CediWise runs salary calculators, budgets, SME ledgers, and lessons on web and mobile. This page explains what we collect, why, and your choices.
1. Introduction
By using CediWise you agree to this policy. If anything here is unclear, email joshua.ansah@cediwise.app.
2. Controller & Contact
Data controller: CediWise. For privacy inquiries, contact us at joshua.ansah@cediwise.app.
3. What we collect
- Account & identity data: email address, phone number (used for OTP), name, Google account identifiers for Google Sign-In.
- Financial & usage data: salary inputs, budgets, small and medium enterprise (SME) ledger entries, transactions you input (stored to provide the service).
- Device & technical data: device model, OS version, app version, IP address, crash reports (for troubleshooting and analytics).
- Analytics & telemetry: usage patterns via Firebase Analytics to improve the app.
- Communications: emails you send, newsletter sign-ups, and support responses.
- Optional MoMo SMS import (mobile, opt-in): if you enable Mobile Money (MoMo) auto-tracking, the app reads SMS on your device that match MoMo payment alerts from Ghanaian carriers (e.g. MTN MoMo, Telecel Cash)—not your full message history. Message text, sender, and timestamp may be sent to our servers to parse amount and transaction details and create budget entries. You may also paste a single MoMo SMS manually. On iOS, similar import may use Apple Shortcuts you configure (optional, when available).
4. MoMo SMS auto-tracking (optional)
This feature is off by default and requires your explicit consent in the app.
- On-device: filtered MoMo alert SMS only (Android: with your permission,
READ_SMS/RECEIVE_SMS); we do not request access to unrelated messages. - Sent to CediWise: SMS body, sender ID, received time, and parsed fields (amount, counterparty, reference where available) to log expenses you choose to track.
- Not sent: unrelated SMS, contacts, call logs, or continuous monitoring beyond MoMo-style filters you enable.
- Accuracy: parsing may miss or misclassify messages; you should review imported entries and correct them when needed.
- Disable anytime: turn off tracking in Profile settings and revoke SMS permissions in your device settings.
5. Legal bases
- Performance of a contract — account and financial data.
- Legitimate interests — security, product improvement, analytics.
- Consent — marketing emails and newsletters (opt out anytime).
- Consent — optional MoMo SMS import and related device permissions (withdraw by disabling the feature).
6. How we use your data
- Provide, operate, and maintain the Services.
- Authenticate you (OTP via SMS, Google Sign-In).
- Improve and personalize the Services (analytics).
- Communicate about account, support, updates, or legal notices.
- Detect and prevent fraud and misuse.
- Parse optional MoMo SMS you provide (automatically or by paste) to suggest or create budget transactions.
7. Third parties & processors
We use trusted providers: Supabase (database/auth), Firebase (analytics), Google (Sign-In), Arkesel (SMS OTP), Vercel/GitHub (hosting). We only share the minimum data required. Refer to each provider's privacy policies for details.
8. Data retention
We retain personal data only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Financial entries and user content are retained until you delete them or close your account, except where backups or legal holds apply.
MoMo SMS import logs: raw SMS text and import metadata used for troubleshooting and deduplication are kept for up to 180 days, then deleted. Budget transactions created from imports are kept like other transactions until you delete them or close your account.
9. Your rights
You have rights to request: access, correction, deletion (right to be forgotten), portability, restriction of processing, and to object to processing where applicable. Contact joshua.ansah@cediwise.app to exercise these rights.
10. Security
We use industry-standard measures (encryption in transit, secure storage, least privilege access). No internet transmission is 100% secure — please treat sensitive financial data with discretion.
11. International transfers
Your data may be stored or processed in countries other than yours where our providers operate. We ensure appropriate safeguards (processor agreements, standard contractual clauses where required).
12. Children
Our Services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we collected such data, contact us and we will remove it.
13. Changes
We may update this policy; we'll post the date of the latest revision and, if material, notify users.