PesaShiftPesaShift Privacy Policy
Last updated 5 August 2026
PesaShift reads your M-PESA or Airtel Money statement on your phone and shows you what it says. Your statement is never uploaded, and there are no accounts. This page explains exactly what that means, including the parts where the app does use the internet.
Your statement never leaves your phone
When you import a statement, the PDF is opened and read on your device. The file is not uploaded, copied to a server, or shared with anyone. The password you type to open it is used once and is never saved.
The transactions PesaShift reads out of it are stored on your phone only, in the app's own private storage. Uninstalling the app, or tapping Settings → Delete everything, removes them. There is no copy anywhere else, which also means there is nothing to restore if you delete it.
What PesaShift does send
The app has internet access, and it is honest to say why. It is used only for the things below, and only when you choose to do them.
| When | What is sent | Where it goes |
|---|---|---|
| You send a message from the contact page | What you type, your email address, your name if you give one, and the category you pick | Emailed to us through Resend, an email delivery service |
| You buy PesaShift Pro outside Google Play | Your email address, so the payment can be issued and a receipt sent to you | Paystack, the payment processor |
| You buy PesaShift Pro on Google Play | Handled entirely by Google Play. We never see your card or payment details. | Google Play |
| You restore a purchase | The email address you used to buy, so we can check whether it paid | Checked against Paystack. The answer is a bare yes or no. |
None of these ever include your transactions. Nothing in the app sends your statement, your balance, who you paid, or what you spent.
What we store
PesaShift has no user database. We do not keep a record of who uses the app.
- Your messages. When you contact us, the message arrives as an email in our inbox and stays there like any other email, so that we can reply.
- Your purchase. Records of payments are held by Paystack or Google Play, whichever you bought through, under their own terms. We look them up when you restore; we do not copy them.
- Your IP address, briefly. Requests to our endpoints are rate limited to stop abuse, which means an address is held in memory for a short period. It is not written to a database and is not used to identify you.
What PesaShift does not do
- No accounts, no sign-in, no profile.
- No analytics, no usage tracking, no crash reporting.
- No advertising, and no advertising identifiers.
- No selling or sharing of anything with anyone, for any purpose.
- No access to your SMS messages. PesaShift does not request that permission and cannot read your texts.
Permissions
PesaShift requests one Android permission: INTERNET, for the four
things listed above. It does not request SMS, contacts, location, camera, or storage
permissions. You pick your statement file through the system file picker, which hands
the app that one file and nothing else.
Who else is involved
PesaShift relies on a small number of services, and only for the purposes above:
- Paystack — processes payments made outside Google Play.
- Google Play — processes payments made through the Play Store.
- Resend — delivers the message you write on the contact page.
- Railway — hosts the endpoints those requests go to.
Each handles what it receives under its own privacy policy.
Children
PesaShift is a tool for reading your own bank or mobile money statement. It is not directed at children and we do not knowingly collect anything from them.
Your choices
- Delete your data. Settings → Delete everything removes every transaction PesaShift has stored. Uninstalling does the same.
- Delete your messages. Email us and we will delete the correspondence we hold from you.
- Ask us anything. If something here is unclear, or you want to know what we hold, write and ask.
Changes
If PesaShift ever starts doing something this page does not describe, this page changes first, and the date at the top changes with it. Past versions are visible in the commit history of the repository this page is served from.
Contact
Martin Nzau, Nairobi, Kenya
contactmonsiu@gmail.com