Privacy policy
Last updated:
This policy applies to the Nzilà Clarity, Nzilà Pro and Nzilà Evolution apps, on phones and in the browser (clarity.nzilahub.app), and to the nzilahub.app website. They are published by Nzilà Mbongo (“we”).
In short: your financial data is only used to answer you. We don’t sell it, we don’t show ads, and we share it with no one other than the essential technical providers listed below. Our statistics never contain your amounts or your descriptions. You can delete everything at any time.
1. Who is responsible for your data
Nzilà Mbongo is the data controller. For any question or request about your data: support@nzilahub.app.
2. The data we process
| Data | Why | When |
|---|---|---|
| Account: email address, display name, sign-in method (email/password or Google account) | To identify you and sync your data across your devices | If you create an account (required on the web) |
| Financial data you enter: transactions, accounts, categories, budgets, goals, currency | The core purpose of the app: answering “where did my money go?” | On your device; copied to our servers if you have an account |
| Progress and game: tier, streaks, quests, achievements, credits, preferences | The guided path and the game economy | Same |
| Country | To pick your language, currency and the right chart of accounts | When you first open the phone app, if you allow location. Only the country is kept, never your precise position |
| Public game profile: a randomly drawn player name (e.g. “Okapi 482”), avatar, tier, league results | Social features (friends, leagues, encouragements) | Visible to other users unless you turn off “Findable via search”. Your real name never appears |
| Contacts (older versions only) | Finding friends who already use Nzilà | Clarity no longer accesses your contacts since the November 2026 version. Only earlier versions offered this, if you had turned it on: numbers and emails were encrypted (hashed) on your phone before sending. We are erasing the fingerprints sent that way from our servers |
| Friends: your friend code (6 characters, always the same), your friend list and how you got connected (code, QR or link) | Connecting two accounts when one uses the other’s code, QR or link | When you share yours or use a friend’s. Once connected, you are friends both ways |
| What your friends see: your tier changes, achievements, streak records, league results and streak-for-two milestones (the “What’s new” feed), and whether you noted something today | Sharing your progress with the people you connected with | “Noted today” can be turned off in your game profile. Only the fact that you noted shows, never what you noted or any amount |
| Streak for two: for you and your partner, the last day noted, the current streak, the shield available and your time offset | Counting the shared streak and warning you in the evening when it is at risk | Only if you accepted it. Your partner sees whether you noted today, even if “Noted today” is turned off |
| Gifts: who gave which item, when, and with which message (picked from a list, never free text) | Delivering the gift and showing it to you | When a friend gives you a shop item, or when you give one |
| What others did for you (the “For you” feed): encouragements, thanks, gifts, accepted requests and reactions you received, with the person’s player name and avatar | Showing them to you in “What’s new” | When a friend does one of these things for you |
| Community events: the player name and avatar of the first person to reach a tier, and that tier; for you, the event gifts you already claimed | Announcing these moments to everyone in “What’s new”, and handing out a gift only once | You are named only if you stay “findable”, and never in a country with fewer than 30 players. For a gift reserved for one country, your latest known country is checked |
| Camera | Reading a friend’s QR code | Only when you open the scanner, and if you allow it. No image is saved or sent: only the code read is used |
| Install link (Android) | Connecting you with the friend who invited you | If you install Clarity from a friend’s link, Google Play passes their friend code to the app, which reads it once on first launch |
| Usage statistics: screens viewed, actions taken (for example “transaction logged”, “tier reached”), and their context: type of device (Android, browser on a phone or a computer), app version, country, chosen mentor, tier | To understand what helps or gets in the way, and improve the app | Sent once you are signed in, linked to your account. Never your amounts, descriptions or transactions |
| Errors and crashes: error message, place in the app, device (brand and model, or browser), system version, screen size, technical trace | To fix problems | Errors: once signed in. Android crashes: through Firebase Crashlytics, linked to your account’s technical identifier when you are signed in (never to your email) |
| Note-taking moments: for each entry you note, the time you noted it, the day and time of the transaction, and its category (for example “Transport”). Never the amount or the description | To remind you to take notes at the right time: at the hours you usually note, and when a usual expense (the morning commute, the monthly rent) is not noted yet | Once you are signed in, for every account, on your phone as in the browser |
| Notification token and delivery statistics (notification sent, received, by type: streak reminder, mentor, league, friends) | To send you the reminders and alerts you turned on, and check that they arrive | If you allow notifications |
| Purchases: product, amount, date, payment reference and status | To deliver what you bought and handle claims | If you buy credits (on the web). We never see your card number or your mobile money PIN |
We do not collect: your precise location, your photos, your bank details, or any data for advertising purposes. The camera is only used to read a friend’s QR code, and nothing is saved.
3. Without an account (guest mode, on phones)
You can use Nzilà Clarity on a phone without an account. Your data then stays only on your device: nothing is sent to our servers except crash reports, without any account identifier.
4. In the browser (web version)
On clarity.nzilahub.app, an account is required and online sync is always on: your data is stored on our servers. The browser keeps a copy during your session; when you sign out, it is erased from the computer, except transactions not yet synced, which are sent as soon as the connection allows.
5. The nzilahub.app website
The public website sets no cookies and contains no advertising trackers.
To know how many people visit it and where they come from, it counts page views without storing anything on your device: the page read, the site that sent you there (for example WhatsApp or Google), the type of device (phone or computer) and, if the link carries one, the campaign name. To estimate the number of visitors on a given day, a fingerprint is computed from your IP address, your browser and a code drawn at random each day. Your IP address is never stored, and the day’s code is erased the next day: the fingerprint can neither recognise you from one day to the next nor lead back to you. These page views are erased after 30 days; only daily totals are kept.
6. Where your data is stored
- On your device, protected by your PIN on phones.
- On Google Firebase servers (Google Cloud) if you have an account: authentication, database, server functions, notifications and crash reports. Crash reports and notification delivery statistics are also copied to Google BigQuery, the analysis tool of our Google Cloud project. These servers are mainly located in the United States and Europe. Google acts as a processor and applies its own security safeguards.
- At Paystack, our payment provider, for purchases. Paystack processes your payment data under its own privacy policy.
Traffic between the app and our servers is encrypted (HTTPS/TLS).
7. Who can access it
- Google (Firebase, BigQuery): hosting and technical operation;
- Paystack: payment processing;
- other users, for your public game profile and the community announcements that name you, and only if you stay “findable”;
- your friends, for what you share with them: your progress in the “What’s new” feed, whether you noted today (if “Noted today” is on), the state of your streak for two with the partner you accepted, and the gifts you exchange;
- our team, which looks at aggregated statistics (number of active users, features used, errors…) with no amounts or transactions. It looks at a specific account’s information (tier, credits, orders, never your transactions) only to handle a support request or a missing payment, and each such action is recorded in a log.
Your financial data is never visible to other users. We do not sell or rent any data.
8. How long we keep it
- Your account, financial and game data: as long as your account exists.
- Detailed usage statistics: 13 months at most, then they are erased automatically.
- Note-taking moments: 110 days at most, then they are erased automatically.
- Your friends, friend code, streaks for two and gifts: as long as your account exists.
- Whether you noted today: replaced every day; once “Noted today” is off, it is erased at the latest when you next note something.
- Crash reports: 90 days at most.
- Page views of the nzilahub.app website: 30 days at most.
- Statistical summaries (for example “120 active users that day”) identify no one and may be kept longer.
- Payment records at Paystack: as long as financial regulations require.
When you delete your account, we erase your data from our servers, usage statistics, friend code, streaks for two and the gifts you gave included (see Delete your account). A community announcement already published may keep your randomly drawn player name, which does not identify you.
9. Your rights
At any time, you can:
- view and correct your data, directly in the app;
- erase your online data while keeping your account: Profile → Clear my cloud data;
- delete your account and all its data: Profile → Delete my account, or from this page if you no longer have the app;
- turn off the findable profile, “Noted today”, location, camera and notifications;
- end a streak for two at any time, from your partner’s profile;
- write to us for any other request (access, copy, objection): support@nzilahub.app. We reply within 30 days.
If you believe your rights are not respected, you can contact the data protection authority in your country.
10. Children
The Nzilà apps are not intended for children under 13 and we do not knowingly collect their data.
11. Changes
If this policy changes significantly, we will tell you in the app before the change takes effect. The last update date is shown at the top of this page.