Last updated: 15 April 2025 11:50

Kiwi Money (“we,” “us,” or “our”) is committed to protecting your personal data and complying with Sri Lanka’s Personal Data Protection Act (PDPA) and other applicable laws. This Privacy Policy explains how we collect, use, share, retain, and safeguard your personal information when you use the Kiwi expense‑tracking app (the “App”).

By using Kiwi Money, you acknowledge that you have read and agree to this Privacy Policy. If you disagree with this Privacy Policy, please refrain from using the App.

1. Scope and Jurisdiction

Kiwi Money is primarily designed and developed for users residing in Sri Lanka, and our practices are governed by Sri Lanka’s Personal Data Protection Act (PDPA). However, the app is accessible internationally through global app store markets.

International users acknowledge that by using Kiwi Money, they consent to having their data processed and stored according to the laws of Sri Lanka, regardless of the laws applicable in their jurisdiction.

As a Sri Lankan-built app, Kiwi Money prioritises your privacy and operates fully in compliance with the Personal Data Protection Act (PDPA) of Sri Lanka. By keeping data processing local and user-controlled, we ensure your sensitive financial information remains private and secure.

We store, process, and retain personal data primarily in Sri Lanka and limit international data transfers to only what is necessary for delivering specific third-party services described in Section 4 (Third-Party Processors).

2. Data Collection and Use

To provide you with an expense-tracking services effectively, we collect various types of personal information. Below is a clear description of each category of data collected, how we obtain it, and the purposes for which it is used:

2.1 What We Collect

1. Transaction Information: We collect SMS transaction messages in the background solely to enable and continuously improve Kiwi Money’s automation features, including automatic expense categorisation and tracking.

• SMS transaction messages help us identify transaction amounts, merchant details, dates, and transaction types, allowing the App to provide accurate, automated financial tracking.

• When you receive transaction-related SMS messages from a recognised banking institution or financial service provider, the app extracts only the following details for expense tracking purposes:

• For Android → Received SMS content, sender phone number, received time, SMS type (RCS, MMS, SMS), originating app package name, app name. This is done via SMS Read Permissions granted through user consent and input.

• For iOS → Received SMS content and sender information collected using the iOS Shortcuts app through automations set up via user consent and input.

• Kiwi uses this information and access to SMS content solely to:

  • Detect and extract financial transaction details (such as debits, credits, and account balances)
  • Automatically categorise and track your expenses
  • Provide insights into your personal finances — without requiring manual input

• How It’s Handled

  • All SMS processing happens locally on your device.
  • We do not send messages or modify/delete any messages on your device.

• This is only applicable if you choose to activate or opt-in to automation features related to SMS-based expense tracking.