Tessok helps you understand and plan your money. To do that, we handle some of the most personal information you have. This policy explains, in plain language, what we collect, why, where it is processed, who else is involved, and what control you have.
The short version:
- Your data is stored and processed in the EU, on servers run by OVHcloud.
- AI features run either on your device or on servers in the EU. We don’t use AI providers outside the EU.
- We never sell your personal data or your individual transactions.
- We create anonymous statistics about groups of at least 50 people, and you can opt out at any time.
- You can export or delete your data whenever you want.
1. Who we are
Tessok (“Tessok”, “we”, “us”) is provided by Krigstone OÜ, a private limited company registered in Estonia (registry code 17634803, registered address Tartu mnt 67/1-13b, 10115 Tallinn, Estonia). Krigstone OÜ is the controller of your personal data.
For anything about your data, write to privacy@tessok.com.
2. What we collect
Information you give us
- Account information: your name, email address, country, and year of birth. We ask for your year of birth only, not your full date of birth.
- Optional profile information: gender, marital status, number of children, education level, and region or city. You never have to provide these. We use them to compare your spending with similar households and in anonymous group statistics (see section 4).
- Financial information you add: accounts, cards, and wallets you create; transactions you enter, import, scan, forward, or dictate; receipts and their contents; categories, splits, descriptions, budgets, savings goals, debts, and subscriptions.
- Files you upload or forward: receipt photos and PDFs, bank statements, and e-receipts you forward to your Tessok email address.
- Voice entries: when you add a transaction by voice, your phone converts speech to text. Speech recognition runs only on your phone, so the audio never leaves it, and we receive only the resulting text. Voice entry is available only on phones that support on-device recognition.
- Support requests: the messages and attachments you send to our support team.
- Shared accounts: when you invite someone to a shared account, their email address.
Information created when you use Tessok
- Location of purchases: the store address printed on a receipt, and, if you allow it, your phone’s position at the moment you scan a receipt. We use your position only to find the store you are in. We discard the exact position immediately and keep only the store’s location. We never track your location in the background. See section 5.
- Security and audit records: sign-ins, devices, IP addresses, and changes to your account and data. We keep these to protect your account and to meet security and audit requirements.
- Subscription and billing records: your plan, trial and renewal dates, and payment status. Card details are handled by Stripe, Apple, or Google, never stored by us.
- Usage analytics, only if you agree: which screens and features you use. These records never contain amounts, merchants, or descriptions.
- Crash reports: technical information when the app fails, with financial data removed.
Information from sign-in providers
If you sign in with Google, Microsoft, or Apple, we receive your name, email address, and a unique identifier from that provider. We do not receive your password or access to anything else in that account.
3. Why we use it, and our legal basis
| Purpose | Legal basis (EU and UK GDPR) |
|---|---|
| Providing Tessok: your accounts, transactions, budgets, AI features, sync across devices, shared accounts | Performance of our contract with you |
| Comparing your spending with similar households | Performance of our contract with you, using profile information you chose to give |
| Keeping your account secure, preventing abuse, and keeping audit records | Our legitimate interest in a secure service, and legal obligations where they apply |
| Billing, trials, and promo codes | Performance of our contract with you; legal obligations for tax and accounting records |
| Answering support requests | Performance of our contract with you |
| Sending service messages (for example trial ending, invitations, renewal reminders you set up) | Performance of our contract with you |
| Push notifications | Your consent, given through your device’s notification permission |
| Using your phone’s position when scanning a receipt | Your consent, given through your device’s location permission |
| Usage analytics | Your consent, which you can withdraw in privacy settings |
| Creating anonymous group statistics (section 4) | Our legitimate interest, which you can object to at any time with one switch |
4. Anonymous group statistics
Tessok creates statistics about how groups of people spend, for example “households in Munich with children spent 12% more on groceries this quarter”. We may sell or share these statistics with businesses, researchers, and other organisations.
How we protect you:
- We only ever share statistics about groups. We never sell, share, or publish your personal data or your individual transactions, even with names removed.
- A statistic is produced only when its group contains at least 50 people.
- Spending that could reveal sensitive information, such as health, religious donations, trade union membership, or political donations, is never included.
- You can switch off Contribute to anonymous market insights in privacy settings at any time. From then on, your data is excluded from all new statistics.
5. Your location
When you scan a receipt, Tessok can use your phone’s position to confirm which store you bought from. Before your phone asks for permission, we explain exactly how this works:
- Your position is matched to a nearby store by Tessok’s own location service, running on our servers in the EU. No other company ever receives your position.
- Only the matched store’s location is saved with the transaction. Your exact position is discarded immediately.
- Your location is read only at the moment you scan, never in the background.
- If you do not allow location access, we use the address printed on the receipt.
6. AI features
Tessok uses AI to read receipts, suggest categories and splits, detect subscriptions, explain your spending, and answer your questions in chat.
- On your device: on supported phones and browsers, many AI tasks run entirely on your device. Results produced this way are marked On-device; the data used for them is not sent to any AI service. You can switch this off in settings.
- On EU servers: other AI tasks run on servers in the EU, operated by us or by an EU-based AI provider. We don’t use AI providers outside the EU.
- AI is never used to make decisions about you that have legal or similarly significant effects. Its suggestions are for your information, and you decide what to do with them.
- AI answers can be wrong. Check anything important before relying on it.
7. Who we share data with
We share personal data only with the service providers below, only for the purposes listed, and under contracts that require them to protect it.
| Provider | Location | What they receive | Why |
|---|---|---|---|
| OVHcloud | EU | All data we store | Hosting, databases, file storage, backups |
| Lettermint | Netherlands | Your email address and email content; e-receipts you forward | Sending service emails; receiving forwarded receipts |
| EU-based AI provider | EU | The data needed for a specific AI request | Server-side AI features |
| Stripe | US and Ireland | Name, email, and billing details for web subscriptions | Web payments |
| Apple, Google | US | Purchase and subscription data; notification delivery data | App store billing; push notifications |
| Google, Microsoft, Apple | US | Sign-in requests, if you choose to sign in with them | Sign-in |
Shared accounts: if you share an account, everyone in it can see that account’s transactions, receipts, and budgets. They cannot see your other accounts or your profile.
Support: our support team sees only what you send them. If they need to look at specific data to help you, they ask first. You see exactly what would be shared and decide. Access is read-only and ends after 72 hours or when your request is resolved. You can see who looked at what and when.
Legal requirements: we disclose data to authorities only when the law requires it, and we tell you when we are allowed to.
We never sell your personal data.
8. International transfers
Your data is stored and processed in the EU. Stripe, Apple, Google, and Microsoft may process the limited data they receive (listed in section 7) in the US. These transfers are protected by the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses, depending on the provider.
9. How long we keep data
| Data | Kept for |
|---|---|
| Your account and financial data | While your account is active |
| Items you delete (for example a transaction) | Recoverable for 30 days, then permanently deleted |
| Accounts without a subscription | Up to 12 months after the subscription ends, with email warnings before erasure |
| Usage analytics | 13 months |
| Security and audit records | 12 months; after account erasure they keep only a pseudonymous reference |
| Billing records | 7 years, as Estonian accounting law requires |
| Support conversations | Until your account is erased |
| Data export downloads | 7 days |
| Your exact position when scanning | Not kept; discarded immediately |
| Encrypted backups | 30 days; deleted data disappears from backups as they expire |
10. Your rights
You have the right to:
- Access your data and get a copy of it
- Export your data in a portable format: settings offer a full export (CSV, JSON, and receipt images)
- Correct inaccurate data
- Delete your account and data: settings offer full account erasure
- Restrict our processing in certain situations
- Object to processing based on our legitimate interests, including anonymous group statistics (one switch in privacy settings)
- Withdraw consent at any time, for example for analytics, location, or notifications, without affecting earlier processing
- Complain to a data protection authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You can also complain to the authority in the country where you live. UK users can contact the Information Commissioner’s Office.
To exercise any right not available in settings, write to privacy@tessok.com. We respond within one month.
Deleting your account
When you delete your account, we erase your personal data or make it permanently anonymous within 30 days. Only anonymous group statistics remain, and only if you had not opted out of them. If you own a shared account, you choose who takes it over before your account is deleted; the other members keep the shared account and its history, and your entries in it show as “Former member”.
11. US residents
This section applies to residents of US states with consumer privacy laws, including California.
- We collect the categories of personal information described in section 2, for the purposes in section 3, from you, your devices, and sign-in providers you choose.
- We do not sell personal information and do not share it for cross-context behavioural advertising. Anonymous group statistics are aggregated so they cannot identify you.
- You have the right to know, access, correct, and delete your personal information, and to not be discriminated against for exercising these rights.
- To exercise your rights, use the settings in the app or write to privacy@tessok.com. An authorised agent may also contact us on your behalf.
12. Security
We protect your data with encryption in transit and at rest, additional encryption of personal fields, hosting in private EU networks, short-lived access tokens with rotating sign-in sessions, optional two-factor authentication and app lock, audit logging of every change, and strict separation that prevents our staff from seeing your financial data. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
13. Children
You can create a Tessok account yourself from age 16. Children aged 13 to 15 can use Tessok only when a parent or legal guardian adds them to a Household plan. Adding a child is recorded as the parent’s consent. Until the child turns 16, the parent can view the child’s accounts and transactions (read-only) and manage or delete the child’s account, and the child is told this in the app. Server-side AI is available only from age 18.
We ask for your birth year, and for the month and day only when the year alone cannot decide one of these age limits. If you are under 16 and not added by a parent, we do not create an account or keep your details. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it.
14. Changes to this policy
We will tell you in the app and by email before any material change takes effect. The date at the top shows when this policy was last updated.
15. This website
This section covers tessok.com itself, before and after the app launches.
- Early access list: if you leave your email address, we store it with the date you signed up and the date you confirmed it, on OVHcloud servers in the EU. We use it only to send you one email when Tessok launches. The legal basis is your consent. Addresses that are not confirmed within 30 days are deleted. To be removed earlier, write to privacy@tessok.com.
- Cookies and analytics: see our Cookies page.
16. Contact
The controller is Krigstone OÜ, a private limited company registered in Estonia.
- Registry code: 17634803
- Registered address: Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
- Email: privacy@tessok.com