Privacy Policy & Terms
Last updated: March 14, 2026
Nzimbu ('we', 'us', or 'our') is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your data.
1. Information We Collect
Account Information
When you create an account, we may collect your name, email address, and a profile photo. You may also sign in as a guest without providing any personal information.
Financial Data
All transaction records, account balances, budgets, savings goals, debt entries, and categories you create are stored locally on your device using an encrypted SQLite database. This data belongs entirely to you.
Device & Usage Data
We collect anonymised analytics data (via Firebase Analytics) to understand how the app is used. This includes events such as screen views and feature interactions, but never your financial figures.
Crash Reports
If the app crashes, Firebase Crashlytics may collect device model, OS version, and a stack trace to help us fix bugs. No personal or financial data is included.
2. How We Use Your Data
We use the collected information to: (a) provide and improve the Nzimbu app; (b) diagnose and fix technical issues; (c) send you optional in-app messages about new features; (d) restore your data if you use the Google Drive backup feature.
3. Third-Party Services
Firebase (Google)
We use Firebase for authentication (Google Sign-In, Apple Sign-In), crash reporting, analytics, and in-app messaging. Data processed by Firebase is subject to Google's Privacy Policy.
Google Drive
If you enable the backup feature, your encrypted app data is stored in a dedicated folder in your personal Google Drive. We never access any other files in your Drive.
Google Sign-In & Apple Sign-In
You may choose to authenticate using your Google or Apple account. We only receive your name and email from these providers and do not access any other account data.
AI Features (Firebase AI / Gemini)
The AI assistant processes the text messages you send to suggest transaction entries. Messages are sent to Google's AI infrastructure. Do not include sensitive personal information beyond your transaction descriptions.
4. Data Security
Your financial data is encrypted at rest using SQLCipher on your device. We implement industry-standard security measures. However, no method of transmission or storage is 100% secure.
5. Data Retention & Deletion
You may delete your account at any time from the Settings screen. This permanently deletes your account data from our servers. Local data on your device must be cleared separately via "Clear Data" in Settings. Google Drive backups can be deleted from within Google Drive.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to: access your personal data; request correction or erasure; restrict or object to processing; and data portability. To exercise these rights, please contact us at the address below.
7. Children's Privacy
Nzimbu is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.
8. Contact
If you have questions about this Privacy Policy, please contact us at: omasuaku@gmail.com