Privacy Policy

Last Updated: October 6, 2025

1. Introduction

Welcome to Finance-Ant ("we," "us," "our," or the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our personal financial management platform.

Finance-Ant is committed to protecting your privacy and ensuring the security of your financial data. This Privacy Policy complies with the Data Protection Act, 2019 (Kenya) and other applicable data protection regulations.

By using Finance-Ant, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Full name
• Email address
• Phone number
• Password (encrypted)
• Profile information
• Payment information (for premium features)

Financial Information:

• Bank statements (PDF and other document formats)
• Mobile money statements (M-PESA, Airtel Money, etc.)
• Transaction data (dates, amounts, descriptions, categories)
• Account numbers and account names
• Currency information
• Budget information
• Financial goals and preferences
• Manual transaction entries

2.2 Information Collected Automatically

Usage Information:

• Pages visited and features used
• Time spent on the Service
• Click patterns and navigation paths
• Feature interaction data
• Search queries within the Service

Device and Technical Information:

• IP address
• Browser type and version
• Device type and operating system
• Screen resolution
• Timezone and language preferences
• Cookies and similar tracking technologies

3. How We Use Your Information

3.1 Service Delivery

• Provide and maintain the Finance-Ant platform
• Process uploaded bank and mobile money statements
• Extract and organize financial transactions using AI
• Categorize and track expenses
• Generate budgets and financial reports
• Detect and manage duplicate transactions
• Synchronize data with authorized third-party integrations
• Enable family team collaboration features

3.2 Service Improvement

• Analyze usage patterns to improve features
• Enhance AI-powered document processing accuracy
• Develop new features and functionality
• Optimize user experience and interface
• Conduct research and analytics (using anonymized data)

3.3 Communication

• Send account-related notifications
• Provide customer support
• Send transaction alerts and updates
• Deliver important Service updates
• Send marketing communications (with your consent, which you can withdraw at any time)
• Respond to your inquiries and requests

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Third-Party Service Providers

We share information with trusted service providers who help us operate our business:

Cloud Storage:

• Amazon Web Services (AWS S3) for secure document storage
• Data is encrypted in transit and at rest

AI Processing Services:

• OpenAI, Anthropic, or other AI providers for document analysis
• Only necessary document content is shared for processing
• AI providers process data according to their privacy policies

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Security Measures

• End-to-end encryption for data transmission (TLS/SSL)
• Encryption at rest for stored documents and data
• Secure cloud storage on Amazon S3
• OAuth2 token encryption
• Regular security audits and assessments
• Intrusion detection and prevention systems
• Secure API endpoints

5.2 Your Security Responsibilities

• Maintain strong, unique passwords
• Enable two-factor authentication when available
• Keep your login credentials confidential
• Log out when using shared computers
• Report suspicious activity immediately
• Regularly review your account activity

6. Your Rights Under Kenya Data Protection Act

As a data subject in Kenya, you have the following rights:

6.1 Right of Access

• Request access to your personal data
• Obtain a copy of your information
• Understand how your data is processed

How to exercise: Email hello@financeant.app with "Data Access Request" in the subject line.

6.2 Right to Rectification

• Correct inaccurate personal data
• Update incomplete information
• Amend outdated records

How to exercise: Update information in your account settings or email hello@financeant.app.

6.3 Right to Erasure ("Right to be Forgotten")

• Request deletion of your personal data
• Remove your information when no longer necessary
• Delete data processed based on consent (when consent is withdrawn)

How to exercise: Use the account deletion feature or email hello@financeant.app.

6.4 Right to Lodge a Complaint

If you believe your data protection rights have been violated:

• Contact us first at hello@financeant.app
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
• ODPC Contact: www.odpc.go.ke

7. International Data Transfers

7.1 Data Storage Locations

Your data may be stored and processed in:

• Kenya (primary jurisdiction)
• Amazon Web Services data centers (various locations)
• Third-party AI service providers' servers (outside Kenya)

7.2 Transfer Safeguards

When transferring data internationally, we ensure:

• Adequate data protection measures are in place
• Service providers comply with applicable data protection standards
• Appropriate contractual safeguards are implemented
• Data transfers comply with Kenya Data Protection Act requirements

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to:

• Reflect changes in our practices
• Comply with legal requirements
• Improve clarity and transparency
• Add new features or services

When we make material changes:

• We will update the "Last Updated" date
• We will notify you via email
• We will provide in-app notifications
• We may require you to accept the updated policy

9. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices: