Privacy
Last updated 23 August 2026Kontoro is a place to keep what you read. That means it holds things that are yours — your books, your highlights, your notes, and any files you upload. This page says exactly what is stored, why, and who else can see it.What Kontoro stores
Your account. Your email address, the name you gave when you signed up, and — if you subscribe — your plan status and the identifiers Stripe uses for your customer and subscription records. Kontoro never sees or stores your card details.Your library. The books, papers, articles and posts you add, the shelves you file them on, whether you have read them, and how far in you are.What you keep. The passages you highlight, the notes you write, and where in a read they came from.Files you upload. PDFs and EPUBs you add to your library are stored in a private bucket. They are not public, not shared between readers, and not redistributed. This is a boundary, not a preference.Photographs you take with the app
When you scan a page with the phone camera, the text is recognised on your device. The photograph is never uploaded, never sent to Kontoro or to anyone else, and is deleted once the text has been extracted from it. What is stored is the passage you confirmed — never a picture of the page.Who else sees it
Kontoro does not sell your data, does not advertise, and has no tracking or analytics on your library. Four services are involved in running it:Supabase hosts the database, authentication and file storage. Vercel hosts the site. Stripe processes payment if you subscribe. Resend delivers account emails such as sign-in links and password resets.ISBNdb supplies book information. Requests to it are made by Kontoro’s servers rather than by your browser or phone, so your address is not disclosed to it — only the book being looked up.Support, when you ask for it. Some faults can only be diagnosed from inside the account they happen in. An operator can open a short support session that sees your account as you do — your files included. It reaches one named account, requires a stated reason, is recorded before it serves a single page, ends after thirty minutes, and the record is not the operator’s to edit or delete. Nobody holds this access by default, and while it is active a banner in the account says so.Sharing is something you do, not something Kontoro does
A quote or note is private until you mint a share link for it. A share link is public to anyone holding it, and shows that one mark and the read it came from — nothing else from your library. You can revoke a link at any time, which stops it working. Kontoro has no feed, no followers, and counts nothing about who has seen what.Getting your things out, and deleting them
Removing an item from your library deletes the marks kept against it and any file you uploaded for it.To receive a copy of your library and everything you have marked, use the download controls on your account page. They are immediate, need nobody’s approval, and give you two CSV files: every read with its rating, dates and shelves, and every mark with the book it came from. Files you uploaded are not in them — you download those from the read they belong to, one at a time.To delete your account and everything in it, use the control on the same page — it is immediate, needs nobody’s approval, and destroys your library, marks, notes, files and sign-in together. If you prefer, emailing hello@kontoro.io works too. Depending on where you live you may also have the right to ask what is held about you or to correct it — that address covers those.Children
Kontoro is not directed at children under 13 and does not knowingly collect their information.Changes
If what Kontoro stores changes, this page changes with it and the date above is updated.Questions: hello@kontoro.io