Privacy Policy

1. What this covers

This Privacy Policy explains what information Ndururu ("the App") collects, how it is used, and how it is protected.

2. Information we collect

• Account information: name, email address, and authentication credentials.
• Financial data you enter: transactions, account balances, budgets, loans, savings goals, and related records you choose to record in the App.
• Bank or M-Pesa message text you paste to auto-fill a transaction. This text is sent to Google's AI models to extract the amount, date, and merchant, and the full message is stored verbatim as part of that transaction's notes.
• Messages you send to Rafiki, our AI advisor, and the account data (transactions, budgets, goals) it reads to ground its responses.
• Billing and subscription information: your selected plan, subscription status, and payment confirmations. Card and mobile money payment details are collected and processed directly by our payment processor, Paystack — we do not receive or store your full payment credentials.
• Usage and error data: basic app activity and error reports, used to diagnose and fix problems.
• Feedback you submit through the in-app feedback form.

3. How we use your information

• To provide and operate the App's core features.
• To generate Rafiki's responses and draft budget or savings-goal proposals.
• To process payments, manage your subscription, and send billing receipts.
• To diagnose bugs and monitor reliability.
• To communicate important account, billing, or service updates.
• To improve the App based on feedback and usage patterns.

4. Where your data is processed

Your data is processed by the following providers, each strictly for the purpose below:

• Google Firebase / Google Cloud — hosting and storage of your account and financial data (Firestore).
• Google's Gemini AI models (via Vertex AI) — power Rafiki and the SMS/message auto-fill feature. Rafiki can also use Google Search to look up current, publicly available information (for example, typical savings or loan interest rates) when answering a question.
• Paystack — processes subscription payments in Kenyan Shillings.
• Resend— delivers transactional emails: payment receipts, account notices, and (if you've opted in) periodic insight digests.
• Sentry — receives error reports to help us diagnose and fix bugs.

Access to your data within Ndururu itself is restricted to your own account through Firestore security rules and server-side authorization checks on every request.

5. Data sharing

Your financial data is not sold, and is never shared for advertising purposes. It is only shared with the processors listed in Section 4, each under their own confidentiality and security obligations, and only to the extent needed to provide the App's features.

6. Data retention

Your data is retained for as long as your account is active. You can delete your account at any time from Settings, which removes your profile, transactions, accounts, budgets, goals, and other financial records.

Payment receipts and billing event records are deliberately retained after account deletion for accounting and legal compliance purposes. No other data survives account deletion.

7. Security

Reasonable technical measures are used to protect your data, including authenticated access controls and encrypted connections. No system is perfectly secure, and you should use a strong, unique password for your account.

8. Your rights

You may request a copy of your data, correct inaccurate information through the App, or delete your account and its data at any time from Settings.

9. Changes to this Policy

This Policy may be updated from time to time. If a future update is material, you will be asked to review and re-accept it the next time you log in.

10. Contact

Questions about this Policy can be sent through the in-app feedback form.