Conto Privacy Policy

Last updated: August 4, 2026 · Español

Conto is a personal finance app. This policy explains what data the app handles, what for, and how you can delete it. The principle is simple: your data is yours, you're the only one who sees it, and you can delete all of it, at any time, from the app itself.

Data we collect

• Account: your email address and password (to sign in and to recover it). The password is stored encrypted; nobody, us included, can read it.
• The financial data you enter: transactions (name, amount, date, category), accounts and cards, recurring rules, installment purchases and savings balances. We never connect to your bank: the only data that exists is what you type or what you bring in yourself (see "Reconciling your statement").

We don't collect location, contacts, advertising data or tracking identifiers. The app has no third-party analytics and no ads.

Where it's stored

Your data is stored in our database (Supabase, on AWS infrastructure in the U.S.), encrypted in transit and isolated per user: each account can only read and write its own records. A local copy is also kept on your device so the app works offline.

Quick capture with AI

If you use quick capture (typing a sentence like "uber to the airport 320"), that sentence and a summary of your spending patterns (the names, categories and accounts you use) are sent to Anthropic's API (Claude) to classify the expense automatically. Anthropic does not use data sent through the API to train its models. You can skip this feature and enter everything by hand.

Reconciling your statement

If you use reconciliation, you pick a PDF of your card statement and that file is sent to Anthropic's API (Claude) to read the charges and compare them against what you already recorded. The PDF is not stored: it is processed and discarded. All that remains is the result you see on screen, the transactions you choose to add, and a few notes about your bank's format (how it lays out its columns) so the next read comes out better. This is a feature you start: without reconciling, no statement ever leaves your phone.

Who we share it with

Nobody. We don't sell or share your data with third parties. The only providers that process it so the app can work are Supabase (database and authentication) and Anthropic (quick capture and reconciliation only, as described above).

Deleting your account and your data

In the app: Settings → Account → Delete account. This permanently deletes your account and all of your data from the server (transactions, accounts, net worth, everything), with no extra steps and no need to contact support. Signing out also removes the local copy from the device.

Retention

We keep your data for as long as your account exists. When you delete it, the data is removed from the database immediately.

Contact

Questions about this policy or your data: conto@stonework.io.

Changes

If this policy changes, we'll update this page and the date above.