Read-only. Encrypted. Yours.
The first question anyone should ask a money app is whether it's safe. Here is exactly what ZenFi can see, what it can't touch, and how your data is protected, in plain English.
What ZenFi can and can't do.
- Read the bank alert texts your phone forwards to it
- Read financial emails, like alerts and receipts, from an email account you connect
- Read the statements you choose to upload
- Sort your transactions and show you where your money went
ZenFi can't
- Move money or make payments
- Log in to your bank
- Ask for or see your bank password, PIN or BVN
- Keep personal emails or texts that aren't financial
Only what you turn on.
- 01
SMS alerts
If you turn on SMS tracking, your phone forwards bank alert texts to ZenFi. It works on both Android and iPhone. Messages that don't look like bank alerts are discarded without being stored.
- 02
Email alerts
If you connect an email account, ZenFi only reads messages that look financial. Turn it off in settings at any time and we stop reading and delete the stored access details.
- 03
Statements
You choose which statements to upload. Each supported bank has its own reader, built for the way that bank lays out its statements.
Locked down, layer by layer.
To be straight with you: ZenFi can still read your data when it needs to, because it has to show you your transactions. So this isn't the kind of encryption where only you hold the key. It means your real numbers never sit in plain text.
- 01
Encrypted on the way
Every connection between your phone and our servers is encrypted.
- 02
Encrypted where it's stored
Transaction amounts, descriptions and account balances are encrypted inside our database. Every account has its own key, held in a separate key management service. A stolen copy of the database, on its own, is just scrambled text.
- 03
Passwords nobody can read
Passwords are hashed, never stored in a form anyone can read. Sign in with Google or Apple and you don't have a ZenFi password at all.
- 04
Tight access
Login sessions are short-lived, access to the database is limited within the team, and we run security reviews periodically.
What our AI sees, and what it never does.
ZenFi uses an AI service provider to read your alerts and sort your money. The app asks your permission before any of your data is sent.
- What is sent
- The text of bank alerts you forward or that arrive in a connected email, transaction amounts, dates, descriptions and balances, and the spending and budget totals used to write your insights.
- What is never sent
- Your password, PIN, BVN or email login details, or personal emails that aren't financial.
- What the provider can't do
- Use your data to train its AI models, for advertising, or for any purpose of its own. It works under a data processing agreement.
Who sees it
We don't sell your data. Ever.
This is the complete list of who your data is shared with, and why. We'll update it if it ever changes.
Hosting and database providers
To run the service, under data agreements
Our AI service provider
To read alerts and sort transactions, as explained above
Payment processors
Only to handle Pro subscription payments
Google or Apple
Only to confirm who you are if you sign in with them. No financial data
Law enforcement
Only when the law requires it
Export everything
Ask for a copy of your data, or get everything exported.
Delete your account
Your data is removed 30 days after deletion, in case it was a mistake, and cleared from backups within 90 days.
Switch off email reading
Revoke email access in settings and the stored access details are deleted.
No tracking
Cookies only keep you logged in. No ad tracking, no analytics.
Stop wondering where your money went.
Available on iOS and Android.