Privacy policy

01What stays on your phone

bread works offline. Everything you put into the app is stored on your phone:

• Your transactions, with their amounts, notes and categories
• Your categories and monthly totals
• The people you add, with their names, phone numbers, nicknames and how you know them
• Photos you choose for the people you add

None of this is sent to us or to anyone else. We don’t run a server for it, so we can’t see it, recover it or reset it for you.

To erase it, clear bread’s storage in your phone’s settings or uninstall the app. If your Android phone backs up apps to your Google account, Android may include bread’s data in that backup. That backup is kept in your Google account and you control it in your phone’s backup settings. We can’t access it.

02Usage analytics

To know how many people use bread and which parts are worth improving, the app uses Google Analytics for Firebase, a service from Google.

What it collects

• A random ID for your copy of the app, called the app-instance ID. It’s created when you install bread and changes if you reinstall it.
• Device details: phone model, operating system and version, language and screen size
• The version of bread you’re using
• Your approximate location, such as your country and city, worked out from your IP address. Google Analytics doesn’t store the IP address itself.
• Events: when the app is opened, which screens you view, and which features you use, such as adding an expense

What it never receives

Your name, phone number, contacts, SMS messages, transaction amounts, notes, or the names and photos of the people you add. We don’t attach any of these to analytics events.

Why we use it

To count daily and monthly active users, see which features get used, and find screens that confuse people. We rely on our legitimate interest in running and improving bread. The data isn’t linked to who you are. Analytics is on when you install bread, and you can object at any time by turning it off in Settings, as explained in Turning analytics off.

Who handles it

Google processes this data for us under its data processing terms. Google may store and process it outside Kenya, including in the United States. To learn more, read Google’s Privacy Policy and Privacy and Security in Firebase.

How long it’s kept

Google Analytics keeps this event data for 14 months, then deletes it. Totals, such as how many people used bread on a given day, stay in our reports, but they aren’t linked to any one device.

03SMS messages

We’re building a feature that reads M-Pesa transaction messages on Android, so bread can sort your spending for you. It isn’t in the app yet. Today, bread doesn’t ask for SMS access and can’t read your messages.

Before that feature ships, we’ll update this policy to say exactly which messages bread reads, what it keeps and where. Your phone will ask your permission first, and you’ll be able to say no and still use bread.

04Photos and contacts

bread only opens your photo library when you choose a photo for someone, and only uses the photo you pick. It’s resized and saved inside bread on your phone. We never see it.

bread doesn’t access your phone’s contacts today. If we add a way to pick people from your contacts, we’ll update this policy, and your phone will ask your permission first.

05What we don’t do

• We don’t sell or rent your data.
• We don’t show ads or share data with advertisers.
• We don’t collect your device’s advertising ID.
• We don’t build a profile of you or make automated decisions about you.
• We don’t ask you to create an account.

06This website

This website, bread.uzskicorp.agency, doesn’t use cookies, analytics or ad trackers. It’s hosted on Cloudflare, which handles basic request details, such as your IP address and browser type, to deliver the site and protect it from abuse.

The brand guidelines page remembers whether you picked light or dark mode in your browser’s storage. That choice never leaves your browser.

The early access form on the home page isn’t switched on yet and doesn’t collect anything. We’ll update this policy before it does.

07Keeping data safe

Your bread data is protected by your phone’s own security, such as its screen lock and storage encryption. Analytics data is sent to Google over an encrypted connection, and only the people who work on bread can see our analytics reports.

No system is perfectly secure, so keep your phone locked and up to date.

08Children

bread is for adults managing their own money. It isn’t meant for anyone under 18, and we don’t knowingly collect data about children. If you think a child’s data has reached us, email privacy@uzskicorp.agency and we’ll delete it.

09Your rights

Under Kenya’s Data Protection Act, 2019, you have the right to:

• be told how your data is used, which is what this policy is for
• see the personal data we hold about you
• ask us to correct it
• ask us to delete it
• object to us using it. For analytics, you can do this yourself with the switch in bread’s Settings

If you’re in the European Economic Area or the UK, the GDPR gives you similar rights, plus the right to limit how we use your data and to take a copy of it elsewhere.

Analytics data isn’t linked to your name or number, so we usually can’t tell which records are yours. Email privacy@uzskicorp.agency and we’ll tell you what we hold and help where we can, including deleting analytics data for your device.

If you’re unhappy with how we handle your data, you can complain to Kenya’s Office of the Data Protection Commissioner at odpc.go.ke, or to the data protection authority where you live.

10Turning analytics off

Analytics is on when you install bread. To turn it off, open bread’s Settings and switch analytics off. bread then stops sending analytics data to Google straight away, and it remembers your choice until you switch it back on.

Turning analytics off doesn’t change anything else in bread. Everything works the same.

Data sent before you switched it off is deleted when its 14 months are up. To have it deleted sooner, email privacy@uzskicorp.agency.

11Changes to this policy

We’ll update this policy when bread changes, for example before SMS reading ships. The date at the top shows when it last changed. If a change affects what we collect, we’ll tell you in the app or on this page before it takes effect.

12Contact us

For questions, requests or complaints about privacy, email privacy@uzskicorp.agency, or write to us at: