Privacy

Last updated 11 September 2026

Kontoro is a place to keep what you read. That means it holds things that are yours — your books, your highlights, your notes, and any files you upload. This page says exactly what is stored, why, and who else can see it.

What Kontoro stores

Your account. Your email address, the name you gave when you signed up, and — if you subscribe — your plan status and the identifiers Stripe uses for your customer and subscription records. Kontoro never sees or stores your card details.Your library. The books, papers, articles and posts you add, the shelves you file them on, whether you have read them, and how far in you are.What you keep. The passages you highlight, the notes you write, and where in a read they came from.Files you upload. PDFs and EPUBs you add to your library are stored in a private bucket. They are not public, not shared between readers, and not redistributed. This is a boundary, not a preference.

Photographs you take with the app

When you photograph a page, the words are read one of two ways. Your phone can read them itself, and then nothing leaves the device. Or the part of the photograph you framed is sent to Kontoro and read there, which is more accurate, and that is what happens by default when you are online.On that second path the framed region goes to Anthropic, whose model reads it for us. Only what you framed is sent, so a facing page you left out of the frame is not included. Kontoro stores the image at no point: it is held in memory long enough to be read and is gone when the response comes back. What Kontoro keeps is the passage you confirmed, never a picture of the page.Anthropic keeps it a little longer, and you should know the number rather than infer one. Their published terms say inputs and outputs on the developer API are deleted within 30 days, and that by default they are not used to train models. So “not retained” is true of Kontoro and not of the whole path, which is why it is written out here instead of summarised.You can turn the second path off. There is a switch on the You tab, and with it off every page is read on your phone and no photograph is ever sent anywhere. The screen that shows you the words also tells you which of the two read them, every time.

Who else sees it

Kontoro does not sell your data, does not advertise, and has no tracking or analytics on your library. Five services are involved in running it:Supabase hosts the database, authentication and file storage. Vercel hosts the site. Stripe processes payment if you subscribe. Resend delivers account emails such as sign-in links and password resets.ISBNdb supplies book information. Requests to it are made by Kontoro’s servers rather than by your browser or phone, so your address is not disclosed to it — only the book being looked up.Anthropic reads the page you photographed, when you have left that switched on. It receives the framed region and nothing else: not your name, not your email, not your library. The request goes from Kontoro’s servers rather than from your phone, so your address is not disclosed to it either.Support, when you ask for it. Some faults can only be diagnosed from inside the account they happen in. An operator can open a short support session that sees your account as you do — your files included. It reaches one named account, requires a stated reason, is recorded before it serves a single page, ends after thirty minutes, and the record is not the operator’s to edit or delete. Nobody holds this access by default, and while it is active a banner in the account says so.

Sharing is something you do, not something Kontoro does

A quote or note is private until you mint a share link for it. A share link is public to anyone holding it, and shows that one mark and the read it came from — nothing else from your library. You can revoke a link at any time, which stops it working. Kontoro has no feed, no followers, and counts nothing about who has seen what.

Getting your things out, and deleting them

Removing an item from your library deletes the marks kept against it and any file you uploaded for it.To receive a copy of your library and everything you have marked, use the download controls on your account page. They are immediate, need nobody’s approval, and give you two CSV files: every read with its rating, dates and shelves, and every mark with the book it came from. Files you uploaded are not in them — you download those from the read they belong to, one at a time.To delete your account and everything in it, use the control on the same page — it is immediate, needs nobody’s approval, and destroys your library, marks, notes, files and sign-in together. If you prefer, emailing hello@kontoro.io works too. Depending on where you live you may also have the right to ask what is held about you or to correct it — that address covers those.

Children

Kontoro is not directed at children under 13 and does not knowingly collect their information.

Changes

If what Kontoro stores changes, this page changes with it and the date above is updated.

Questions: hello@kontoro.io