Introduction
Wealth ByYou is a personal finance app built for Kenyans. This Privacy Policy explains what data we collect, how we use it, and the rights you have over it.
Our core commitment: your financial data never leaves your device. The Wealth ByYou app is built on a two-plane architecture — all transaction records, budgets, savings goals, and financial history are stored locally on your phone only. Our servers hold zero financial data.
This policy applies to:
- The Wealth ByYou mobile app
- The Wealth ByYou waitlist website (wealth.techbyyou.com/waitlist)
By using either, you agree to this policy.
Information We Collect
Waitlist (website)
When you sign up on our waitlist we collect:
- Your email address
- If you choose to give them: your name, your phone number, and your answer to an optional question about what you'd like help with
This is stored securely in our database and used only to notify you about early access and launch updates.
App — Account data
When you create an account in the app we collect:
- Name
- Email address or phone number
- A hashed, one-time OTP for verification (never stored in plain text)
App — Financial data (stored on your device only)
All financial records you create in the app — transactions, budgets, savings goals, debt records, investment projections — are stored locally on your device using an encrypted on-device database. This data is never transmitted to or stored on our servers.
App — SMS data (Android only)
With your explicit permission, the app reads incoming SMS messages to automatically detect M-Pesa transactions. Only messages that match known M-Pesa transaction patterns are processed. Raw SMS content is never uploaded to our servers.
App — Voice input
With your explicit permission, the app uses your microphone to let you log transactions by voice. Voice audio is processed on-device and converted to text. Audio recordings are not stored or uploaded.
App — Usage and crash data
We collect anonymised crash reports and error logs to improve app stability. This data does not include any financial information.
How We Use Your Information
| Data | Purpose |
|---|---|
| Waitlist email (and name, phone, answer if given) | Send early access invites and launch updates |
| Account email or phone | Authenticate your identity via OTP; send product notifications |
| Financial data (on-device) | Power your budgets, savings goals, reports, and projections — entirely on your phone |
| SMS transaction data | Auto-detect M-Pesa transactions to reduce manual entry |
| Voice input | Convert spoken entries to logged transactions |
| Crash and error logs | Diagnose bugs and improve app stability |
We do not sell, rent, or trade your personal data to any third party. We do not use your data for advertising purposes.
Third-Party Services
Wealth ByYou uses the following third-party services. Each is bound by its own privacy policy.
| Service | Purpose | Data shared |
|---|---|---|
| Firebase (Google) | App crash reporting, push notifications | Device identifiers, crash logs |
| Sentry | Error monitoring and diagnostics | Anonymised error traces, device info |
| Resend | Transactional email (OTP, notifications, waitlist emails) | Your email address |
| Neon (PostgreSQL) | Secure cloud database | Account and waitlist data only — name, email or phone, authentication tokens. Zero financial data. |
No financial data is ever shared with any third-party service.
Data Storage and Security
On-device (financial data). All financial records are stored in an encrypted local database on your phone. If you uninstall the app, this data is deleted. We have no ability to access, recover, or view your financial data.
Our servers (account data only). Account data (name, email or phone, authentication tokens) is stored in a secured cloud database hosted in the EU (Neon/PostgreSQL). Passwords are never stored — we use one-time OTPs only. Data in transit is encrypted via HTTPS/TLS.
Waitlist data. Waitlist sign-up data is stored in the same secured database and is accessible only to the Wealth ByYou team.
Retention. We retain account data for as long as your account is active. You may request deletion at any time (see Your Rights below). Waitlist data is deleted after the beta period closes or upon your request.
Your Rights Under the Kenya Data Protection Act 2019
As a data subject under the Kenya Data Protection Act 2019 (KDPA), you have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate or incomplete data be corrected
- Deletion — request that your personal data be erased from our systems
- Withdrawal of consent — withdraw consent for SMS reading or voice input at any time via your phone settings; we will stop processing that data immediately
- Objection — object to the processing of your data for any purpose
- Portability — request your data in a portable, machine-readable format
To exercise any of these rights, contact us at the email below. We will respond within 30 days in accordance with the KDPA.
Wealth ByYou is the data controller for all personal data collected through the app and waitlist.
Children's Data
Wealth ByYou is not intended for children under the age of 13. Users between 13 and 18 may only use the app with verified parental or guardian consent. We do not knowingly collect personal data from anyone under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it immediately. If you believe a child under 13 is using the app, contact us at alerts@techbyyou.com.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights, we will notify the Office of the Data Protection Commissioner within 72 hours in accordance with the Kenya Data Protection Act 2019. If the breach is likely to result in high risk to you, we will also notify you directly via email or in-app notification, describing the nature of the breach and the steps we are taking to address it.
Cross-Border Data Transfers
Your account data (name, email or phone, authentication tokens) is stored on servers hosted in the European Union by our database provider, Neon. This transfer is conducted with appropriate safeguards in place to ensure your data receives a level of protection consistent with the Kenya Data Protection Act 2019. No financial data leaves your device at any time.
Contact Us
For any questions, data requests, or concerns about this Privacy Policy, contact:
Wealth ByYou
Email: alerts@techbyyou.com
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document and notify active users via email or in-app notification.
