Privacy Policy — Vimux Finance

Last updated: July 2026

This Privacy Policy describes how Vimux Finance ("the App", "we", "us") handles your information. The App is developed by Vinsoft Technologies (contact: vinreim@gmail.com).

1. Information We Collect

Transaction data you create: The App records financial transactions you add manually or that are auto-captured from M-Pesa notifications. This includes transaction amounts, dates, descriptions, categories, and account balances.

M-Pesa notification content: When you grant the Notification Listener permission, the App reads the text content of M-Pesa notifications from Safaricom to automatically log transactions. This data is processed entirely on your device and is never transmitted anywhere.

What we do NOT collect:

• Your name, email address, or any personal identifiers (unless you optionally sign in for Cloud Sync)
• Your M-Pesa phone number or account number
• Location data
• Device identifiers
• Usage analytics or crash reports sent to us

2. How We Use Your Information

All data the App collects stays on your device in local storage. It is used solely to:

• Display your transaction history
• Calculate budgets, savings progress, and financial health scores
• Detect recurring payments and subscriptions

3. Data Sharing

We do not sell, trade, or share your data with any third party.

If you choose to use the optional Cloud Sync feature (powered by Supabase), your data is encrypted in transit and stored in a private database row only your account can access. This feature requires your explicit sign-in consent, and can be disconnected at any time from within the App.

4. Notification Listener Permission

The App requests the Notification Listener permission (BIND_NOTIFICATION_LISTENER_SERVICE) to read M-Pesa transaction notifications from Safaricom. This is the primary feature of the App.

• Only M-Pesa notification content is processed
• Notification content is never sent to any server
• You can revoke this permission at any time in Android Settings → Notifications → Notification Access

5. Data Storage and Security

Your financial data is stored locally on your device and is protected by Android's standard app sandboxing. Your app-lock PIN is stored as a salted hash in the device's hardware-backed secure keystore, and biometric unlock (fingerprint/face) is processed entirely by your device's operating system — biometric data never reaches the App or any server.

You can export your data at any time via Settings → Export Backup, and delete all data via Settings → Clear All Data.

6. Children's Privacy

The App is intended for users aged 18 and above. We do not knowingly collect information from children under 18.

7. Changes to This Policy

We may update this Privacy Policy. Changes will be reflected in the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

8. Contact

If you have questions about this Privacy Policy, contact:
Vinsoft Technologies
Email: vinreim@gmail.com