1. Who we are and what this covers
This policy explains how Accurately ("we", "us") handles personal information when you use our mobile apps and web portals (together, the "Services"):
- Accurately: Personal Suite (Android package
com.impulsum.pfinance) - Accurately: Business Suite (Android package
com.impulsum.mfinance) - Accurately: Group Savings (Android package
com.impulsum.gfinance) - Accurately: Church Contributions Suite (Android package
com.impulsum.impulsum)
We follow the Kenya Data Protection Act, 2019 and, where it applies to you, other data protection laws such as the GDPR. For a business, chama or church account, the organisation that opens the account decides what records to keep about its members and customers. For that information we act on its behalf, and it is responsible for having a lawful basis to record it.
2. Information we collect
Information you give us
- Account details: your name, email address, phone number and password (stored only as a secure hash). If you sign in with Google we receive your name, email address and profile picture from Google.
- Records you enter: transactions, budgets, products, invoices, customers, members, contributions, loans, pledges, attendance, notes and documents, depending on the app.
- Messages to us: what you send when you contact support.
Information collected automatically
- Device information: a random device identifier generated by the app, device model and app version. We use this to sync your data, enforce device limits on a plan and keep your account secure.
- Usage and diagnostic data: sign-in times, errors and basic logs needed to run and fix the Services.
Information that stays on your device
- SMS messages (Personal Suite and Business Suite, Android only, optional): if you turn on the SMS inbox, the app reads SMS only from the senders you choose (for example MPESA or your bank) to suggest transactions. Messages are read and interpreted on your phone. Only the transactions you approve are saved to your account. We never read personal conversations, and you can turn the feature off at any time.
- Camera (Business Suite): used only to scan barcodes while you sell or add stock. No images are stored or sent to us.
- Fingerprint or face unlock (Personal Suite): handled entirely by your phone's operating system. We never receive your biometric data.
3. How we use your information
- To provide the Services: store your records, sync them between your devices and the web portal, and produce reports.
- To manage your account, subscription, free trial and promo codes, and to verify payments.
- To keep the Services secure, prevent fraud and abuse, and fix problems.
- To send service messages such as verification codes, password resets, reminders you set up and important changes.
- To improve the apps based on aggregated, non-identifying usage information.
4. Legal basis
We process personal information to perform our contract with you (providing the Services), with your consent (for example the optional SMS inbox, which you can withdraw at any time), for our legitimate interests in running and securing the Services, and to meet legal obligations.
5. Sharing
We do not sell your personal information and we do not use it for advertising. We share it only:
- Within your organisation: on business, group and church accounts, officials and team members see records according to the roles your organisation gives them.
- With service providers who host our servers, send email, or process payments (for example Google Play billing), under contracts that require them to protect it.
- When required by law, or to protect the rights, safety and property of our users, the public or us.
6. Security
All traffic between the apps and our servers is encrypted with HTTPS/TLS. Passwords are hashed, sign-in tokens are kept in your device's secure storage, and access to each account is restricted to its owner and the people they authorise. No system is perfectly secure, so please use a strong password and keep your phone locked.
7. How long we keep data
We keep your information while your account is active. When you delete your account it is deactivated at once and permanently closed after a 10-day grace period (signing in during that time restores it). Backups are overwritten on a rolling schedule. We may keep limited records for longer where the law requires it, for example payment records. See how to delete your account.
8. Your rights
You have the right to:
- access the personal information we hold about you and receive a copy (most apps let you export your data directly);
- correct inaccurate information;
- delete your account and personal information;
- object to or restrict certain processing, and withdraw consent at any time;
- complain to the Office of the Data Protection Commissioner (Kenya) or your local authority.
To use any of these rights, email support@accurately.com. If you are a member or customer of an organisation that uses Accurately, you can also contact that organisation directly.
9. Children
The Services are not directed at children under 18, and we do not knowingly collect their information directly. A church or group may record information about minors (such as a child's membership) under its own responsibility and with a parent or guardian's consent.
10. International transfers
Our servers and service providers may be located outside your country. Where we transfer personal information abroad we use appropriate safeguards, as required by the Data Protection Act and other applicable laws.
11. Changes to this policy
We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, tell you in the app or by email.
12. Contact us
Questions about privacy? Email support@accurately.com or use our contact page. Accurately, Nairobi, Kenya.