Privacy Policy

FinKasi is operated by FinKasi Technologies (Pty) Ltd. Company registration: 2026/727057/07.

Our Information Officer is Vhusi Phiri. For privacy requests, including requests from workers, contact hello@finkasi.com. General support: hello@finkasi.com.

You may complain to South Africa's Information Regulator, including if you believe we have not addressed your concern.

• Accounts: email address, Google sign-in identity where used, account identifiers, names or display names, country, membership and sign-in/session information. Sign-in uses Google or an email link, not an app password.
• Money records: receipt and slip images, merchant and item details read from them, dates, amounts, taxes and payment descriptions; ledgers, budgets, events, building projects and site photos, rental statements, expense claims and payment proofs. Payment displays use masked or last-four references rather than full card numbers; an uploaded original can still contain information you include in it.
• Sharing: the names, emails, roles and access history of people you invite, including household members, accountants and event contributors; invitation and join-request records.
• Activity: credits, levels, awards and adjustments, referral codes and qualification records, anti-abuse signals, budget reviews and Sunday check-ins.
• Messages: FinKasi Sunday preferences, delivery records and summaries; reminder/nudge preferences and records. Where a messaging channel is connected, linked mobile numbers and capture/reminder information may be processed. The public early-access form does not require connecting one.
• Household staff: employer-entered names, job titles, contact details, identity/passport and foreign-permit details, work schedules, dates, wages, payslips, deductions, leave, bonus planning, beneficiary and contribution records. Sensitive identity and permit numbers are encrypted and displayed masked. Employer and debit-mandate information can include addresses, contacts and encrypted bank/account-holder identity details.
• UIF and COIDA: registration and checklist information, references and proof, declarations, authorised paperwork, COIDA plans and their history. UIF practitioner authority records include your typed signature, wording/version, timestamp, IP address and device information, together with revocation history.
• Early access: your name, mobile, email, staff count, requested services, optional message, consent and enquiry status. Spam safeguards can use a hashed network address; we do not store a raw IP in these requests.

We also process technical logs, errors, request/device information and metadata about receipt-reading calls. The AI cost log stores call metadata, not slip content.

The app uses browser local storage for your sign-in session, selected ledger, preferences, invitation/referral and return-to information, and a random referral device identifier for abuse checks. Sign-in services may use necessary session cookies. The app does not set advertising or analytics cookies. External Google Fonts requests send ordinary network information to Google. You can clear browser storage or sign out; clearing it may remove preferences or interrupt sign-in.

If you enter another person's information, you must have their consent or another lawful basis, explain how it will be used and keep it accurate. This applies to staff, beneficiaries and people you invite. Do not enter unnecessary sensitive details.

FinKasi records POPIA consent where the staff, authority or request form provides for it; a recorded checkbox does not replace your responsibility as an employer. Workers can ask their employer to correct information and can contact our privacy contact directly to exercise their rights. A worker link is restricted to that worker's payslip and relevant status, not other workers' records or the household's ledger.

We use information to provide accounts and money tools, read receipts, maintain your records, enable sharing you choose, prepare payroll and authorised UIF/COIDA assistance, manage requests, credits and referrals, send summaries/reminders, prevent abuse, support you and maintain security. Depending on the purpose, the lawful basis is your consent, performing our agreement with you, complying with legal duties, or protecting legitimate interests such as secure operation and fraud prevention. Marketing uses consent where required.

FinKasi Sunday and its news sections are switched on by default. You can switch them off in email preferences or use the unsubscribe link in an email. Essential service and sign-in messages may still be sent.

We share only information needed for a purpose below, subject to access controls. Your sharing choices determine which members, accountants and contributors can see ledger or event information. A Personal ledger is locked to its owner.

• Service providers (operators): we use reputable providers for cloud hosting, database and storage, sign-in and email delivery, and automated reading of receipts (AI). They process personal information only on our instructions and under contracts requiring appropriate security and confidentiality. We do not allow them to use your information to train their own models where we can control this. Receipt reading sends uploaded images and the relevant instructions to the AI service; upload only what is necessary for that task.
• Google: Google sign-in when selected and hosted fonts.
• Resend: FinKasi Sunday email delivery, including recipient email and their private summary.
• Messaging service providers: once the WhatsApp service is launched, providers operating that channel and its bot will process the receipt-capture and reminder information needed to provide it. Early-access requests currently go through the web app.
• Authorised statutory assistance: SENA COID Services and the Compensation Fund for COIDA processes, and UIF/uFiling for practitioner registration, linking and declarations, where the employer authorises the relevant work. Government submissions remain a human step; FinKasi does not automate government logins.

No live debit-order collection or payment-provider integration is enabled in the current code. Recording bank details or estimates does not itself collect money. Funeral cover is not currently offered; registering interest does not activate cover. We may disclose information when lawfully required, or to protect rights and investigate misuse.

Market insights report aggregated, anonymised receipt statistics to platform admins, not individual records. The code applies k-anonymity using distinct households (default minimum five) and folds small groups into “Other”, including within currency, branch and trend groups. These reports do not identify individual households or workers.

Some providers may store or process information outside South Africa. Where they do, we rely on POPIA section 72 safeguards, such as binding agreements that give protection substantially similar to POPIA, or your consent where required. Contact us at hello@finkasi.com with questions about these arrangements.

The app uses encryption for sensitive staff identity/permit and bank-mandate data, masked displays, authenticated access controls, ledger permissions, restricted worker links and audit logs for sensitive/admin actions. These safeguards reduce risk but cannot guarantee absolute security. Keep sign-in and private worker links confidential. FinKasi never asks for your uFiling password.

• Account and ledger data: while your account is active and then up to 12 months after closure, unless you ask for deletion sooner.
• Payroll, payslip, UIF and COIDA records: 5 years from the record date, to support employers' labour and tax record-keeping.
• Early-access requests: up to 24 months.
• Audit and security logs: up to 3 years.
• Backups: overwritten on a rolling cycle.

Where the law requires longer retention, we keep records as required. Saved payslips retain historical figures; credit expiry does not itself delete credit history.

To request account deletion, email hello@finkasi.com from your account's email address. We verify the request and complete deletion within 30 days, subject to the retention exceptions above and other ledger users' lawful records. Backups are cleared as they roll over.

You may request access, correction or deletion, object to processing, withdraw consent where consent is the basis, and opt out of direct marketing. We may verify your identity and explain lawful limits before acting. Withdrawing consent does not undo lawful past processing. Use unsubscribe links or email preferences for FinKasi Sunday/news; essential sign-in and service messages may still be sent. Contact hello@finkasi.com for other requests, including worker requests.

FinKasi accounts are not intended for people under 18. Employers may enter necessary beneficiary information, including about a child, only with an appropriate lawful basis and any required parent/guardian consent.

We will update the date and version when this policy changes and give appropriate notice of material changes. Check this page for the current policy.