AuditPesa - Privacy Policy

Last Updated: May 9, 2026 | Effective Date: May 9, 2026

Introduction

AuditPesa ("we", "our", or "the app") is an Android application designed to help users automatically track and categorize their M-Pesa expenses. This privacy policy explains how AuditPesa handles your data.

Developer: Kindertec Ltd

Email: hello@kindertec.co.ke

Location: Nairobi, Kenya

Our Commitment to Privacy

AuditPesa is built with privacy as a core principle. All your financial data stays on your device. We do not collect, transmit, store, or share any of your personal or financial information with third parties or remote servers.

Data We Process (Locally Only)

AuditPesa processes the following data entirely on your device:

M-Pesa Transaction Information

  • Transaction type (send money, paybill, withdrawal, airtime, etc.)
  • Transaction amount
  • Recipient name or business
  • Transaction code
  • Transaction date and time
  • M-Pesa account balance (if shown in SMS)

User-Created Data

  • Expense categories you create
  • Notes you add to transactions
  • Category assignments for transactions

Source: This data is extracted from M-Pesa SMS notifications and notifications sent by Safaricom's M-Pesa service.

Why We Need Sensitive Permissions

1. Notification Listener Access

Purpose: To automatically capture M-Pesa transaction notifications in real-time.

How We Use It:

  • The app only reads notifications from M-Pesa sender IDs (e.g., "MPESA")
  • Notifications from other apps are completely ignored
  • M-Pesa transaction details are parsed and stored locally on your device
  • No notification content is ever transmitted off your device

Why It's Necessary: Without this permission, the app cannot automatically track your M-Pesa expenses, which is its core function.

2. SMS Read Permission (Optional)

Purpose: To allow you to import historical M-Pesa transactions from your SMS inbox.

How We Use It:

  • Only activated when you tap the "Import History" button
  • Only reads SMS messages from M-Pesa sender IDs
  • Messages from other senders are ignored
  • Imported transactions are stored locally on your device

Why It's Optional: This permission is only requested if you choose to import past transactions. The app works without it for new transactions.

3. Battery Optimization Exemption

Purpose: To ensure the background service continues capturing M-Pesa notifications reliably.

Why It's Necessary: Android's battery optimization can stop background services, causing the app to miss M-Pesa notifications. This exemption ensures 100% capture rate for your expenses.

What We DON'T Do

No data transmission - Your transaction data never leaves your device

No cloud storage - We don't upload your data to any server

No third-party sharing - Your data is never shared with anyone

No analytics or tracking - We don't use analytics services

No advertisements - We don't show ads or share data with advertisers

No account creation - No email, phone number, or personal details required

No access to other notifications - Only M-Pesa notifications are processed

Data Storage and Security

Local Storage

  • All data is stored in encrypted SQLite databases on your device
  • Databases are protected by Android's app sandboxing
  • No other apps can access AuditPesa's data without root access
  • Data is stored in your device's internal storage, not SD card

Data Retention

  • Transaction data is kept indefinitely until you manually delete it
  • You can delete individual transactions or clear all data from the app settings
  • Uninstalling the app permanently deletes all stored data

Your Data Rights

You have complete control over your data:

Access

View all your transactions at any time through the app

Deletion

  • Delete individual transactions by swiping them in the app
  • Clear all data from Settings → Clear All Data
  • Uninstalling the app deletes all data permanently

Children's Privacy

AuditPesa does not knowingly collect data from children under 13. Since M-Pesa requires users to be 18+ in Kenya, this app is intended for adults only.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be posted in the app and on this page with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

Open Source Transparency

AuditPesa's source code is available for review on GitHub. You can verify our privacy claims by examining the code directly.

Third-Party Services

AuditPesa does not integrate any third-party services, SDKs, or libraries that collect user data. The app functions entirely offline.

Data Breach Notification

Since all data is stored locally on your device and never transmitted to servers, there is no risk of remote data breaches. Your data security depends on your device's security (screen lock, encryption, etc.).

Compliance

This privacy policy complies with:

  • Google Play Store Data Safety requirements
  • Kenya Data Protection Act, 2019
  • General best practices for mobile app privacy

Contact Us

If you have questions about this privacy policy or how AuditPesa handles your data:

Email: hello@kindertec.co.ke

Developer: Kindertec Ltd

Location: Nairobi, Kenya

For technical support or feature requests, please contact us at the email above or open an issue on our GitHub repository.

By using AuditPesa, you acknowledge that you have read and understood this privacy policy.