In short: PesaDiary reads M-Pesa SMS messages on your device to show transaction insights. Processing happens entirely on your phone. We do not collect, transmit, sell, or share your data with our servers or third parties.
This Privacy Policy describes how Erick Warui ("we", "us", or "our") handles information when you use the PesaDiary mobile application ("App").
By installing or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Who we are
Developer: Erick Warui
Contact email: contact@ericksolutions.co.ke
Website: ericksolutions.co.ke
For privacy-related questions, requests, or complaints, contact us at the email address above.
2. What the App does
PesaDiary helps you understand your M-Pesa activity by reading M-Pesa confirmation SMS messages stored in your device's SMS inbox, parsing transaction details (such as amounts, dates, counterparties, and fees), and presenting summaries and insights inside the App.
3. Information we access and process
The App requests permission to read SMS messages on your device. We use this permission only to access messages that appear to come from M-Pesa (for example, messages from senders whose address contains "MPESA").
From those messages, the App may process:
- Message date and time
- Sender address (e.g., MPESA)
- Message body text (transaction confirmations)
- Derived transaction details, such as amount, direction (sent/received), counterparty or merchant name, transaction reference code, and transaction cost
The App does not request access to your contacts, location, camera, microphone, phone calls, or other SMS senders unless future versions explicitly request additional permissions and update this policy.
4. How we use your information
We use the information described above solely to:
- Display M-Pesa transaction history and analytics within the App
- Generate monthly summaries, totals, and entity-based breakdowns
- Filter and organize transactions by date range or category
- Support optional on-device export of message data to your device's Documents folder, if you enable that feature when available
We do not use your data for advertising, profiling, or marketing.
5. Where processing happens
All reading, parsing, and analysis occurs locally on your device. The App does not require an internet connection to function and does not send your SMS content or transaction data to our servers.
6. Data sharing and disclosure
We do not sell, rent, trade, or otherwise share your personal information with third parties for their marketing purposes.
We do not integrate third-party analytics, advertising, or crash-reporting SDKs that collect your SMS or financial data.
We may disclose information only if required by law, regulation, legal process, or governmental request, or to protect our rights, users, or the public where permitted by law.
7. Data storage and retention
- On your device: SMS messages remain in your device's SMS inbox as managed by your phone and messaging system. The App processes them in memory while you use it and does not maintain a separate cloud database of your messages.
- App state: Certain UI preferences (such as selected date ranges or filters) may be retained locally on your device between sessions using standard Android app state mechanisms.
- Exports: If you use export functionality, a copy of selected message content may be saved to your device's Documents folder under your control.
- Android backup: Depending on your device settings, Android may include limited app data in device backup or transfer features. We do not intentionally store your SMS content in app-specific persistent storage for backup.
When you revoke SMS permission or uninstall the App, the App stops accessing your messages. Uninstalling the App does not delete your original SMS messages from your device.
8. Legal bases (where applicable)
Depending on your location, our legal bases for processing may include:
- Your consent — you grant SMS read permission through Android's permission system
- Legitimate interests — providing the personal finance insights you request from your own device-local data
- Contract — delivering the core functionality of the App you chose to install
You may withdraw consent at any time by revoking the SMS permission in your device settings.
9. Your choices and rights
You can:
- Grant or deny SMS access when prompted, or later in Android Settings → Apps → PesaDiary → Permissions
- Stop all processing by revoking SMS permission or uninstalling the App
- Delete exported files you created using your device's file manager
- Contact us to ask questions about this policy or our practices
If you are in the European Economic Area, United Kingdom, Kenya, or other regions with data protection laws, you may have additional rights (such as access, correction, deletion, restriction, objection, or portability) regarding personal data we process. Because we do not collect data on our servers, many requests can be fulfilled directly by you through device permissions and uninstallation. Contact us if you need assistance.
10. Children's privacy
The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided information through the App, contact us and we will help you address it.
11. Security
We design the App to minimize data exposure by keeping processing on your device and not transmitting SMS content over the network. However, no method of electronic storage or transmission is 100% secure. You are responsible for securing your device with a screen lock, keeping your operating system updated, and controlling which apps have SMS access.
12. International users
Because data is processed locally on your device and is not transmitted to us, cross-border data transfers by us do not occur. If you use the App outside Kenya, local laws may still apply to how you handle your own device data.
13. Third-party services
The App is distributed through Google Play. Google may collect information about downloads, device compatibility, and payments (if any) according to Google's own privacy policy. That collection is separate from the App's on-device SMS processing.
14. Data collection summary (Google Play)
| Data type | Collected? | Shared with third parties? | Purpose |
|---|---|---|---|
| SMS messages (M-Pesa only) | Yes — on device only | No | Core app functionality |
| Financial transaction details derived from SMS | Yes — on device only | No | Analytics and summaries shown to you |
| Name, email, account registration | No | No | Not applicable |
| Location, contacts, photos | No | No | Not applicable |
15. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we may also notify you through the App or Google Play listing. Continued use of the App after an update means you accept the revised policy.
16. Contact us
If you have questions about this Privacy Policy or our privacy practices, contact:
Erick Warui
Email: contact@ericksolutions.co.ke