1. Introduction
Thayu Labs Ltd (“Thayu Labs,” “we,” “us,” or “our”) is a limited liability company registered in Kenya, with its principal office in Nairobi. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use any of our mobile applications (collectively, “our Apps”):
- Sentii — personal finance management
- Thimo — Kikuyu proverbs and cultural wisdom
- Nyimbo Cia Ngai — hymn companion for worship
- Muse — ambient wisdom for idle screens
- Resonance — AI emotional companion
By using any of our Apps, you agree to the collection and use of your information in accordance with this policy.
2. Data We Collect
2.1 Information You Provide
- Account data: Email address and authentication credentials if you create an account for cloud sync.
- Financial data (Sentii only): Transaction amounts, categories, descriptions, budget configurations, savings goals, and bill reminder details.
- User preferences: Language settings, currency preferences, notification preferences, theme choices, and favourited content.
- User-generated content: Mood entries (Resonance), journal entries (Resonance), and custom categories (Sentii).
2.2 Information Collected Automatically
- Device information: Device model, operating system version, unique device identifiers, and app version.
- Usage analytics: App launch events, screen views, feature usage frequency, session duration, and crash reports.
- Advertising identifiers: IDFA (iOS) or GAID (Android), collected only with your explicit consent.
2.3 Information We Do Not Collect
- We do not collect precise location data.
- We do not access your contacts, camera, or microphone.
- We do not read or access SMS messages.
- We do not collect biometric data.
3. How We Use Your Data
- To provide, maintain, and improve our Apps and their features.
- To sync your data across devices when you opt into cloud sync.
- To send you notifications you have opted into.
- To generate personalised insights and recommendations.
- To display relevant advertisements (after the initial 40-day ad-free period).
- To analyse usage patterns and improve user experience.
- To comply with legal obligations.
4. Third-Party Services
- Supabase — cloud sync and authentication.
- Firebase Analytics / Crashlytics — usage analytics and crash reports.
- Google AdMob — advertising, subject to your consent.
- Adapty — subscription management.
5. Data Storage and Security
Your data is primarily stored locally on your device using SQLite. If you opt into cloud sync, your data is stored on Supabase infrastructure with TLS encryption, certificate pinning, and row-level security.
6. Advertising and Tracking
Our Apps may display non-intrusive advertisements after an initial 40-day ad-free period. We implement Apple's ATT framework on iOS and Google's UMP with TCF v2.3 on Android. Premium subscribers receive an ad-free experience.
7. Your Rights
Under the Kenya Data Protection Act, 2019
You have the right to access, rectify, erase, and object to the processing of your personal data.
Under GDPR (EU residents)
You additionally have the right to data portability, restrict processing, withdraw consent, and lodge a complaint with your supervisory authority.
Under CCPA (California residents)
You have the right to know what personal information we collect, request deletion, and opt out of sale. We do not sell personal information.
8. Children's Privacy
Our Apps are not directed at children under 13. We do not knowingly collect personal data from children.
9. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. Local data remains on your device until you delete the app. Cloud-synced data is retained until you request deletion.
10. Changes to This Policy
We will notify you of material changes by posting the new policy in our Apps and updating the “Last updated” date.
11. Contact Us
Email: privacy@thayu.com
Company: Thayu Labs Ltd
Location: Nairobi, Kenya