Privacy Policy

We collect information to provide and improve our services to you. The types of information we collect include:

• Information You Provide Voluntarily: This includes information you provide when you contact us directly, such as your name, email address, and the content of your message.
• Automatically Collected Information: When you access or use our platform, we automatically collect information about your device and how you interact with our site. This may include usage data, device information, and general location data inferred from your IP address.
• Usage Data: Pages visited, time spent on pages, referral sources, clickstream data.
• Device Information: IP address, browser type, operating system, unique device identifiers.
• Location Data: General geographical location inferred from your IP address.
• Information from Third-Party Services: We may use third-party analytics services such as Google Analytics, and advertising services such as Google AdSense, which may use cookies to serve ads based on prior visits to our website or other websites.

We use the information we collect for various purposes, including:

• To provide, operate, and maintain our platform.
• To improve, personalize, and expand our platform.
• To understand and analyze platform usage.
• To develop new products, services, features, and functionality.
• To communicate with you for support, updates, and promotional purposes.
• To send emails where appropriate.
• To detect and prevent fraud.
• To comply with legal obligations.
• To support advertising and marketing through Google AdSense.

We may share your information in the following situations:

• With Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us, including analytics and advertising providers.
• For Business Transfers: We may share or transfer your information in connection with a merger, sale of assets, financing, or acquisition.
• Affiliates: We may share your information with affiliates who are required to honor this Privacy Policy.
• Legal Obligations: We may disclose information where required by law or in response to valid legal requests.
• To Protect Our Rights: We may disclose information where necessary to investigate fraud, policy violations, safety threats, or illegal activities.
• With Your Consent: We may disclose personal information for any other purpose with your consent.

The Statement Analyzer accepts bank and M-Pesa statements. These are the most sensitive documents on the platform, so this section sets out exactly what happens to one, in the order it happens.

• Reading the file: A statement is read to extract its transactions. Smaller files are read entirely in memory and are never written to storage. A large PDF has to be held while it is processed a few pages at a time; it is kept in private storage that is not reachable by URL, and it is deleted as soon as the extraction finishes or fails.
• Automated extraction and categorisation: Where a statement cannot be read as text, its pages are sent to a third-party AI provider to extract the transaction rows. Transaction descriptions are separately sent to a third-party AI provider to suggest a category. We instruct these providers not to retain our requests, and we do not store anything with them for later retrieval. Providers may hold a request briefly under their own abuse-monitoring policies, which we do not control. These providers process data on our instructions and are not permitted to use your statements to train their models.
• What we keep: The transactions extracted from your statement, and the workspace you build from them, are held in your account so you can return to them. Any statement file left over from an unfinished upload is deleted automatically within 24 hours.
• Deleting it: You can delete stored statement files at any time under Settings in the Statement Analyzer, individually or all at once. Deleting a file keeps the transactions and balances already extracted from it. Resetting the workspace deletes the files together with those transactions and balances. Deleting your account removes all of it.

We do not sell statements or the data extracted from them, and we do not use them for advertising.

We implement reasonable security measures designed to protect the security of any personal information we process. However, no method of electronic transmission over the Internet or storage technology can be guaranteed to be fully secure, and we cannot guarantee that unauthorized parties will never be able to defeat our safeguards.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• The right to access, update, or delete your data.
• The right to correct incomplete or inaccurate data.
• The right to object to processing.
• The right to request restriction of processing.
• The right to data portability.
• The right to withdraw consent where applicable.

To exercise any of these rights, please contact us using the details provided below.

We use a small number of cookies and similar browser storage, all needed for the site to work.

• Strictly necessary: Cookies that keep you signed in and protect forms against cross-site request forgery. The site cannot work without them.
• Stored on your device and in your account: The Statement Analyzer, the budget and the financial planner keep your work in your browser's local storage so it loads quickly. When you are signed in, your statement workspace, categorisation rules, opening balances, financial plan and budget are also saved to your account on our servers, so they are there on any device. Tool settings, such as the business details printed on exports, stay in your browser. None of this is used for advertising.
• Advertising and analytics: We do not currently use advertising or analytics cookies. If we introduce them, for example Google AdSense, we will update this policy and ask for your consent before they are set.
• Your choices: You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in from working.

Our platform may contain links to third-party websites or services not operated by us. If you click on a third-party link, you will be directed to that third party's site. We advise reviewing the privacy policy of every site you visit, as we do not control and are not responsible for third-party content, privacy practices, or services.

Our platform is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we become aware that we have collected such data without appropriate consent, we will take steps to remove that information.

Your information may be transferred to, stored, and processed on computers located outside your jurisdiction where data protection laws may differ. By providing information to us, you consent to such transfer, processing, and storage in accordance with this Privacy Policy.

Specifically, data for ApexHub Insights may be processed and stored through third-party cloud providers, including services hosted in the United States or Europe. While data processing may occur internationally via cloud providers, we endeavor to comply with the Kenyan Data Protection Act, 2019.

This includes the automated extraction and categorisation described in Section 04, which is carried out by AI providers operating outside Kenya. Statements and transaction descriptions are transferred to those providers only for as long as it takes to process them, are not stored with them for later retrieval, and are not used to train their models.

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “Last Updated” date at the top of this page will be revised accordingly. You are advised to review this Privacy Policy periodically.

If you have any questions about this Privacy Policy, you can contact us:

• By email: [email protected]
• By visiting this page on our website: Contact Us Page