Apps

Personal SuiteBusiness SuiteGroup SavingsChurch Contributions
Why AccuratelyFAQDownloadContact
Legal

Privacy policy

Last updated 4 November 2026

Your financial records are personal. This policy explains, in plain language, what we collect, why, and the choices you have.

1. Who we are and what this covers

This policy explains how Accurately ("we", "us") handles personal information when you use our mobile apps and web portals (together, the "Services"):

  • Accurately: Personal Suite (Android package com.impulsum.pfinance)
  • Accurately: Business Suite (Android package com.impulsum.mfinance)
  • Accurately: Group Savings (Android package com.impulsum.gfinance)
  • Accurately: Church Contributions Suite (Android package com.impulsum.impulsum)

We follow the Kenya Data Protection Act, 2019 and, where it applies to you, other data protection laws such as the GDPR. For a business, chama or church account, the organisation that opens the account decides what records to keep about its members and customers. For that information we act on its behalf, and it is responsible for having a lawful basis to record it.

2. Information we collect

Information you give us

  • Account details: your name, email address, phone number and password (stored only as a secure hash). If you sign in with Google we receive your name, email address and profile picture from Google.
  • Records you enter: transactions, budgets, products, invoices, customers, members, contributions, loans, pledges, attendance, notes and documents, depending on the app.
  • Messages to us: what you send when you contact support.

Information collected automatically

  • Device information: a random device identifier generated by the app, device model and app version. We use this to sync your data, enforce device limits on a plan and keep your account secure.
  • Usage and diagnostic data: sign-in times, errors and an activity log of requests to our servers (the time, the page or action, your IP address, browser or app version, and the result). App and website errors are reported to the same log so we can fix them. Passwords, sign-in tokens and other secrets are removed before anything is logged.
  • Cookies: the web portals use only the cookies needed to keep you signed in and to protect sign-in forms against forged requests. We do not use advertising or tracking cookies. Small settings, such as whether you have seen the welcome tour, are kept in your browser or app.

Information that stays on your device

  • SMS messages (Personal Suite and Business Suite, Android only, optional): in Personal Suite they are read on your phone and not stored on our servers unless you choose to sync them; in Business Suite the money messages are shared with your business's account so your team can record them. See SMS messages below.
  • Phone and SIM details (Personal Suite and Business Suite, optional): on a phone with two SIM cards, the app can tell which SIM a money SMS arrived on so you can link each line to its own wallet. Android asks for the phone permission only when you pick a line. The SIM details are read on your phone; only the line and number you save for a sender are kept with your settings.
  • Camera (Business Suite): used only to scan barcodes while you sell or add stock. No images are stored or sent to us.
  • Fingerprint or face unlock (Personal Suite): handled entirely by your phone's operating system. We never receive your biometric data.

3. SMS messages

The SMS inbox is optional, works only on Android, and only after you allow SMS access. In both apps it reads SMS only from the senders you switch on in Senders & rules (for example MPESA or your bank), never personal conversations or other senders.

Personal Suite

Your SMS stay on your phone. We do not store them in our database.

  • Messages are read and interpreted on your phone. The text of each SMS and the suggestions waiting for your review are kept in the app's storage on your phone and are not uploaded to our servers by default.
  • When you approve a suggestion, only the resulting transaction (amount, date, wallet, category, the other party and the M-Pesa or bank reference) is saved to your account and synced to your other devices, exactly as if you had typed it in.
  • If you want your waiting SMS on another device, you can turn on Sync SMS messages in your profile. Only then are those messages stored on our servers with the rest of your account. Turn it off again at any time. You can also ask us to delete any SMS already synced.
  • Your senders and rules (for example "MPESA goes to my M-Pesa wallet") are settings, not messages, and sync with your account.
  • You can switch the inbox off or withdraw SMS access in Android settings at any time. Uninstalling the app deletes the SMS data it kept on your phone. Your SMS themselves stay in your phone's messaging app.

Business Suite

  • The phone reads the money messages from the senders the business switched on, works out the amount, the other party and the reference, and sends those messages (with their text) to your business's account on our servers, so the owner and the team members allowed to use SMS can put each one in a category and record it as an expense or income.
  • Only money messages are sent: SMS from other senders, and messages that are not payments, never leave the phone.
  • The app can read new money messages automatically when it opens. Switch Read new SMS automatically off on the SMS screen to scan only when you press Scan.
  • Messages are kept with the business's records while the business account exists. The business can ignore any message, and you can ask us to delete the messages stored for your business.

4. How we use your information

  • To provide the Services: store your records, sync them between your devices and the web portal, and produce reports.
  • To manage your account, subscription, free trial and promo codes, and to verify payments.
  • To keep the Services secure, prevent fraud and abuse, and fix problems.
  • To send service messages such as verification codes, password resets, reminders you set up and important changes.
  • To improve the apps based on aggregated, non-identifying usage information.

We process personal information to perform our contract with you (providing the Services), with your consent (for example the optional SMS inbox and the optional SMS sync, both of which you can withdraw at any time), for our legitimate interests in running and securing the Services, and to meet legal obligations.

6. Sharing

We do not sell your personal information and we do not use it for advertising. We share it only:

  • Within your organisation: on business, group and church accounts, officials and team members see records according to the roles your organisation gives them.
  • With service providers who host our servers, send email, or process payments (for example Google Play billing), under contracts that require them to protect it.
  • When required by law, or to protect the rights, safety and property of our users, the public or us.

7. Security

All traffic between the apps and our servers is encrypted with HTTPS/TLS. Passwords are hashed, sign-in tokens are kept in your device's secure storage, and access to each account is restricted to its owner and the people they authorise. Sign-in, sign-up and password forms are protected against forged requests, and the apps block screenshots and screen recording so your figures do not leak into shared images. Unusual activity is recorded and monitored. No system is perfectly secure, so please use a strong password and keep your phone locked.

8. How long we keep data

We keep your information while your account is active. When you delete your account it is deactivated at once and permanently closed after a 10-day grace period (signing in during that time restores it). Activity logs are kept for up to 90 days and server log files for 14 days. Backups, which may be held with a second hosting provider so the Services can recover from an outage, are protected and overwritten on a rolling schedule. We may keep limited records for longer where the law requires it, for example payment records. See how to delete your account.

9. Your rights

You have the right to:

  • access the personal information we hold about you and receive a copy (most apps let you export your data directly);
  • correct inaccurate information;
  • delete your account and personal information;
  • object to or restrict certain processing, and withdraw consent at any time;
  • complain to the Office of the Data Protection Commissioner (Kenya) or your local authority.

To use any of these rights, email support@accuratelysuite.com. If you are a member or customer of an organisation that uses Accurately, you can also contact that organisation directly.

10. Children

The Services are not directed at children under 18, and we do not knowingly collect their information directly. A church or group may record information about minors (such as a child's membership) under its own responsibility and with a parent or guardian's consent.

11. International transfers

Our servers and service providers may be located outside your country. Where we transfer personal information abroad we use appropriate safeguards, as required by the Data Protection Act and other applicable laws.

12. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, tell you in the app or by email.

13. Contact us

Questions about privacy? Email support@accuratelysuite.com or use our contact page. Accurately, Nairobi, Kenya.