Privacy Policy

Last updated: 17 July 2026 · Fedha Technologies, Dar es Salaam, Tanzania

This policy explains what personal data Fedha Tracker collects, why, and the rights you have over it. It is written with Tanzania's Personal Data Protection Act, 2022 in mind, under which Fedha Technologies acts as the data controller.

1. What we collect

• Account data: email address and password (password stored only as a secure hash by our authentication provider).
• Profile data you choose to add: full name, profile photo, type of work, stated monthly income, preferred currency, your assistant's name.
• Financial data you enter: transactions, budgets, savings goals, loans, investments, suppliers, customers, business details (including TIN/VRN for Business accounts), and receipts you attach.
• AI Assistant conversations: the questions you type. Conversations are processed to generate answers; see section 3.
• Technical data: basic logs needed to operate and secure the Service.

2. Why we collect it

Solely to provide the Service to you: showing your dashboards, reports, forecasts, health score, alerts, and AI answers; operating your subscription; and keeping your account secure. We do not sell your personal data, and we do not use your financial data for advertising.

3. Who processes your data on our behalf

• Supabase — hosts our database, authentication, and file storage (profile photos, receipts).
• Vercel — hosts the application.
• Anthropic — powers the AI Assistant and the daily recommendation. When you ask a question, your question and a summary of your financial data are sent to Anthropic's API to generate the answer. We use API settings under which inputs are not used to train AI models.
• Stripe — processes subscription payments. Card details go directly to Stripe; we never see or store them.

These providers operate infrastructure outside Tanzania; by using the Service you consent to this processing, which is limited to delivering the features described above.

4. Cookies and local storage

We use strictly functional cookies and browser storage: keeping you signed in, remembering which alerts you have seen or dismissed, and caching your daily recommendation. We do not use advertising or cross-site tracking cookies.

5. How long we keep data

For as long as your account exists. When you delete your account, your personal and financial data is permanently deleted from our systems (payment records may be retained by our payment provider as required by their legal obligations).

6. Your rights

Under the PDPA you can, at any time:

• Access and export — download a complete copy of your data from your Profile page.
• Correct — edit any information directly in the app.
• Delete — permanently delete your account and all its data from your Profile page.
• Complain — contact us first; you also have the right to complain to Tanzania's Personal Data Protection Commission (PDPC).

7. Security

Data is encrypted in transit; access is protected by authentication and row-level security so each user can only reach their own records; API keys and secrets are held server-side only. No system is perfectly secure, but we treat your financial data with the seriousness it deserves.

8. Children

The Service is not directed at persons under 18, and we do not knowingly collect their data.

9. Changes and contact

Material changes to this policy will be announced in the app. Questions or requests: Fedha Technologies, Dar es Salaam, Tanzania — support contact available in the app.

This document is a working draft prepared for review by a licensed Tanzanian advocate prior to public launch, alongside the company's registration with the Personal Data Protection Commission as a data controller.