Privacy Policy
At krymoralex, we understand that managing your personal finances requires trust. This privacy policy explains how we collect, use, store, and protect your information when you use our expense tracking platform and related services.
Information We Collect
Account Information
Your name, email address, phone number, and password when you create an account. We also collect profile preferences and communication settings you choose.
Financial Data
Expense records, transaction categories, budgets, and spending patterns you input into our platform. We never store your bank passwords or account credentials.
Usage Information
How you interact with our platform, including features used, time spent, and device information. This helps us improve your experience.
Communication Records
Messages you send us through support channels, feedback forms, and any correspondence related to your account or our services.
Automatic Data Collection
Our platform automatically collects certain technical information when you visit. This includes your IP address, browser type, operating system, and referral URLs. We use cookies and similar technologies to enhance functionality and remember your preferences.
How We Use Your Information
We use your information primarily to provide and improve our expense tracking services. This includes processing your transactions, generating spending reports, and sending you relevant notifications about your financial activity.
- Providing personalized expense tracking and budgeting tools
- Generating financial reports and spending insights
- Sending account notifications and security alerts
- Improving our platform based on usage patterns
- Responding to customer support inquiries
- Complying with legal and regulatory requirements
We never sell your personal financial data to third parties or use it for advertising purposes outside our own platform improvements.
Information Sharing and Disclosure
We maintain strict controls over your information and only share it in specific circumstances outlined below. Your financial data remains confidential and is never used for marketing by external companies.
Service Providers
We work with trusted third-party service providers who help us operate our platform. These include cloud hosting services, payment processors, and analytics tools. All providers are required to maintain the same level of data protection we provide.
Legal Requirements
We may disclose information when required by Australian law, court orders, or regulatory authorities. This includes compliance with the Privacy Act 1988 and Australian Consumer Law requirements.
Business Transfers
If krymoralex is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and ensure continued protection of your data.
Your Privacy Rights
Under Australian privacy law, you have several rights regarding your personal information. Here's what you can do and how to exercise these rights:
Request a copy of all personal information we hold about you. We'll provide this within 30 days in a readable format.
Ask us to update or correct any incorrect information in your account. Most corrections can be made instantly through your account settings.
Request complete deletion of your account and associated data. This action is irreversible and will permanently remove all your financial records from our system.
Download your financial data in a portable format that you can use with other services. Available as CSV or JSON export files.
Limit how we use your information while maintaining your account. Useful if you're temporarily inactive but want to preserve your data.
Data Security and Protection
We implement multiple layers of security to protect your financial information. All data transmission uses bank-level encryption, and your information is stored on secure servers located in Australia.
Technical Safeguards
Our platform uses AES-256 encryption for data at rest and TLS 1.3 for data in transit. We regularly update our security protocols and conduct quarterly security audits to identify potential vulnerabilities.
Access Controls
Only authorized personnel can access your data, and all access is logged and monitored. Our staff undergo regular privacy training and sign strict confidentiality agreements.
Incident Response
In the unlikely event of a data breach, we have procedures to contain the incident quickly and notify affected users within 72 hours. We also report breaches to the Office of the Australian Information Commissioner as required by law.
Data Retention and Deletion
We keep your information only as long as necessary to provide our services and comply with legal obligations. Different types of data have different retention periods based on their purpose and legal requirements.
- Active account data: Retained while your account is active
- Closed account data: Deleted within 90 days unless legal retention required
- Financial records: May be retained for up to 7 years for tax compliance
- Communication records: Deleted after 3 years unless ongoing support needed
- Usage logs: Anonymized after 12 months for analytics purposes
Important Note About Deletion
When you request account deletion, we permanently remove all personal identifiers. However, some anonymized data may be retained for statistical analysis and platform improvement. This anonymized data cannot be linked back to you personally.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our platform. Most cookies we use are essential for the platform to function properly, but we also use some for analytics and personalization.
Essential Cookies
These cookies are necessary for our platform to work. They enable core functionality like user authentication, session management, and security features. You cannot opt out of essential cookies while using our service.
Analytics Cookies
We use analytics cookies to understand how users interact with our platform. This data helps us improve features and identify areas for enhancement. You can opt out of analytics cookies in your account settings.
Managing Cookie Preferences
You can control cookie settings through your browser or our platform settings. Blocking certain cookies may affect some features, but core expense tracking functionality will remain available.
Third-Party Integrations
krymoralex integrates with several third-party services to enhance functionality. These integrations are designed with privacy in mind, and we limit data sharing to what's necessary for the specific feature.
Bank Connections
When you connect bank accounts, we use secure, read-only connections through regulated financial data providers. We never store your banking credentials and cannot access accounts beyond what you explicitly authorize.
Cloud Storage
Your data is stored with Australian-based cloud providers who meet strict privacy and security standards. Data remains within Australia and is subject to Australian privacy laws.
Analytics Services
We use privacy-focused analytics tools to understand platform usage. Personal financial data is never shared with analytics providers - only general usage patterns and technical information.
International Data Transfers
Your personal information is primarily stored and processed within Australia. In limited circumstances, data may be transferred internationally for specific services, but only with appropriate safeguards in place.
When international transfers occur, we ensure the destination country has adequate privacy protections or implement additional safeguards like standard contractual clauses to protect your information.
All international data transfers comply with Australian privacy law requirements and maintain the same level of protection as domestic storage.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our platform.
Minor updates, such as clarifications or contact information changes, may be made without individual notification. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
The effective date at the top of this policy indicates when the current version took effect. Previous versions are archived and available upon request for your reference.
Children's Privacy
Our platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from someone under 18, we will delete that information promptly.
Parents or guardians who believe their child has provided personal information to krymoralex should contact us immediately so we can remove the information and close any associated account.
Privacy Contact Information
Phone: +61 2 4407 8000
Address: 103 Bondi Rd, Bondi NSW 2026, Australia
Australian Privacy Rights
If you're not satisfied with our response to your privacy concern, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC). Visit oaic.gov.au or call 1300 363 992 for more information about your privacy rights under Australian law.