M‑Pecunia Privacy Policy

This Privacy Policy explains how M‑Pecunia (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use our website and mobile application (the “Services”).

Who we are

If you have questions about this policy, contact us at officialmpecunia@gmail.com.

Information we collect

Depending on how you use the Services, we may collect:

• Account information: name, email, phone number, age group, and authentication data.
• Financial information you provide or generate: transactions (including descriptions and metadata such as amounts/dates/categories), savings/loan account details, assets & liabilities, and spending limits.
• Notifications/SMS-derived content (Android): if you enable transaction monitoring, the app may access notification content from your messaging app(s) to detect M‑Pesa transaction messages and send them to our backend for parsing and storage.
• Device/app information: basic diagnostics needed to operate the app (e.g., device type, OS version) and push notification tokens when you enable push notifications.

How we use information

We use information to:

• Create and manage your account and authenticate you.
• Provide core features (transaction history, categorization, analytics/health scoring, savings/loan tools, and notifications).
• Send service messages you request (e.g., password resets) and optional notifications you enable.
• Secure the Services, prevent abuse, and troubleshoot issues.

How we share information

We do not sell your personal information. We may share information with service providers who help us run the Services, such as:

• Hosting & app infrastructure (e.g., Vercel for web hosting, Render for backend hosting).
• Database (e.g., Supabase/Postgres) to store your account and financial data.
• Email (e.g., Resend) to send password reset and onboarding emails.
• Push notifications (e.g., Expo/Firebase Cloud Messaging) to deliver push notifications you opt into.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the Services.

Data retention

We retain personal data for as long as necessary to provide the Services. For example, we keep your financial history so you can view trends over time. You can request deletion at any time (see “Account deletion”).

Security

We use reasonable safeguards designed to protect your data. In production, data is encrypted in transit via HTTPS/TLS. No method of transmission or storage is 100% secure, but we work to protect your information.

International transfers

Depending on where you access the Services from, your information may be processed and stored in countries other than your own, where our service providers operate.

Your choices & rights

• Access/update: you can review and update parts of your profile in Settings.
• Notifications permissions: you can enable/disable notification permissions in your device settings.
• Marketing: we do not send marketing emails by default.

Account deletion

You can permanently delete your account and associated data (including transactions) from within the web app Settings. See Account deletion instructions.

Children’s privacy

The Services are not directed to children under 13. If you are under 18, please use the Services only with the involvement of a parent or legal guardian. If you believe a child has provided personal information to us, contact us at officialmpecunia@gmail.com.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date above.

Contact

Email: officialmpecunia@gmail.com