Kasmora

Effective 1 November 2026

Your money stays yours.

Kasmora is a personal finance app by Loomora, on the web and on mobile. This page says plainly what we keep, why, and how you remove it.

  1. 01

    What Kasmora stores

    Your accounts and balances, transactions, recurring payments, budgets, goals, investment holdings, settings, and the snapshots and insights built from them. They live on Loomora's servers under your account, so every device shows the same data. Server-side access rules tie each record to you; no other user can read it.

  2. 02

    Signing in

    You sign in with an email code, a password, or Google. We keep your email address, your display name and, if you set one, a hashed password. Google shares only your name, email address and a sign-in token.

  3. 03

    Who else handles data

    Amazon Web Services (Simple Email Service, Jakarta region) delivers sign-in codes, confirmations and the optional weekly and monthly reports. Google is involved only when you choose Sign in with Google. Our servers fetch prices, exchange rates and news from Yahoo Finance, Pegadaian, ExchangeRate-API, Frankfurter, Finnhub, Google News and GNews; those requests carry ticker symbols and topics, never your name, email or balances.

  4. 04

    What we never do

    No ads, no selling or sharing your data, no third-party analytics or tracking. Kasmora does not connect to your bank: you enter the numbers yourself. Insights are information, not financial advice.

  5. 05

    On your device

    The app keeps a copy of recent data in your browser or app storage so it opens fast and works offline. Signing out clears it. Backups you export are ordinary files that you control; Kasmora does not encrypt them.

  6. 06

    Emails

    Account emails (codes, confirmations, password resets) are part of the service. The weekly and monthly reports can be turned off in Settings.

  7. 07

    Your control

    You can change or delete any record at any time. To delete everything, sign in and open the account deletion page: every record you own is deleted right away and your sign-in is closed within 7 days. Shared market prices and news hold no personal data and are kept. Operational logs and server backups may hold copies for a limited time before they are overwritten.

  8. 08

    Security

    All traffic uses HTTPS. Sessions use expiring access tokens, and the server checks on every request that a record belongs to the person asking for it. Keep your device locked and treat exported files as sensitive.

  9. 09

    Children

    Kasmora is for adults and is not directed at children. We do not knowingly collect data from children.

  10. 10

    Changes

    When our data practices change we update this page and its effective date.

  11. 11

    Contact

    Questions about privacy or your data: support@heyloomora.com.