Hello! At MyFinHealth, we're committed to keeping your personal information safe and being transparent about how we use it. This Privacy Policy explains how we collect, use, share, and protect your data when you use our website, apps, or services (collectively, our "Service"). We follow South Africa's Protection of Personal Information Act (POPIA), GDPR, and other applicable laws to ensure your privacy is respected.

1. What Information Do We Collect?

We collect the following types of information to provide and improve our Service:

Account and Payment Information: When you sign up or make payments, we collect details like your name, email address, and billing information (e.g., for PayStack payments). We don't collect your bank account details to process your uploaded bank statements.
Uploaded Data: You can upload South African bank statement PDFs. These PDFs and the transaction data we extract (like dates, amounts, and descriptions) are used to create your financial health score and report.
Usage Data: We collect info about how you use our Service, like which features you access, your IP address, browser type, and device details, to improve our platform.
Cookies and Tracking: We use cookies to make our Service work smoothly, like remembering your login or preferences. We also use Google Analytics to understand how users interact with our Service.

2. How Do We Use Your Information?

We use your information to:

Provide the Service, like processing your PDFs to generate financial health scores and reports. (Note: Extracting transaction data from PDFs isn't 100% guaranteed to be accurate, but we do our best!)
Process payments securely through PayStack.
Send you important updates, like changes to our Terms or this Privacy Policy, via email.
Improve our Service by analyzing how users interact with it.
Keep things secure, like detecting fraud or unauthorized access.
Comply with legal requirements, like POPIA or GDPR.

3. How Do We Protect Your Information?

We take your privacy seriously and use strong measures to keep your data safe:

Encryption: Your data, like uploaded PDFs and payment details, is encrypted when stored or sent.
Access Controls: Only authorized staff can access your data, and only when needed to provide the Service.
Compliance: We follow POPIA, GDPR, and other laws to protect your personal information.

4. How Long Do We Keep Your Data?

Uploaded PDFs: We store your bank statement PDFs for 30 days, then delete them.
Extracted Data: Transaction data (like amounts and categories) is kept until you close your account or ask us to delete it, unless we're required to keep it by law.
Account and Payment Info: We keep this as long as your account is active or as needed for legal or tax purposes.

If you want your data deleted sooner, just let us know at support@myfinhealth.com.

5. Who Do We Share Your Data With?

We don't sell or share your personal information for marketing purposes. We may share it in these cases:

Service Providers: We work with trusted partners, like PayStack for payments and pdf.co for PDF processing, to help run the Service. They only get the data they need and must follow strict privacy rules.
Legal Requirements: We may share data if required by law, like responding to a court order or protecting our rights.
Business Changes: If MyFinHealth is sold or merged, your data may be transferred to the new owner, but they'll still need to follow this Privacy Policy.

6. Your Choices and Rights

You have control over your data. Under POPIA and GDPR, you can:

Access: Ask for a copy of the personal information we hold about you.
Correct: Update any inaccurate info.
Delete: Request we delete your data (except where we're legally required to keep it).
Object or Restrict: Tell us to stop using your data for certain purposes.
Portability: Ask for your data in a format you can take elsewhere.

To exercise these rights, email us at support@myfinhealth.com. We'll respond as quickly as we can, usually within one week.

You can also manage cookies through your browser settings, but turning them off might affect how the Service works.

7. Not Financial Advice

Our financial health scores and reports are for information only. We're not financial advisors, so please consult a professional for financial guidance.

8. International Data Transfers

If you're outside South Africa, your data may be processed in other countries. We ensure any transfers meet POPIA and GDPR standards to keep your info safe.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. If we make big changes, we'll notify you by email. Keep using the Service after changes means you're okay with the updated policy.

10. Contact Us

Questions or concerns about your privacy? Reach out to us at support@myfinhealth.com. We're here to help!

MyFinHealth Privacy Policy