Privacy Policy

1. Introduction

Welcome to Moneypod. This Privacy Policy explains how we handle information across our mobile app and this website. Moneypod is a personal finance tracker that provides insights by reading M-Pesa and Airtel Money SMS notifications directly on your mobile device — no manual entry required.

---

2. Local Data Processing

Moneypod operates on a local-first principle. All SMS messages and transactional data are read, categorized, and stored exclusively on your device. We do not transmit your raw SMS content or detailed transaction history to any external server or third-party database. Uninstalling the app or clearing app data removes this information — it isn't recoverable from our side, because we never had it.

Today, Moneypod reads M-Pesa and Airtel Money only. Support for bank accounts and cross-device sync of your ledger are planned for future releases, and this policy will be updated before either launches.

3. Information We Collect

While your financial data stays local, we do collect a small amount of non-sensitive information to run your account and keep the app working properly:

4. Website Cookies & Analytics

This website may use a limited set of cookies or similar technologies to understand traffic and improve the site — for example, which pages are visited most. We don't use this data to build advertising profiles, and we don't sell it. You can block or clear cookies at any time through your browser settings; the site will still function.

We load fonts from Google Fonts to keep the site consistent across devices. Loading a font from Google's servers means your browser sends a request that includes your IP address, as with any external resource. We don't control what Google does with that request beyond serving the font file.

5. Payments & Subscriptions

If you subscribe to Moneypod Premium, your payment is handled by our payment processor or the relevant app store (Google Play / Apple App Store) — Moneypod does not receive or store your full card or mobile money PIN details. We only receive confirmation of your subscription status (active, expired, or cancelled) so we can enable or adjust the features on your account accordingly.

6. Notifications & Communications

We send account-related messages (like welcome emails, feature updates, and recurring payment reminders) by push notification and/or email, depending on what you've enabled. You can adjust or turn off non-essential notifications anytime from Settings within the app. Essential account and security notices may still be sent regardless of these preferences.

7. Data Retention & Deletion

Because transactional data lives on your device, you control its retention directly — deleting the app deletes it. Account information (like your email) is retained for as long as your account is active. If you request account deletion, we remove your account and associated server-side data within a reasonable period, except where we're required to retain limited records for legal, tax, or fraud-prevention purposes.

8. Data Security

We use encrypted connections (HTTPS/TLS) for any data transmitted to our servers, secure authentication practices, and reasonable technical safeguards appropriate to the limited data we hold. No system is perfectly secure, but because your financial data stays local to your device, the impact of any server-side incident on your transaction history is inherently limited.

9. Children's Privacy

Moneypod is intended for users aged 18 and above, consistent with the age requirements of the mobile money services it connects to (M-Pesa and Airtel Money). We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we'll remove it.

10. Your Rights

Under Section 26 of Kenya's Data Protection Act (2019), you have the right to access, correct, or request deletion of your account and associated data held by us. You can exercise these rights by contacting us at support@moneypod.co.ke.

11. International Data Transfers

The limited account data we hold (such as your email address) may be processed on servers located outside Kenya, depending on our infrastructure and service providers. Where this happens, we take reasonable steps to ensure it's handled with a comparable standard of protection to what's required under Kenyan law.

12. Third-Party Links & Services

Our app reads notifications from M-Pesa and Airtel Money, and our website may link to third-party platforms such as Instagram or Facebook. We don't control these third parties' own privacy practices, and this policy doesn't cover them — please review their respective policies separately.

---

13. Limitation of Liability

To the maximum extent permitted by the laws of Kenya, Moneypod and its affiliates shall not be held liable for any direct, indirect, or consequential damages resulting from:

• Financial decisions made based on app insights.
• Accuracy of parsed SMS data.
• Third-party payment network security (M-Pesa / Airtel Money).
• Any data loss due to device failure, loss, or theft.

14. Lawful Basis & Compliance

Moneypod complies with the Constitution of Kenya (2010) and the Data Protection Act (2019). By using Moneypod, you consent to this local-processing model and agree to the liability limitations stated herein.

15. Changes to This Policy

We may update this policy as Moneypod grows — for example, when we introduce bank support or cross-device sync. Material changes will be communicated in-app or by email before they take effect, and the "Last updated" date at the top of this page will always reflect the current version.

16. Contact Us

Questions about this policy or your data? We're happy to help.