Privacy Policy

Kiwi Money is built in Sri Lanka and is governed by the Sri Lanka Personal Data Protection Act (PDPA).

• Local First: We prioritize keeping sensitive financial information on your device.
• Global Access: If you use Kiwi Money outside Sri Lanka, you consent to your data being handled according to Sri Lankan laws.

• Automation & Insights: We process and store specific transaction data on our servers to provide accurate categorization and spending insights.
• Personalization: To manage your profile and features like leaderboards.
• Referral Program: We process referral data to track Conversions, determine reward eligibility, apply subscription extensions through RevenueCat, and detect fraudulent or abusive activity. When your App syncs with our servers, it sends your subscription status (free or paid) and referral state so we can calculate and apply any pending rewards.

• No Selling Data: We do not sell, rent, or trade your information.
• No Bank Access: We never ask for your bank login or passwords.
• No Snooping: We use automated filters to isolate transactions and instantly discard non-financial content.
• No Hidden Tracking: We do not track your physical location. We do not use your financial data for external advertising. We use limited, anonymized data for ad measurement purposes only (see Section 5).

We use trusted partners who only have access to the data necessary to perform their tasks:

• RevenueCat: Manages your subscriptions, payments, and referral reward fulfilment (subscription extensions and lifetime entitlements). When you earn a referral reward, we instruct RevenueCat to extend your billing period or grant a lifetime entitlement on your behalf.
• WinWinKit: Platform used to store referral codes, referrer-invitee relationships, and Conversion records. This is used solely to operate the referral program.
• Meta (Facebook): Receives anonymized app event data (such as app installs, trial starts, and subscription events) to measure the performance of our advertising campaigns. Meta does not receive your financial transaction details, bank SMS content, or spending data. You can opt out of ad tracking on iOS via your device's App Tracking Transparency settings, or on Android via your device's ad personalization settings.
• Mixpanel: Collects anonymized usage data to help us improve.
• Google: Provides secure login, personal Google Drive backup space, and intelligent AI tools to help accurately categorize your spending.

• Encryption: All data sent to our servers for categorization is encrypted in transit and at rest.
• Filtered by Design: Our backend is programmed to identify and keep only transaction-related data, ignoring everything else.
• Age Limit: Kiwi Money is for users 18 and older.

• Backups: Your financial data is backed up to your personal Google Drive. We do not have access to this data.
• Opt-out: You can opt out of analytics tracking at any time by contacting us.
• Deletion: You have the right to request the deletion of your account and any data we hold.
• Referral Data: If you delete your account, your referral code is deactivated and your referral relationships are removed from our servers. Invitees who already claimed your code and received rewards retain those rewards, but no further Conversions will be tracked. If you are an Invitee, deleting your account does not reverse the Conversion credit given to your referrer.

You are responsible for your device security. Kiwi Money is not liable for unauthorized access caused by:

• Sharing your Google credentials.
• Leaving your device unlocked.
• Allowing others physical access to your phone.