Privacy Policy

Last updated: October 20, 2026

Who we are

Krusil is a software company based in Spain. We make the apps Fitnaut (fitness and nutrition) and Homenaut (expenses and home), and publish them on Google Play and the App Store under the developer name Krusilviya. Krusil ("we", "us") is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

Contact: contact@krusil.com

Our apps and their full privacy policies

One account works in both apps. Each app has its own privacy policy that explains in detail what it collects, why, and who helps us process it:

• Fitnaut privacy policy
• Homenaut privacy policy

This page covers what applies to all Krusil apps, including signing in with Google or Apple, and to this website.

Signing in with Google or Apple

Fitnaut and Homenaut share one Krusil account system, so the Google and Apple sign-in screens show the name Krusil.

• If you sign in with Google or Apple, we keep only your name, your e-mail address (with Apple, the anonymous relay address if you choose to hide yours) and an account identifier. Google's basic profile permission also shares your profile picture, but we don't save or use it, and we don't request any other profile data.
• If you sign in with Apple, we also keep an encrypted token from Apple, used only to revoke our access to your Apple ID when you delete your account.
• We use this information only to create your account and sign you in. We don't sell it, use it for advertising, or share it with anyone other than the hosting provider that stores your account.
• Google and Apple confirm your identity to us under their own privacy policies. We don't share your app data with them.

Connecting your mailbox (Krusil Mail)

In Fitnaut and Homenaut you can connect a mailbox so receipts, invoices and other financial documents that arrive by e-mail are imported for you. The connection is called Krusil Mail, and that is the name Google shows when you connect a Gmail account.

• What we access: for Gmail, we request read-only access (gmail.readonly): your messages and their attachments, from the history and folders you choose. We cannot send, change, label or delete your e-mail.
• How we use it: only to find financial documents and create private records for you in the app, such as expenses, receipts and invoices. We keep a private copy of the messages and attachments we import, so you can open the original.
• How it is processed: spam checks, attachment security checks, parsing and text recognition run on our own server. Whole messages and attachments are not sent to AI services. Only if you separately turn on attachment field recovery do we send a small necessary text excerpt or cropped region of an attachment we could not read to the AI service named in the app.
• Storage and security: your connection tokens are encrypted, and imported messages and attachments are stored privately on our server in the European Union. Nobody else can see them; sharing an expense with your household shares only the details you choose, not your mailbox.
• Sharing: we don't sell Gmail data, don't use it for advertising, and don't use it to train general-purpose AI models. We don't share it with anyone except the processors described above, and only to run the feature you asked for.
• Disconnecting and deleting: you can disconnect a mailbox in the app at any time, which deletes the saved connection and stops importing. You can also remove access in your Google Account settings. Imported records stay until you delete them or your account.

Krusil Mail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where your data is stored

Your account data is stored on our own server, run on a virtual private server from IONOS in the European Union. Some providers that individual features rely on, such as payments, in-app subscriptions and AI services, may process data outside the European Economic Area. When that happens we rely on the safeguards the GDPR provides, such as adequacy decisions or standard contractual clauses. Each app's privacy policy lists these providers.

Keeping and deleting your data

Your account data is kept while your account exists. You can delete your account at any time in the app, or on the account deletion page of Fitnaut or Homenaut. Because the account is shared, deleting it removes it from both apps. It is erased immediately, with the exceptions described on those pages.

This website

• krusil.com has no accounts, analytics or advertising cookies. It remembers your light or dark theme choice in your browser only.
• The contact form sends your name, e-mail address, project type and message to us through Web3Forms, with hCaptcha to block spam. We use them only to reply to you and keep them only as long as that conversation needs.
• The page loads fonts from Google Fonts and scripts from Tailwind CSS, Web3Forms and hCaptcha. These services receive your IP address as part of delivering them.

Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, restrict or object to how we use it, and withdraw any consent you gave. Write to contact@krusil.com. You can also lodge a complaint with a data protection supervisory authority in the EU country where you live or work, or in Spain, where Krusil is established (Agencia Española de Protección de Datos).

Children

Our apps are not intended for anyone under 16, and we don't knowingly collect personal data from children under 16. If you believe a child has created an account, write to contact@krusil.com and we'll delete it.

Changes

When this policy changes, we update the date at the top of this page.