Privacy Policy

Last updated: October 2026

Tribbe ("we," "our," "the app") is a personal finance app built by Tribbe Nation LLC that helps you track, budget, and understand your mobile money transactions. This policy explains what personal data Tribbe collects, why, how it is used and shared, and the choices and rights you have. By creating an account you agree to this policy and our Terms of Service.

Who can use Tribbe

Tribbe is for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

Data we collect and why

SMS messages (mobile money transactions)

On Android, Tribbe can request SMS read access to automatically detect and parse mobile money transaction messages (e.g., M-Pesa, Airtel Money) so you don't have to enter transactions by hand. You can also import transactions manually from an M-Pesa statement PDF you provide, or by forwarding individual messages to the app, without granting SMS access at all.

• When SMS access is granted, Tribbe filters incoming messages by sender and content, and only processes messages that match known mobile-money transaction formats.
• Tribbe does not read, store, or transmit the content of personal SMS messages unrelated to mobile money transactions.
• Parsed transaction data (amount, counterparty, date, transaction type) is stored locally on your device, and synced to Tribbe's servers if you're signed in and cloud sync is enabled.

Camera

Used only when you choose to scan a receipt or invoice for expense capture. Tribbe does not access the camera in the background.

Microphone

Used only when you tap the voice-input control to ask Tribbe's assistant ("Flami") a question by speaking instead of typing. Audio is converted to text using your device's speech recognition and is not stored after transcription.

Account information

If you sign in with Google or Apple, we receive the basic profile information (name, email) those providers share for authentication, handled through Firebase Authentication. We also ask for your phone number and confirm it with a one-time SMS code, to secure your account and to confirm it is you before sensitive actions such as deleting your account. We use this information to create, secure and manage your account.

Financial data you enter or import

Transactions, budgets, and categories you create, or that are parsed from SMS, statements, or receipts, are stored locally on your device. If you're signed in with cloud sync enabled, this data is also synced to Tribbe's own backend servers so you can restore it on a new device. You can also create a local backup file at any time and choose where to save it — this does not involve our servers.

Questions you ask Flami

When you ask Flami a question, the question and the financial details needed to answer it (for example totals, categories and the relevant transactions) are sent to Tribbe's servers and processed by OpenAI to write the reply. Flami keeps your conversations and some of your preferences so it can answer follow-up questions. You can clear Flami conversations and see what Flami remembers in the app (Settings → Flami AI).

App usage analytics and session recordings

To understand which features help people and where they get stuck, Tribbe records how the app is used: which screens are opened, taps and scrolls, when the app is opened or closed, and milestones such as finishing phone verification, importing transactions, or asking Flami a question.

• Session recordings capture the layout of screens with all text, numbers, images and charts hidden before anything leaves your device. Amounts, balances, names, phone numbers, and message content are never included.
• Usage data is linked to a random account identifier, not to your name, email, or phone number.
• Your IP address is used only to estimate your country and city, and is then discarded.
• Recordings are kept for up to 30 days and usage events for up to 1 year.

Crash reports

If the app crashes or something fails, a technical report (device model, Android version, app version and what failed) is sent to Firebase Crashlytics so we can fix it. These reports do not include your messages, amounts or balances.

When you contact us

If you email or message us for support, we keep that conversation and the details you share so we can help you.

How we use your data

• To provide Tribbe: import and organise your transactions, keep your records and balances up to date, and answer your questions in Flami.
• To create and secure your account: sign-in, phone verification, and confirming it is you before sensitive actions.
• To understand and improve the app, using the analytics described above.
• To prevent fraud and abuse and keep Tribbe secure.
• To send you service notifications, such as reminders and important account notices. You can turn notifications off in your phone's settings.
• To respond to your support requests, and to comply with the law and lawful requests.

What we don't do

• We do not sell your data.
• We do not share your SMS content, transaction history, or financial data with advertisers or data brokers.
• We do not share your personal data with other companies for their own marketing.
• We do not read SMS messages outside the mobile-money transaction use case described above.

Who we share data with

We share personal data only as described here:

• Service providers that run parts of Tribbe for us and may use the data only to do so: Google Firebase (sign-in, app integrity checks, analytics, crash reports and our servers), PostHog (usage analytics and session recordings), OpenAI (Flami's replies), and SMS providers that deliver verification codes.
• When the law requires it: to comply with a law, regulation or legal process, or a lawful request from regulators, courts or law enforcement.
• To protect people and Tribbe: when needed to prevent fraud, physical harm or financial loss, or to protect our users, services and legal rights.
• If Tribbe changes ownership: if Tribbe is merged, acquired, or sells all or part of its business, to the parties involved, who must keep protecting your data as this policy describes.
• With your consent, for anything else.

Data storage and retention

• Transaction and budget data is stored locally on your device by default.
• If cloud sync is enabled, data is also stored on Tribbe's backend infrastructure and retained until you delete your account or request deletion (see below), except where we're required to retain financial records for a longer period under applicable law.
• When you delete your account, you can restore it within 30 days. After that your personal data is deleted; financial records the law requires us to keep are retained, anonymised.
• You can delete your data using the in-app deletion flow, or by following the steps on our Account & Data Deletion page. To delete specific data without deleting your account, see Request Data Deletion.

International transfers

Some of our service providers process data outside Kenya, for example Google's cloud services, PostHog (data hosted in the European Union) and OpenAI (United States). When your data is transferred, we use providers that protect it to the standard this policy describes and as the Kenya Data Protection Act, 2019 requires.

How we protect your data

• Data sent between the app and our servers is encrypted in transit.
• Access to our systems is limited to the people and services that need it.
• Your transactions are stored on your phone by default; cloud copies are kept on Tribbe's own backend.

Please keep your phone, app PIN and sign-in details safe: you are responsible for activity on your account that uses them. Tell us straight away if you think someone else has accessed your account.

Third-party services

• Firebase (Google) — sign-in, app integrity checks, analytics, crash reports, and the servers behind Flami.
• PostHog (data hosted in the EU) — usage analytics and session recordings as described above. PostHog processes this data on our behalf and does not use it for its own purposes.
• OpenAI — writes Flami's replies from your question and the financial details needed to answer it, on our behalf.
• Google Sign-In / Sign in with Apple — authentication only.
• Your device's built-in speech recognition — used only for voice input to Flami.

Your rights

Under the Kenya Data Protection Act, 2019 you have the right to:

• be told how your personal data is used (this policy);
• access the personal data we hold about you;
• have inaccurate data corrected;
• object to, or ask us to restrict, some uses of your data;
• have your data deleted: you can delete your account in the app, or follow our Account & Data Deletion page;
• receive your data in a portable format.

To use any of these rights, email privacy@tribbe.io. You can also complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.

Changes to this policy

We'll update this page if how we handle your data changes, and update the "Last updated" date above. If the changes are significant, we'll tell you in the app and ask you to agree again.

Contact

Tribbe Nation LLC — Data Protection Officer: privacy@tribbe.io