Privacy Policy
Kiwi Money ("we," "us," or "our") is committed to protecting your personal data in compliance with Sri Lanka's Personal Data Protection Act. This policy explains how we handle your information in the Kiwi expense-tracking app. By using our service, you agree to these terms.
Last updated: 6 January 2026
- We prioritize on-device storage to keep your data under your control.
- We only collect your profile, subscription status, and necessary transaction details.
- Your info is used solely to automate and categorize your expenses. We never sell it.
- Data is encrypted, and sensitive info like OTPs is automatically filtered and discarded.
- You can opt out of analytics or delete your account and data at any time.
🌍1. Scope and Jurisdiction
Kiwi Money is built in Sri Lanka and is governed by the Sri Lanka Personal Data Protection Act (PDPA).
- Local First: We prioritize keeping sensitive financial information on your device.
- Global Access: If you use Kiwi Money outside Sri Lanka, you consent to your data being handled according to Sri Lankan laws.
📥2. Information We Collect
| Category | What We Collect | Why We Collect It |
|---|---|---|
| Bank SMS | Transaction details (amount, merchant, date, masked account) and the raw SMS for backend processing. | To automatically log expenses, categorize spending, and provide financial insights. |
| Profile & Login | Name, email, and profile picture via Google Sign-In. | To manage your account and user profile. |
| Subscriptions | Plan IDs and purchase receipts. | To manage your premium features. |
| App Usage | Anonymized screen views and crash logs. | To fix bugs and improve the app. |
⚙️3. How We Use Your Information
- Automation & Insights: We process and store specific transaction data on our servers to provide accurate categorization and spending insights.
- Personalization: To manage your profile and features like leaderboards.
Our Promise: We will only use your financial data for personalized recommendations if you explicitly opt-in. We never sell your data to third parties.
🚫4. What We Don't Do (The Boundaries)
- No Selling Data: We do not sell, rent, or trade your information.
- No Bank Access: We never ask for your bank login or passwords.
- No Snooping: We use automated filters to isolate transactions and instantly discard non-financial content.
- No Hidden Tracking: We do not track your physical location or use your data for external advertising.
🤝5. Third-Party Services
We use trusted partners who only have access to the data necessary to perform their tasks:
- RevenueCat: Manages your subscriptions and payments.
- Mixpanel: Collects anonymized usage data to help us improve.
- Google: Provides secure login, personal Google Drive backup space, and intelligent AI tools to help accurately categorize your spending.
🛡️6. Data Security
- Encryption: All data sent to our servers for categorization is encrypted in transit and at rest.
- Filtered by Design: Our backend is programmed to identify and keep only transaction-related data, ignoring everything else.
- Age Limit: Kiwi Money is for users 18 and older.
📂7. Your Data, Your Control
- Backups: Your financial data is backed up to your personal Google Drive. We do not have access to this data.
- Opt-out: You can opt out of analytics tracking at any time by contacting us.
- Deletion: You have the right to request the deletion of your account and any data we hold.
🔑8. Your Responsibility
You are responsible for your device security. Kiwi Money is not liable for unauthorized access caused by:
- Sharing your Google credentials.
- Leaving your device unlocked.
- Allowing others physical access to your phone.
📬Questions?
If you have any questions about this policy or your data, please reach out to us.
For our terms and conditions, please see our Terms of Use.