Hazina privacy policy
Hazina is made by Metastrata AI, Kenya. Effective 8 November 2026. See also the terms of use.
In short: Hazina keeps your money records on your phone and nowhere else. There is no Hazina account, no server, no advertising and no analytics. The app does not connect to the internet; only the App Store or Google Play checks whether you bought Hazina Plus. We cannot see your data, and we never receive it.
What Hazina reads, and why
- Bank and mobile-money texts (Android). If you allow it, Hazina reads text messages from banks and mobile-money services (such as M-Pesa, Airtel Money, Equity and NCBA) to record your payments for you. Texts that aren't payments are skipped: they are not stored and not sent anywhere.
- Texts you share or paste (iPhone and Android). On iPhone, Hazina only sees the messages you send it yourself, through a Shortcut or by pasting.
- Statements you open. PDF statements you choose are read on your phone to add their payments. The file itself is not kept.
- Receipt photos you attach. Kept on your phone, with a fingerprint so a swapped photo shows.
- What you type in. Your name, the phone numbers you give it, people you support, bills, budgets, trips and payments you enter by hand.
Where your data is kept
Everything stays in Hazina's private storage on your phone. Hazina doesn't connect to the internet itself, so nothing is uploaded, synced or shared by the app. The only exchange is with the App Store or Google Play app on your phone, to check whether Hazina Plus was bought. On Android, Hazina is also left out of Google's automatic backup and phone-to-phone copying, so your records are never copied off the phone unencrypted.
Backups
When you save a backup, Hazina writes one file, locked with a password you choose (AES-256). You decide where it goes, for example iCloud Drive, Google Drive or a computer. Without the password no one can open it, and that includes us: we can't recover a forgotten password.
Face ID, fingerprint and passcode
Unlocking with your face or fingerprint is handled by your phone. Hazina never sees or stores your face or fingerprint. A Hazina passcode, if you set one, is stored only as a salted fingerprint (PBKDF2), on the phone.
Permissions
- Read and receive SMS (Android): to record payments from bank and mobile-money texts. Only financial texts are used. You can turn this off at any time.
- Notifications: budget warnings, bill reminders and a note when a payment is added.
- Run at start-up (Android): to set your reminders again after the phone restarts.
- Face ID / biometrics: to keep Hazina locked and to confirm sensitive changes.
- Photos: only the photo you pick for a receipt.
Hazina Plus
Hazina Plus is a one-time purchase made through the App Store or Google Play. The store handles the payment and tells the app whether Plus has been bought. We receive no payment card details and no information about your money from the store, only what the store reports to every developer about sales.
Sharing
We don't sell, rent or share your data, because we never have it. Hazina contains no third-party advertising or tracking code.
Deleting your data
Deleting the Hazina app deletes everything it kept on your phone. Backup files you saved elsewhere stay where you put them until you delete them.
Your rights
Under Kenya's Data Protection Act, 2019 and similar laws, you have rights over your personal data. As all of it is on your own phone, you can see, export (Export statement, Save a backup), correct or delete it in the app at any time.
Children
Hazina is meant for adults managing their own money. It is not directed at children.
Changes
If this policy changes, the new version will be posted here with a new date. If Hazina ever starts sending any data off your phone, it will ask you first.
Contact
Questions: hazina.support@metastrata.co.ke