Back

Privacy Policy

Last updated: July 2026

1. What we collect

  • Account info: name, email, phone, date of birth, gender, occupation, photo (if you upload one).
  • Financial activity: income, expenses, opening balances, daily check-ins, saving jars (including funding source — offline cash vs Mini Pocket deposits), recurring expenses, transactions, withdrawal requests, savings-circle contributions and schedules, and recommendations you save.
  • Mobile Money & deposits: the phone number, provider (MTN / Airtel), amount, reference, and status of every deposit, withdrawal, or AI-credit purchase you initiate via our payment processor (PesaPal). We never see or store your Mobile Money PIN.
  • Withdrawals & payouts: destination Mobile Money number and registered account name, or — for in-person collection — your chosen collection date and contact phone number.
  • AI activity: the prompts and answers exchanged with Kojo (your AI coach), Daily Tracker analyses, saved Daily / Weekly / Monthly Insights & Reports, financial tips shown to you, and how many AI credits you've used or purchased.
  • Reputation & engagement: your Financial Reputation Score history, badges earned, saving streaks, notifications, and last-active timestamps.
  • Savings Circles: group memberships, roles, invite codes you use, join requests, contributions, and any moderation actions.
  • Support & security: coach messages, audit logs of balance-changing actions, rate-limit records, and administrative email records tied to your requests.
  • Device & usage: basic browser/device data and timestamps for the actions you take in the app.

2. How we use your data

  • Run the app: show your jars, recurring expenses, transactions, withdrawal statuses, and savings circles; track goals; calculate your Financial Reputation Score.
  • Personalise Kojo's coaching tips, Daily Tracker analysis, and saving plans, and generate the Daily, Weekly, and Monthly Insights & Reports you request.
  • Process Mobile Money deposits, withdrawals, and AI-credit purchases you initiate, and reconcile them with PesaPal callbacks.
  • Route withdrawal requests to our operations team for review, approval, and payout — either to your Mobile Money account or via in-person office collection.
  • Send you notifications about goal progress, contribution reminders, withdrawal status changes, badges, and security events.
  • Detect abuse, fraud, and bugs, and enforce fair-use rate limits on sensitive actions.

3. Who we share with

We share the minimum needed to make the app work:

  • Our payment processor (PesaPal) and the underlying Mobile Money providers (MTN MoMo, Airtel Money) — only the phone number, amount, and transaction reference needed to process your deposit, withdrawal, or purchase.
  • Members of your savings circles — they can see your display name, reputation score, and your contributions to that circle. They cannot see your other jars, expenses, or personal info.
  • Our operations team — a summary of each withdrawal request (name, contact, amount, method, destination number or collection details) is delivered to our secure admin inbox so we can verify and pay it out.
  • Our infrastructure and AI providers — hosting, database, and the AI models that power Kojo (via the Lovable AI Gateway, currently including Google Gemini). Providers are bound by confidentiality. We do not sell your data to advertisers, and we do not use your data to train third-party AI models.

4. How your money is held

Mini Pocket distinguishes between offline cash that you manage yourself (we only track the number) and Mini Pocket deposits that you send in via Mobile Money. Only deposited funds can be paid out electronically. Withdrawal rules you set on a Saving Jar (Flexible, 24-hour notice, 72-hour notice, Locked-until-date, Locked-until-goal) are enforced on our servers, and Mobile Money payouts above UGX 2,000,000 are only released via in-person office collection after identity verification.

5. Security

We protect your account with industry-standard measures: encrypted connections, row-level access controls, audit logging on every balance change and withdrawal, rate limiting on sensitive actions, and least-privilege server access. Sign-in is handled by our authentication provider and supports Google sign-in as well as email & password. We strongly recommend a unique password.

6. Retention

We keep your data while your account is active. If you delete your account, we remove your personal data within 30 days, except where we're required to keep transaction records (e.g. anti-money-laundering laws) for a limited time.

7. Your rights

  • Access, update, or correct your profile from the app.
  • Delete your account at any time from Me → Edit profile → Delete account, or from our public deletion page at minipocket.app/delete-account if you can't sign in.
  • Request a copy of your data by contacting us.

8. Children

Mini Pocket isn't intended for anyone under 18. If you believe a child has created an account, contact us and we'll remove it.

9. Changes to this policy

We may update this policy as the app grows. We'll let you know in the app if changes are material.

10. Contact

For privacy questions, reach out from inside the app or email minipocketappug@gmail.com. We aim to reply within 7 working days.