sell or share your personal information for cross-context behavioral advertising, so there's nothing to opt out of;
- Limit the use of sensitive personal information, to the extent applicable; and
- Not be discriminated against for exercising any of these rights.
To exercise these rights, delete your account in-app or contact us at support@klovoapp.com. We may need to verify your identity before completing certain requests.
If you're in the EEA, UK, or Switzerland
Under the GDPR/UK GDPR, you have the right to access, rectify, erase, restrict the processing of, or port your personal data, and to object to certain processing. Our legal basis for processing your information is primarily the performance of our contract with you (i.e., providing the Klovo service you signed up for), our legitimate interests (e.g., keeping the service secure and working), and, for optional features like contacts access, your consent.
You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us at support@klovoapp.com.
5. Data Retention
We retain your account information for as long as your account is active. If you delete your account, we delete your personal profile information; shared-ledger activity you were part of is retained (under a "Deleted User" label, as described above) for as long as the ledger itself exists, since it's part of other users' own shared records. We may also retain limited information as required by law or for legitimate business purposes such as fraud prevention.
6. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, however, and we can't guarantee absolute security. You are responsible for the security of your information when using an unencrypted, public, or otherwise unsecured network, and for keeping your device itself secure.
7. Children's Privacy
Klovo is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe a child under 18 has provided us with personal information, please contact us at support@klovoapp.com and we will take steps to delete it.
8. International Data Transfers
Klovo's infrastructure is operated in the United States. If you're accessing Klovo from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country of residence.
9. Changes to This Policy
We may update this Privacy Policy at any time, effective immediately upon posting the updated policy, whether or not you have visited the App or reviewed the changes. Your continued use of Klovo after an update is posted means you accept the updated Privacy Policy. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact Us
Questions about this Privacy Policy or your information? Contact us at support@klovoapp.com.