Skip to Content

FinKasi Privacy Policy

Last updated: 13 September 2026

1. Who we are

FinKasi ("FinKasi", "we", "us" or "our") is operated by FinKasi Technologies (Pty) Ltd, a company registered in South Africa (registration number 2026/727057/07).

FinKasi is the "Responsible Party" for personal information processed through our WhatsApp service and website, as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA"). This policy explains what personal information we collect, why, how we use and protect it, who we may share it with, and the rights you have over it.

By using FinKasi — whether by sending a message or receipt to our WhatsApp number, filling in a form on this website, or otherwise engaging with our service — you agree to the collection and use of information as described in this policy.

2. Information we collect

Information you send us directly:

  • Your name, WhatsApp number, and any messages, receipts, invoices, or payment confirmations you forward to our WhatsApp number.
  • The content extracted from those receipts — store/merchant name, branch, date and time, payment method, itemised purchases, and totals.
  • A masked or tokenised version of any payment card or loyalty card number visible on a receipt — enough to recognise repeat use of the same card, never the full card number.
  • Information you submit through a form on our website — name, email address, phone number, company name, and the content of your message.
  • Household information — where more than one person's WhatsApp number is linked to a shared household account, we process the receipts and spend of everyone linked to that household as a shared ledger.

Information collected automatically:

  • Usage and analytics information about how you interact with our website and WhatsApp service — such as pages visited, device and browser type, general location (derived from IP address), and how you found us.
  • Message metadata from the WhatsApp Business Platform (Meta) needed to deliver and process your messages.

We do not ask for or store your online banking username or password, and we never request your full, unmasked card number.

3. Why we process your information

We process personal information on the following legal bases under POPIA:

  • To perform our service to you — logging and categorising the receipts you send, replying to you, maintaining your household ledger, and producing your weekly/monthly summaries.
  • For our legitimate interests — improving FinKasi's accuracy and features, understanding usage patterns, preventing abuse and fraud, and developing new features (including aggregated insights of the kind described below).
  • With your consent — for direct marketing communications, and for any use of your information beyond what is set out in this policy.
  • To comply with the law — including our obligations to CIPC, SARS, and any applicable financial or consumer-protection regulator.

4. Analytics and product improvement

We use the information we collect — including website usage data and, in de-identified or aggregated form, spending and category data — to understand how FinKasi is used, measure and improve accuracy, and develop new features. Wherever we use spending data for analytics beyond your own household's reporting, we do so on an aggregated or de-identified basis that does not identify you personally, unless you have separately agreed otherwise.

5. Sharing your information

We do not sell your personal information. We share personal information only in the following circumstances:

  • Service providers who process data on our behalf, under contract and only for the purposes we specify — for example, Meta (WhatsApp Business Platform), Anthropic (receipt data extraction), and our cloud hosting provider. These providers are only permitted to use your information to provide their service to us.
  • Potential and current business partners, such as retailers or financial-services partners exploring products or insights with FinKasi — this is limited to aggregated, de-identified insights (for example, category or store-level spending trends across many households) unless you have given specific consent for your own information to be shared with a named partner.
  • Where required by law, to comply with a legal obligation, court order, or lawful request from a regulator or authority.
  • In a business transaction, such as a merger, acquisition, investment, or sale of assets, in which case personal information may be transferred as part of that transaction, subject to the same protections described in this policy.

Some of our service providers (including Meta and Anthropic) process data on servers located outside South Africa. Where we transfer personal information across borders, we take reasonable steps to ensure it remains protected to a standard consistent with POPIA, including through contractual safeguards with those providers.

6. Your rights

Under POPIA, you have the right to:

  • Be told what personal information of yours we hold and why.
  • Access the personal information we hold about you.
  • Request that we correct or update inaccurate or outdated information.
  • Request that we delete or destroy personal information we no longer have a lawful basis to hold.
  • Object, on reasonable grounds, to our processing of your personal information.
  • Withdraw your consent at any time, where our processing is based on consent, without affecting the lawfulness of processing carried out before you withdrew it.
  • Not be subject to a decision based solely on automated processing that significantly affects you.
  • Lodge a complaint with South Africa's Information Regulator if you believe we have not handled your information lawfully.

Right to unsubscribe, at any time. You can withdraw your consent, unsubscribe from any communication, or ask us to stop processing your information for direct marketing at any time, free of charge, with no unnecessary formality. Simply reply "STOP" or "UNSUBSCRIBE" to any message from us on WhatsApp, use the unsubscribe option in any marketing email, or contact us directly using the details in Section 10 below. We will act on your request promptly.

To exercise any of these rights, contact us using the details in Section 10.

7. Data retention

We keep personal information for as long as reasonably necessary to provide our service to you, meet our legal and regulatory obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we delete or de-identify it.

8. Security

We take appropriate technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure — including restricting who can access data, masking sensitive identifiers such as card and loyalty numbers on receipt, and using reputable, security-vetted service providers. No system is completely secure, but we work to keep your information appropriately protected and will notify you and the Information Regulator of any data breach as required by law.

9. Children's privacy

FinKasi is intended for use by adults capable of entering into a household or personal finance arrangement. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Contact us

If you have questions about this policy, want to exercise your rights, or want to unsubscribe from any communication, contact us:

FinKasi Technologies (Pty) Ltd
Email: hello@finkasi.com
Phone: +27 72 773 9809

You may also lodge a complaint with South Africa's Information Regulator at inforegulator.org.za.

11. Changes to this policy

We may update this policy from time to time as our service, partnerships, or the law change. We will post the updated version on this page with a new "last updated" date, and where a change is material, we will take reasonable steps to notify you.