Privacy Policy

In short

• Without an account, your money records stay on your phone. With an account, a copy is kept in our database so you can use it on another phone. Only you can see it.
• In Uganda, if you switch it on, the app reads MTN MoMo and Airtel Money messages on your phone. The messages themselves are never uploaded.
• We collect usage analytics without amounts, notes or names, and you can switch it off.
• No ads, no advertising ID, and we never sell your data.
• You can download your data or delete your account in the app (Settings → Privacy & data) or on the web.

Who we are

Mypesaguard is a personal-finance app for Android, developed and operated by an independent developer in Kampala, Uganda ("we", "us"). For anything about your information, write to mypesaguard@gmail.com.

What we collect, and why

When you use the app without an account

Everything you enter — expenses (amount, category, note, date, how you paid), income, budgets, savings goals, categories and reminders — is saved on your phone only. We do not receive it.

When you create an account

• Name, email address and password, to create and secure your account. Your password is stored only as a secure hash by our authentication provider; we never see it. We email you a code to confirm the address is yours.
• Or, if you choose "Continue with Google": Google tells us your name, your email address (and that it is verified), your Google account ID and a link to your profile picture. Our authentication provider keeps these with your account; the app does not use the picture. We never get your Google password or anything else in your Google account. If you already have an account with the same email, Google is added to it as a way to sign in.
• Your money records (as listed above), copied to our database so they are backed up and available when you sign in on another phone.
• Country and currency, so your amounts are shown in the right currency on every device.

MoMo messages (Uganda, Android, only if you switch it on)

With your permission, the app watches for incoming SMS from MTN MoMo and Airtel Money senders only. Other messages, including personal messages and one-time codes, are ignored. The app reads the amount, the merchant and the transaction reference on your phone and shows a notification so you can log the payment. The message itself is never uploaded or stored by us. If you log the payment, it becomes a normal expense (and is backed up if you have an account). You can switch this off any time in Settings or in your phone's settings.

Usage analytics

To understand which features are used and fix what is confusing, the app records events such as "app opened", "screen viewed" or "expense logged", with the app version, the platform, your country and currency, and a random identifier created when you install the app (plus your account ID if you are signed in). These events never contain amounts, notes, merchant names, contact details or the names of your categories. You can switch analytics off in Settings → Privacy & data; nothing is sent after that.

Feedback and support

If you send feedback from the app, we receive your message, the app version and the random install identifier — and your email address only if you choose to add it so we can reply. If you contact us by WhatsApp or email, that conversation is handled by WhatsApp or your email provider under their terms.

Invite codes

Each install gets an invite code, stored with the random install identifier so we can count how many people used it.

Technical information

Like any internet service, the servers that answer the app and this website receive your IP address and basic request information. We do not add IP addresses to your records; our providers (Supabase's sign-in service and Netlify) log them for security and operations.

What we do not collect

We do not collect your location, contacts, photos, advertising ID or phone number, and the app contains no advertising or third-party tracking SDKs.

Our legal grounds

Where the law requires a legal basis, we rely on:

• Providing the service you ask for — your account, saving and syncing your records, showing them in your currency.
• Legitimate interests — usage analytics to improve the app (which you can switch off), keeping the service secure, and answering feedback.
• Your permission — reading MoMo messages, which only happens after you grant SMS access and which you can withdraw at any time.

Who can see your information

Your records are protected so that each account can only read its own data — this is enforced by the database itself, not just by the app. We do not sell or rent personal information and we do not share it for advertising. We use these service providers to run Mypesaguard:

• Supabase — database, sign-in and account emails (account holders' records, analytics and feedback).
• Google Play — app distribution, updates and in-app reviews, under Google's own privacy policy.
• Google Sign-In — only if you choose to sign in with Google. Google knows you signed in to Mypesaguard, under Google's own privacy policy.
• Netlify — hosting this website. The website also loads fonts from Google Fonts.

We may disclose information if required by law, or to protect the safety of our users or the service.

Where your information is stored

Our database and authentication are hosted by Supabase on cloud servers that may be in a different country from you, so your information may be transferred across borders. We rely on our providers' contractual and security commitments for these transfers.

How long we keep it

• Account and money records: until you delete them or your account.
• Usage analytics: 13 months, then deleted automatically.
• Feedback: until it has been dealt with, and always deleted with your account.
• On your phone: until you delete it, delete your account or uninstall the app.

Our database provider keeps routine backups for a limited time; deleted information disappears from them as they are replaced.

Your choices and rights

• See and download your data: Settings → Privacy & data → Download my data gives you everything in your account (or on your phone if you have no account) as a file.
• Correct it: edit or delete any record in the app. To correct your name or email address, contact us.
• Delete your account: Settings → Privacy & data → Delete my account (you confirm with your password, or with Google if you signed up with Google), or mypesaguard.netlify.app/delete-account if you can't use the app. This deletes your account, all your records, your feedback and the usage analytics from your devices immediately. If you signed in with Google, you can also remove Mypesaguard from your Google Account (under third-party apps and services); deleting in the app after confirming with Google does this for you.
• Say no: switch off usage analytics, MoMo message reading or notifications at any time.

You can also email mypesaguard@gmail.com to exercise any right you have under the law where you live. We will answer within 30 days. If you are unhappy with how we handle your information, you can complain to your data-protection authority (in Uganda, the Personal Data Protection Office).

Security

All connections use encryption (HTTPS). Access to records is limited to their owner by rules in the database. Passwords are never stored in readable form. The app's local data is excluded from phone backups, and you can lock the app with your fingerprint or PIN. No system is perfectly secure, so please use a strong password and keep your phone locked.

Children

Mypesaguard is intended for adults (18 and over) and is not directed at children. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

If we change how we handle your information, we will update this page and the date at the top.

Contact

Questions or requests: mypesaguard@gmail.com.