Your money is private. We built SmartPFM so it stays that way.
You trust us with the most private numbers in your life. Here is, in plain words, what we do with them – and what we don't. The legal version is our Privacy Policy, written for the Kenya Data Protection Act, 2019.
Staff NEVER see client records
Our management portal shows feature usage counts only, e.g. the number of assets, liabilities, budgets and so on. Never your financial records, balances, budgets, goals, documents etc. Support staff see your account subscription details and the support messages you send them, nothing more.
Documents with their own keys
Every document you upload is checked for viruses and encrypted with its own key before it is stored. Without that key, the file is unreadable.
Sensitive numbers masked
Account, title-deed and registration numbers are encrypted when saved and shown masked – ••••4521 – on screens and reports; only you can tap Show to see the full number.
No sales, no adverts
We do not sell your data and we do not use it for advertising. There are no tracking or advertising cookies in the app – or on this website.
We never ask for your PINs
SmartPFM doesn't connect to your bank, M-Pesa or SACCO and never asks for their passwords or PINs. The figures are the ones you enter.
Nothing left on the phone
The installed app keeps only its screens on your device. Your figures load over an encrypted connection each time, so a lost phone without your session shows nothing.
Household sharing by consent
Each member chooses what the others see – nothing until they decide, then totals, a full read-only view or a custom view – and can change it or leave at once. A joint household budget shows only what is in it, never your own budget. Account numbers and documents are never shared, and you see who looked at your figures.
Other people's details
Our staff have no access to the records of the people in your estate plan, or of the partners you share Net Worth items with. In addition, their ID numbers are masked like account numbers. Invitations – to join your household, or about a Net Worth item you share – are the only emails the system sends to someone you name.
Reports you control
Tick Hide account numbers before sharing a report. A PDF password is never stored, and report files are deleted 24 hours after they are ready.
Security you can switch on in two minutes
- Two-step sign-in with an authenticator app, plus recovery codes. It's mandatory for every member of our staff.
- Auto-lock after 15 minutes in the background by default, on every device.
- Hide amounts with one tap when someone is looking over your shoulder.
- Sign out everywhere if a phone goes missing.
- An email to you when two-step sign-in is turned on or off, or your account is closed.
Your data, whenever you want it – or gone when you don't
- Download everything – all your records as a file and your documents as a zip – free, on every plan, at any time.
- Correct anything in the app, or ask us.
- Close your account yourself. You have 30 days to change your mind; then your records and documents are deleted.
- Object, restrict or withdraw consent – for example, turn SMS or email reminders off at any time.
- Complain to the Office of the Data Protection Commissioner (ODPC). SmartPFM is registered with the ODPC as a data controller.
Behind the scenes
How it's protected
- HTTPS everywhere, with strict browser security rules on every page.
- The database can only be reached through fixed, checked procedures – never by free-form queries from the app.
- Nightly backups, encrypted before they leave our server, rolled off after 12 months at most.
- Error reports have personal data removed before they're sent.
- Logs are kept for 14 days.
Who helps us run it
We use a small number of carefully chosen providers – server and cloud hosting, network protection and encrypted storage, email delivery, error reports, M-Pesa payments and SMS. Each one gets only what it needs, under a written contract. Where data is held outside Kenya, the safeguards of section 48 of the Data Protection Act apply.
The full list, what each provider holds and how long we keep data are in the Privacy Policy.
About this website: it sets no cookies, loads nothing from other companies (no fonts, analytics or adverts), and asks you for nothing. The only data it reads is our public price list.