Privacy Policy
Last updated: 13 October 2026
1. Introduction
At Kinworth, we help individuals and households understand, manage and make informed decisions about their money. We recognise that financial information is highly personal, and we take our responsibility to protect your privacy seriously.
This Privacy Policy explains what personal data we collect, how we use and protect it, who we share it with, how long we retain it and the rights available to you under applicable data protection law.
We are committed to transparency, responsible data handling and protecting your trust. We never sell your personal data.
This policy applies to your use of the Kinworth website, available at kinworth.ai, our web application, any associated mobile applications and the services we provide (collectively, the “Service”).
Please read this policy alongside our Terms and Conditions and Cookie Policy.
2. Who We Are
Kinworth is the trading name of MONIQ TECHNOLOGY LTD, a company registered in England and Wales under company number 17379451.
Registered office: 128 City Road, London, EC1V 2NX, United Kingdom.
In this policy, “Kinworth”, “we”, “us” and “our” refer to MONIQ TECHNOLOGY LTD.
We act as the data controller for the personal data we process in connection with our website, App and Service, except where we expressly state otherwise.
Information Commissioner's Office (ICO) registration number: ZC265355.
Contact Details
- Privacy enquiries and data protection requests: privacy@kinworth.ai
- Data protection lead: dpo@kinworth.ai
- General support: support@kinworth.ai
- Telephone: 0330 043 3775
- Website: https://kinworth.ai
3. Definitions
Personal data: means information that identifies you or could reasonably be used to identify you, directly or indirectly. Examples include your name, email address, financial information and device identifiers.
Special category data: means certain types of personal data that receive additional protection under UK data protection law, including information about health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, sexual orientation and certain biometric data.
Account provider: means a bank, building society, payment account provider or other financial institution that holds an account you choose to connect to Kinworth.
Account information: means financial information retrieved from your connected accounts, including account balances, transactions and related details.
Household: means a group of Kinworth users who choose to share selected financial information, budgets or goals with one another through our household features.
Open banking: means the secure process through which, with your authorisation, financial information is accessed from participating account providers through authorised or regulated third-party providers.
4. Personal Data We Collect
We collect only the personal data reasonably necessary to provide, secure and improve the Service, comply with our legal obligations and fulfil the purposes described in this policy.
The information we collect depends on how you use Kinworth and the features you choose to access.
| Category | Examples | Source |
|---|---|---|
| Identity and contact information | Name, email address, telephone number and date of birth | Information you provide |
| Account and preference information | Login credentials or authentication identifiers, account settings and subscription plan | You and our systems |
| Financial account information | Account names, sort codes, account numbers where supplied, balances, transactions, merchants, standing orders and direct debits | Your connected account providers through Yapily Connect, following your authorisation |
| Financial planning information | Budgets, savings goals, spending categories, notes and financial questions | Information you provide or create through the Service |
| Uploaded information | Receipts, documents and profile photographs you choose to upload | You |
| Household information | Invitations, household membership, shared goals and information you choose to share | You and other household members |
| Usage and device information | IP address, device type, operating system, pages visited, feature usage, diagnostic information and crash logs | Collected through your use of the Service |
| Payment and subscription information | Subscription status, billing history and payment transaction references | You and our payment providers |
| Communications | Support requests, feedback, survey responses and correspondence | You |
| Marketing preferences | Newsletter subscriptions, communication preferences and consent records | You and our systems |
Open banking credentials
Kinworth does not ask you to provide your online banking password or security credentials directly to us. Authentication takes place through your account provider's authorisation process.
We do not receive or store your online banking login credentials through the open banking connection described in this policy. Your account provider and the relevant open banking provider may process authentication information as necessary to establish the connection.
Financial information and sensitive data
Financial transactions may reveal sensitive aspects of your life, such as payments to healthcare providers, religious organisations or political organisations.
We do not intentionally use transaction information to infer special category data about you for unrelated purposes or to make decisions about you based on such inferences.
However, transaction information may incidentally reveal sensitive details while we display, organise or analyse your financial activity at your request. Where our processing involves special category data, we will identify and rely on an appropriate legal condition and apply the additional safeguards required by law.
If you voluntarily disclose sensitive information, such as a health condition or bereavement, to help us tailor support to your circumstances, we will handle that information carefully and only process it where we have an appropriate lawful basis. Where explicit consent is required, we will obtain it before processing.
5. Open Banking and Your Consent
Open banking enables Kinworth to retrieve financial information from accounts you choose to connect, allowing you to view and understand your finances in one place.
How it works
- You select the financial account you want to connect to Kinworth.
- You are redirected to your account provider to authenticate and authorise the requested access.
- Yapily Connect Ltd facilitates the secure transmission of authorised account information to Kinworth.
- Kinworth uses the information to display your finances and provide the features you request.
Your authorisation and control
We access your connected account information only through the applicable authorisation process and with your permission. We do not have the ability to move money or initiate payments through the read-only access described in this policy.
Open banking permissions may expire or require renewal. Where a connection is subject to a 90-day consent or authorisation period, you may need to renew it to continue receiving updated information.
You can disconnect an account or withdraw your permission for ongoing access through Settings > Connected Accounts, through the relevant account provider where supported, or by contacting privacy@kinworth.ai.
When you withdraw permission, we will stop retrieving new information from the affected account, subject to any processing necessary to complete the disconnection securely.
Withdrawal does not affect the lawfulness of processing carried out before it took effect. It also does not automatically erase information already collected; retention and deletion are explained in Sections 11 and 12.
Disconnecting an account may limit the features available to you.
6. How We Use Your Data and Our Legal Bases
We process personal data only where we have a lawful basis under applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on the circumstances, we rely on the following legal bases:
- Contract: Processing necessary to provide the Service or take steps you request before entering into a contract.
- Consent: Processing you have voluntarily authorised, which you may withdraw where consent is the applicable legal basis.
- Explicit consent: Required for certain processing activities involving special category data or other activities where the law requires explicit consent.
- Legitimate interests: Processing necessary for our legitimate business interests, provided these interests do not override your rights and freedoms.
- Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements.
| Purpose | Legal basis |
|---|---|
| Creating, maintaining and managing your account | Contract |
| Connecting accounts and retrieving financial information | Applicable open banking authorisation and consent requirements; contract for associated Service features |
| Organising transactions, tracking spending and displaying balances | Contract |
| Generating financial insights, summaries and AI responses | Contract; consent or another applicable basis where required for specific processing |
| Providing household sharing features you choose to use | Contract and applicable authorisation for sharing; consent where required |
| Processing subscriptions and managing billing | Contract; legal obligation where applicable |
| Protecting accounts, detecting fraud and preventing misuse | Legitimate interests; legal obligation where applicable |
| Monitoring performance and improving the Service | Legitimate interests or consent, depending on the data and technology used |
| Sending essential service messages and security alerts | Contract; legal obligation where applicable |
| Sending marketing emails and promotional communications | Consent where required by law |
| Providing tailored support in vulnerable circumstances | Appropriate lawful basis, including explicit consent where required |
| Meeting tax, accounting, regulatory and other legal obligations | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests or another applicable legal basis |
Where we rely on legitimate interests, we consider the potential impact on your privacy and take reasonable steps to ensure that your rights are protected. You may request further information about the relevant assessment by contacting us.
Where consent is required, we will not treat your continued use of the Service as a substitute for valid consent. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
7. Artificial Intelligence, Profiling and Automated Decisions
Kinworth uses artificial intelligence (AI) to help you understand your finances and obtain relevant information from your financial data.
How we use AI
When you use AI-powered features, we may process your questions and relevant financial information to generate summaries, explain spending patterns and answer your financial questions.
We use Anthropic as an AI service provider for these features. Information necessary to respond to your request may be transmitted to Anthropic for processing on our behalf.
We aim to limit the information shared with our AI provider to what is reasonably necessary for the requested task and to remove direct identifiers, such as your name or account number, where practicable.
The information provided to the AI service may still contain financial details or other information that could identify you indirectly.
Our AI provider's data retention, model training and security arrangements are subject to the terms of our agreement and the provider's applicable documentation. We will not claim that information is never used for model training or is deleted within a particular period unless those arrangements have been verified.
AI provider privacy information: [Insert the verified link to Anthropic's applicable privacy documentation.]
How we use AI-generated insights
Our AI features may help you:
- Understand spending habits and financial patterns.
- Summarise transactions and identify recurring payments.
- Explore budgets and financial goals.
- Ask questions about your finances in plain language.
- Identify possible upcoming bills or changes in spending.
AI-generated responses may be incomplete, inaccurate or out of date. You should verify important information before relying on it.
Kinworth provides financial information and organisational tools, not personalised regulated financial advice. Our AI features should not be treated as a substitute for independent financial, legal or tax advice.
Profiling
We may automatically analyse transaction information to categorise spending, identify recurring payments and estimate upcoming bills or account balances. This is a form of profiling.
We use these insights to present information to you and support your use of the Service. We do not intend to use this profiling to make decisions that produce legal or similarly significant effects on you.
Automated decision-making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you, as described by applicable data protection law.
If our practices change, we will update this policy and provide any information, safeguards and rights required by law, including applicable rights to human intervention, to express your point of view and to challenge a decision.
For questions about our use of AI or profiling, contact privacy@kinworth.ai.
8. Who We Share Your Data With
We share personal data only where necessary to provide the Service, fulfil your requests, protect our business, comply with the law or pursue another lawful purpose described in this policy.
Where third parties process personal data on our behalf, we take appropriate steps to assess their suitability and require contractual safeguards where applicable.
Service providers
| Provider | Purpose | Location |
|---|---|---|
| Yapily Connect Ltd | Open banking connectivity and transmission of authorised financial information | Confirm actual processing locations |
| Anthropic | AI processing for features you choose to use | Confirm applicable processing locations |
| Cloud hosting and infrastructure providers, such as AWS or Google Cloud, if used | Hosting, storage, security and infrastructure operations | Confirm actual provider and regions |
| Stripe, Apple or Google, where applicable | Subscription payments and billing | Confirm actual providers and processing locations |
| Analytics providers, where applicable | Understanding website and Service usage | Confirm actual provider and processing locations |
| Email providers | Sending service notifications and permitted marketing communications | Confirm actual provider and processing locations |
| Customer support providers | Managing support requests and customer communications | Confirm actual provider and processing locations |
This list must be updated to reflect the providers Kinworth actually uses.
People you choose to share information with
If you activate household features, we share the information you authorise with the household members you select. The scope of that access is explained in Section 9.
Legal and regulatory authorities
We may disclose personal data to courts, regulators, law enforcement agencies, tax authorities or other public bodies where required by law or where disclosure is otherwise lawful and necessary.
Professional advisers
We may share relevant information with our lawyers, accountants, auditors, insurers and other professional advisers where necessary for legitimate business or legal purposes.
Business transfers
If Kinworth is involved in a merger, acquisition, restructuring, financing or sale of all or part of its business, relevant information may be disclosed to prospective or actual parties involved, subject to appropriate confidentiality, security and legal safeguards.
What we do not do
We do not sell your personal data or share it with advertisers for their independent advertising purposes.
Where analytics or marketing technologies are used, they will be subject to our Cookie Policy and applicable consent requirements.
We do not discriminate against you for exercising your privacy rights.
9. Household Sharing and Your Privacy
Kinworth's household features allow you to share selected financial information and goals with people you choose, helping you manage household finances together.
Household sharing is optional. You remain in control of whether you participate and what information you choose to share, subject to the functionality and permissions available in the Service.
How household sharing works
- You choose whether to invite another person to your household.
- You select the accounts, goals or other information made available for sharing through the available controls.
- Household members can access only the information permitted by the sharing settings and permissions in place.
- Individual transactions are not shared unless the applicable feature and your sharing settings allow them to be shared.
- Each member retains control over their own connected accounts and may leave the household.
When a member leaves a household or sharing is disabled, their information should no longer be accessible to other members through the household-sharing feature, subject to technical processing, records that must be retained and any information a recipient has already independently recorded.
Your responsibilities
Only invite people you trust and connect accounts that you are legally entitled to access and share. If an account is jointly held, ensure that you have the necessary authority and permissions before sharing information.
Household members may be able to infer personal information from the financial details you choose to share. Consider carefully what you make available to others.
10. International Data Transfers
Some of our service providers may process personal data outside the United Kingdom, including in countries such as the United States.
Where personal data is transferred internationally, we will ensure that the transfer complies with applicable UK data protection law.
Depending on the destination and circumstances, safeguards may include:
- A transfer to a country covered by applicable UK adequacy regulations.
- The UK International Data Transfer Agreement (IDTA).
- The UK Addendum to the EU Standard Contractual Clauses.
- A transfer risk assessment and supplementary safeguards where required.
The safeguards used will depend on the recipient, destination and applicable legal requirements.
You may contact privacy@kinworth.ai to request further information about international transfers and the safeguards applicable to your personal data, subject to lawful restrictions.
11. How Long We Keep Your Data
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this policy, meet legal and regulatory obligations, resolve disputes and protect our legitimate interests.
Retention periods depend on the type of information, how it is used and whether we are required to retain it by law.
The table below sets out our proposed retention schedule. The periods marked for confirmation must be verified against Kinworth's actual systems and legal obligations before publication.
| Data category | Proposed retention period |
|---|---|
| Connected account information | While your account remains active and the information is required for the Service; deletion or anonymisation within [30 days] after disconnection or account closure, subject to lawful retention requirements |
| AI conversation history | [12 months], or earlier where you delete it, subject to technical limitations and lawful retention requirements |
| Profile, account settings and household data | While your account remains active; deletion or anonymisation within [30 days] after account closure, subject to lawful retention requirements |
| Subscription and billing records | For the period required by applicable tax, accounting and other laws; the proposed period is six years after the end of the relevant financial year, subject to confirmation |
| Support conversations and complaints | [Three years] after the matter is closed, unless a longer period is necessary |
| Security and audit logs | [12 months], unless a longer period is required for security, investigation or legal purposes |
| Marketing preferences and consent records | Until you withdraw consent or unsubscribe, with a limited suppression record retained where necessary to respect your preferences |
| Aggregated or irreversibly anonymised data | May be retained for longer periods where it can no longer identify you and is not otherwise treated as personal data |
These periods are not absolute. We may retain information for longer where required by law, necessary to establish or defend legal claims, or justified by another lawful purpose.
When personal data is no longer required, we will securely delete it or irreversibly anonymise it, as appropriate.
12. Deleting Your Account and Personal Data
You may request the deletion of your Kinworth account at any time through Settings > Account > Delete Account, where available, or by emailing privacy@kinworth.ai.
Once we receive and verify your request, we will take reasonable steps to delete or irreversibly anonymise personal data associated with your account within 30 days, where technically and legally possible.
Some information may need to be retained after account closure to comply with legal obligations, maintain necessary financial records, resolve disputes, prevent fraud or establish and defend legal claims.
Where we retain information for these reasons, we will limit it to what is necessary, restrict its use to the relevant purpose and delete it when the applicable retention period ends.
Deleting your Kinworth account does not necessarily delete records held independently by your bank, payment provider, AI provider or other third parties under their own legal responsibilities and retention policies.
Where applicable, you should also revoke outstanding open banking permissions and review any third-party services connected to your account.
13. How We Protect Your Data
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
Depending on the information and systems involved, these measures may include:
- Encryption of data in transit using TLS and encryption at rest.
- Read-only access to connected financial accounts, without the ability to move money through the connection described in this policy.
- Access controls and permissions designed to limit staff access to information needed for their roles.
- Security monitoring, logging and testing.
- Secure development and maintenance practices.
- Contracts and appropriate safeguards for third-party service providers.
- Procedures for identifying, investigating and responding to suspected data breaches.
No system or method of transmission can be guaranteed to be completely secure. We continually seek to maintain and improve our safeguards in line with the risks associated with the Service.
If a personal data breach occurs, we will investigate and take appropriate remedial action. We will notify the ICO and affected individuals where required by applicable law.
14. Your Data Protection Rights
Under applicable data protection law, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete personal data.
- Erasure: Request deletion of your personal data in certain circumstances.
- Restriction: Ask us to restrict the processing of your personal data in certain circumstances.
- Data portability: Receive certain personal data you have provided to us in a structured, commonly used and machine-readable format, or request that it be transferred to another provider where the legal requirements are met.
- Object: Object to processing based on legitimate interests and object to direct marketing at any time.
- Withdraw consent: Withdraw consent where we rely on consent as our legal basis. This does not affect the lawfulness of processing carried out before withdrawal.
- Rights relating to automated decisions: Where applicable, exercise your rights concerning decisions based solely on automated processing, including decisions with legal or similarly significant effects.
These rights are subject to certain conditions and exceptions under the law. Exercising one right does not necessarily mean that all information must be deleted or that all processing must stop.
How to exercise your rights
To make a request, contact privacy@kinworth.ai or use our in-App support facility, where available.
Please explain the nature of your request and provide enough information for us to identify the relevant account. We may ask you to verify your identity before proceeding.
We will respond without undue delay and normally within one month of receiving a valid request. Where the request is complex or we receive multiple requests, we may extend this period by up to two further months where permitted by law. If an extension is necessary, we will inform you within the initial month and explain the reason.
Requests are generally handled free of charge. We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, as permitted by law. If we refuse a request, we will explain the reasons and inform you of your available complaint rights.
15. Complaints
If you have concerns about how Kinworth collects, uses or protects your personal data, please contact us first at privacy@kinworth.ai. We will review your concerns and seek to resolve them.
You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
You may also have the right to seek a judicial remedy where available under applicable law.
16. Children's Privacy
Kinworth is intended for individuals aged 18 and over. Our Service is not designed for children, and we do not knowingly collect personal data from individuals under the age of 18.
If you believe that a person under 18 has provided us with personal data, please contact privacy@kinworth.ai. We will investigate and take appropriate steps to delete the information where required by law.
17. Cookies and Similar Technologies
We use cookies and similar technologies to support essential website functionality, maintain security, remember preferences and, where you consent, understand how our website is used and measure marketing performance.
You can manage your preferences through our cookie consent banner and available cookie settings.
For further details about the cookies we use, their purposes and how to manage them, please read our Cookie Policy.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, data processing practices or legal obligations.
When we make changes, we will publish the revised policy on our website and update the “Last updated” date.
Where changes are material, we will take reasonable steps to notify affected users, such as by email or an in-App notification, before the changes take effect where appropriate or required by law.
We encourage you to review this policy periodically to remain informed about how Kinworth handles your personal data.
19. Contact Us
If you have questions about this Privacy Policy, how your personal data is processed or how to exercise your data protection rights, please contact us.
- Company: MONIQ TECHNOLOGY LTD, trading as Kinworth
- Privacy enquiries: privacy@kinworth.ai
- Data protection lead: dpo@kinworth.ai
- General support: support@kinworth.ai
- Telephone: 0330 043 3775
- ICO registration number: ZC265355
- Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
- Website: https://kinworth.ai