This Privacy Policy explains how Monifyx handles personal information when you use our website, web app and Android app (together, “Monifyx” or “the service”). It is written to be read: what we collect, why, who helps us run the service, how long information stays, and the choices you have.
1. Who operates Monifyx
Monifyx is operated by [Legal entity name], [Registered business address], Kenya (“we”, “us”). For the purposes of the Kenya Data Protection Act, 2019, we are the data controller for the personal information described in this policy. Privacy questions and requests: [Privacy contact email].
2. Information we collect
| Category | What it includes |
|---|---|
| Account details | Name, username, email address, phone number, and your password (stored only in a protected, non-readable form). If you sign in with Google: your name, email address and Google account identifier. We never receive your Google password. |
| Financial records | Transactions you add or authorise Monifyx to bring in: amounts, dates and times, transaction references, who was paid or who sent money (phone numbers partly hidden), categories, money received, transfers between your own accounts, transaction charges, loans and repayments, savings and assets you record, and summaries of your net worth over time. |
| Receipts | Receipt photos you upload and the details read from them (shop, date, items, prices, totals, payment method). |
| Things you enter | Budgets, shopping lists, payments you type in, notes or messages you paste, category choices and corrections. |
| Subscription and payments | Your plan, amount, date, payment status, M-Pesa receipt code and a partly hidden phone number. We never see or store your M-Pesa PIN. |
| Security and technical information | Sign-in and security records (such as time, IP address and device type), device information, usage information and technical logs. |
| Invitations | If you join through an invite link, which account invited you. We do not read your contacts. |
3. How information enters Monifyx
- You type or paste it, for example a payment, a budget or a list.
- You upload it, for example a receipt photo or an M-Pesa statement.
- You authorise it. In the Android app you can allow Monifyx to read financial messages (from M-Pesa, banks, SACCOs, money market funds and loan providers) on your phone. This is optional, needs your permission, and you can turn it off at any time in the app or in your phone settings. Personal messages are not read.
- We create it when you use the service, for example sign-in records and payment records.
4. Why we use your information
- To provide the service you asked for: organising your transactions and receipts, showing your spending, money in, budgets, reports, net worth and savings suggestions.
- To run your account and subscription: sign-in, free trial, payments, reminders and receipts.
- To keep Monifyx and your account secure: preventing fraud and misuse and applying our terms fairly.
- To support you, fix problems and improve the service.
- To meet legal obligations, such as keeping accounting records of payments.
We do not sell your information, use it for advertising, or use your financial records for any purpose other than providing and securing the service for you.
5. Service providers
We work with carefully selected service providers, such as cloud hosting, technology, communication and payment providers, who process information on our behalf only to help us run Monifyx. They are bound to protect it and may not use it for their own purposes.
6. Transfers outside Kenya
Some of our service providers process information on servers outside Kenya. Where this happens we rely on the safeguards permitted by the Kenya Data Protection Act, 2019, including contractual protections offered by these providers, and we transfer only what is needed for the purpose.
7. How we protect your information
We use appropriate technical and organisational measures to protect your information.
No online service can guarantee perfect security. Please use a strong password, turn on two-step sign-in, and tell us straight away if you think your account has been misused.
8. How long information is kept
| Information | Why it is kept | How long |
|---|---|---|
| Account details and your financial records, receipts and entries | To provide the service to you | While your account exists. If your subscription or trial ends, your account stays (read-only) with your information in it until you delete it. |
| A transaction or receipt you delete | So you can undo the change | Removed from your records straight away; a copy stays in your Recent changes for up to 90 days so you can undo it, then it is removed. |
| Receipt photos | To read the receipt | Deleted when you save or discard the receipt. A photo you upload but never save or discard can remain in your account storage until your account is deleted. |
| Financial messages and statement files | To organise your transactions | The message text and statement files are not kept; the transaction details are saved in your account. |
| Sign-in and security records | Security and fraud prevention | 90 days, including after an account is deleted. |
| Technical and usage logs | Fixing problems and fair use | Up to 60 days. |
| Subscription and payment records | Accounting, tax and payment disputes | For as long as Kenyan accounting and tax law requires, including after an account is deleted. |
| Other service records (in-app notices, troubleshooting records) | Running and supporting the service | May remain for a limited time after an account is deleted, until they are cleared. |
| Backups | Recovering the service after a failure | Information may remain in backups for a limited period after it is deleted, until those backups are replaced in the normal cycle. |
9. Deleting your account
You can delete your account at any time under ⚙ → Account → Delete my account. When you do, your account details, financial records, receipts, entries and photos are deleted from the service. Some information is kept afterwards, as described in section 8: payment records required by law, sign-in and security records for up to 90 days, technical logs for up to 60 days, a small number of other service records (such as in-app notices) until they are cleared, and copies in backups until they are replaced. You can download a full backup of your data before deleting your account.
10. Your rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- be informed about how your information is used;
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted, subject to the legal exceptions above;
- object to processing, or withdraw consent you have given (for example to message reading) at any time;
- receive your information in a portable format;
- complain to the Office of the Data Protection Commissioner (ODPC).
11. How to use your rights
Much of this you can do yourself in the app: see and correct your records, download your data and a full backup, turn message reading off, and delete your account. For anything else, contact us at [Privacy contact email]. We may ask you to confirm your identity and will respond within the time the law allows.
12. Cookies and storage on your device
Monifyx uses a necessary sign-in cookie to keep you signed in (for up to 30 days) and stores your settings and an offline copy of some screens on your own device so the app works without a connection. We do not use advertising or tracking cookies.
13. Children
Monifyx is for people aged 18 and over. We do not knowingly collect information from children.
14. Changes and contact
If we change this policy we will update the date at the top, and tell you in the app or by email if the change is significant. Questions: [Privacy contact email]. See also our Terms of Service and Data Protection Policy.