Privacy Policy
Korelda keeps your figures on your phone. If you subscribe to Korelda Plus they are also kept in your account, so they are the same on every device you sign in on and survive a lost phone. This policy explains where they are held, who can reach them, and what is optional.
Korelda is made and run by Korelda Pty Ltd (ACN 702 693 776, ABN 68 702 693 776), an Australian company. “We” and “us” in this policy mean that company.
1. The short version
Korelda has an account, and your figures live on your phone. On the free tier they are stored nowhere else. A few things do leave the phone, each explained below: the payee names in a statement you import, if you turn on AI tidying; the ticker symbols of shares and crypto you hold, so they can be priced; your support messages; and, if you connect a bank, what your bank shares, which passes through our server in Sydney. Korelda Plus also stores your figures in your account, so they are the same on every device you sign in on. Those are held in Australia, and the database is set up so that each account can read only its own rows.
We do not sell or share your information, and there is no advertising or tracking in the app. Two features send text to Anthropic and nothing else does: AI tidying, which is off until you turn it on, and the assistant that answers your first support message. Neither of them can see your figures.
2. Your account
You can sign in with Apple, with Google, or with a code sent to your email address. Signing in with Apple lets you hide your real address, and Korelda works normally if you do.
The code is delivered by Resend, an email service that handles your address to send it and keeps no copy of your figures. Resend processes it outside Australia: Korelda's email is sent from its servers in Japan, and Resend is based in the United States.
We keep your email address and the name you give us. We never see or store your password: Apple, Google and the code check who you are and only tell us that it was you.
3. What is stored, and where
The accounts, properties and loans you add, your transactions, your bills, your budget and your name. Also the filing rules you make, anything you flag as a tax deduction along with the note and the percentage you give it, the sales you record for capital gains, the car trips you log, and the figures you enter against a rental property for a financial year.
All of it is stored on your device, and that is where it stays unless you subscribe to Korelda Plus. Your email address and your name are kept in your account either way, because that is what an account is.
With Plus, your figures are also stored in a database run by Supabase on servers in Sydney, Australia, encrypted in transit and while stored. The copy on your device remains, so the app works when you have no signal.
4. Who can see it
You. Every table has a rule in the database that filters every read and write by the account making it, so one person's request cannot return another person's rows.
We do not look at your figures. Korelda's app and support tools have no screen that shows them to us. The copy Korelda Plus keeps sits in a database run by Supabase, whose console could display it, and we do not use it to look at anyone's figures.
5. AI tidying, if you want it
Banks print payee names like SQ *THE LITTLE MARIONETTE NEWTOWN. Korelda can tidy those into readable names and sort them into categories.
Your phone does this on its own by default. If you turn on AI tidying, pressing Tidy up on a statement you import asks a model run by Anthropic instead, for all the payee names in that statement. Korelda asks before this happens the first time, and you can change your mind under AI tidying in Settings.
If you turn it on, what is sent is the payee text exactly as your bank printed it, which can include the name of someone you paid or a reference, and Korelda's list of categories. Nothing else is added: no amounts, no dates, no balances, no account, and nothing from Korelda that identifies you. Anthropic processes it outside Australia, in the United States and in other countries where Anthropic runs its models, and does not use it to train their models.
6. Messages you send to support
Talk to us, in Settings, is a conversation with us inside the app. Your messages and our replies are stored in your account alongside the rest of your data, and only your account and Korelda support can read them.
The first reply comes from Claude, an AI assistant made by Anthropic. To answer, the text of your messages in that conversation is sent to Anthropic and processed outside Australia, in the United States and in other countries where Anthropic runs its models. Anthropic does not use it to train their models.
What is never sent with it: your accounts, balances, transactions, budget or bills. The assistant cannot see any of your figures, and it will tell you so rather than guess.
You can ask for a person at any time, and some questions go to one automatically. A message answered by a person is not sent to Anthropic at all.
Do not put anything in a support message you would not want read by us, in the same way you would not put it in an email.
7. Market prices
If you hold shares or crypto, Korelda asks a public market data service for the current price of the ticker symbols you have added, so the holding can be valued.
That request contains the ticker symbol and nothing else. It is the same request anyone looking up that price would make. When you search for a share or a coin to add, the words you type are sent to the same service to find it.
The logo shown beside a holding is bundled with the app, so showing it sends nothing anywhere. No other request is made on your behalf.
8. Photos you add
A receipt you attach to a payment, and a picture you put on your profile, are saved on your device and nowhere else. They are not uploaded, not with Korelda Plus and not without it, and nothing in the app reads them except the screen you attached them to.
A receipt is scanned on your phone to straighten it and to read the total, so Korelda can say when a receipt and a payment disagree. That happens on the device and the result goes nowhere.
Deleting the payment deletes its receipts with it.
9. What we do not do
Korelda has no analytics, no advertising, no tracking and no third-party SDKs collecting behaviour. Nothing records which screens you open or what you tap.
We do not sell, rent, share or profile your information.
10. Connecting a bank
You can add accounts by hand, or import a CSV or PDF statement you download from your bank yourself. Bank feeds, which bring your accounts and payments in from your bank, are being introduced and are not open to everyone yet.
A bank feed works through Fiskil, an accredited data recipient under the Consumer Data Right. You give your consent on Fiskil's pages and your bank shares with Fiskil. Korelda never sees your banking password or reaches your bank's systems. To set you up at Fiskil, Korelda gives Fiskil your email address and name.
What your bank shares, your accounts, their balances and your completed payments, is handled under the Consumer Data Right as set out in Fiskil's Consumer Data Right policy, at fiskil.com/legal/cdr-policy. In short: it is used only to show you your own money, it stays in Australia, it is never sold, shared or passed to an AI, and it is deleted from your phone and your account when you disconnect. If your consent ends another way, for example it expires or you withdraw it with your bank, it is deleted from our server as soon as Fiskil tells us, and from your phone the next time you open Korelda.
Korelda keeps a record of each bank-feed request for six years, as the Consumer Data Right rules require: what was asked for, when, whether it worked and how many accounts or payments came back. The record never holds the accounts, balances or payments themselves.
Institution names and logos are bundled with the app so a list can show which bank an account is at. Choosing one sends nothing anywhere.
11. Notifications
Bill reminders are scheduled locally by your device. They are not sent from a server and their content does not leave the phone.
12. Deleting your account
Delete account, under Log out in Settings, erases your account and everything stored for it. It is immediate and it cannot be undone.
Any other phone signed in to your account erases its copy too, the next time it is opened and can reach us. So that it can find out, Korelda keeps one record of the deletion: your account's random id and the date. The id on its own identifies nobody. The only other things kept are the record of bank-feed requests described under Connecting a bank, if you connected one, for its six years, and, if a bank consent could not be ended straight away, your Fiskil account id until it has been.
If you signed in with Apple, Korelda also tells Apple to revoke the sign-in, so Korelda stops appearing in the list of apps using your Apple ID. If you connected a bank, your consents are ended and Fiskil is told to forget you first.
Korelda keeps no backups of its database, so nothing of your account is left behind in one.
13. Children
Korelda is not intended for anyone under 18 and is not designed to collect information from children.
14. Your rights
Australian privacy law gives you the right to see what we hold about you, to correct it, and to have it deleted. Most of this is in the app already: your figures are on your screen, editable, and Delete account removes all of it.
If you want a copy in another form, or you think something is wrong, contact us through Talk to us in Settings.
15. Changes
If a future version of Korelda handles information differently, this policy will be updated before that version ships, and the date above will change.
16. Contact
Privacy questions can be sent through Talk to us in Settings, or by email to arnaud@korelda.com.