1. Introduction

R-Tracker ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management service.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, such as:

• Name, email address, and contact information
• Account credentials and authentication information
• Profile information and preferences
• Financial goals and planning information

2.2 Financial Information

To provide our financial management services, we collect:

• Bank account information and transaction data
• Investment portfolio details
• Budget and expense information
• Income sources and amounts
• Debt and loan information
• M-Pesa and mobile money transaction data

2.3 Technical Information

We automatically collect certain technical information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log files and analytics data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our financial management services
• Process transactions and manage your accounts
• Generate financial insights and recommendations
• Send important notifications about your finances
• Improve our services and develop new features
• Provide customer support and respond to inquiries
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Security

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit using TLS and at rest using AES-256
• Access Controls: Strict access controls and authentication requirements
• Regular Audits: Regular security audits and vulnerability assessments
• Secure Infrastructure: Industry-standard cloud security practices
• Data Minimization: We only collect data necessary for our services

5. Information Sharing

We do not sell, trade, or rent your personal financial information. We may share information only in these limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Banking and payment processing
• Cloud hosting and data storage
• Analytics and performance monitoring
• Customer support services

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our Terms of Service

6. Third-Party Integrations

R-Tracker integrates with various third-party services:

• Banking APIs: For account synchronization and transaction import
• M-Pesa API: For mobile money transaction tracking
• Investment Platforms: For portfolio tracking and analysis
• AI Services: For financial insights and recommendations

These integrations are governed by their respective privacy policies.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services

You may request deletion of your account and associated data at any time.

8. Your Rights

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request export of your data
• Opt-out: Opt-out of marketing communications
• Restrict Processing: Request restriction of data processing

9. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized content and recommendations
• Ensure security and prevent fraud

You can control cookie settings through your browser preferences.

10. International Transfers

Your information may be transferred to and processed in countries other than Kenya. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Children's Privacy

R-Tracker is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@r-tracker.com
• Data Protection Officer: dpo@r-tracker.com
• Address: Nairobi, Kenya

14. Compliance

This Privacy Policy is designed to comply with:

• Kenya Data Protection Act, 2019
• General Data Protection Regulation (GDPR)
• Other applicable data protection laws