Back to Home

Privacy Policy for TenRands

Last Updated: Dec 9 2025

1. Introduction

Welcome to TenRands ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service"). We adhere to the Protection of Personal Information Act (POPIA) of South Africa and other relevant international privacy standards.

2. Information We Collect

We collect information that you voluntarily provide to us when you register on the Service, expressed an interest in obtaining information about us or our products and Services, when you participate in activities on the Service, or otherwise when you contact us.

A. Personal Information

  • Identity Data: Name, email address, and profile picture (via Google Auth or email registration).
  • Authentication Data: Passwords (hashed) and authentication tokens via Google Firebase.

B. Financial Data

To provide the core features of TenRands, you may upload or input:

  • Bank Statements: PDF or CSV files containing transaction history.
  • Transaction Data: Merchant names, dates, amounts, and categories.
  • Debts & Assets: Information regarding loans, credit cards, savings, and investments.
  • Budgets & Goals: Your financial targets and limits.

C. Usage & AI Interaction Data

  • Chat Logs: We store the conversation history between you and the TenRands AI ("The Financial Conscience").
  • Device Data: IP address, browser type, operating system, and access times.

3. How We Use Your Information

We use the information we collect or receive:

  • To provide the Service: Parsing bank statements, calculating net worth, visualizing burn rates, and tracking debt.
  • To provide AI Insights: We send anonymized or pseudo-anonymized summaries of your financial context to our AI providers (see Section 5) to generate coaching advice, spending arguments, and categorization suggestions.
  • To manage your account: Registration, authentication, and user support.
  • To send administrative information: Product updates, security alerts, and support messages.

4. Legal Basis for Processing (POPIA)

We process your personal information based on:

  • Contract: To fulfill our service agreement with you (the Terms of Service).
  • Consent: Specifically regarding the processing of sensitive financial data.
  • Legitimate Interest: To improve our services and detect fraud.

5. Sharing Your Information (Third-Party Processors)

We do not sell your personal information. We only share information with the following third-party service providers to facilitate the Service:

  • Google Firebase (USA): Used for Authentication, Database (Firestore), File Storage, and Hosting.
  • n8n (Automation): Used as our backend orchestration engine to process files and logic.
  • Google Gemini / OpenAI (AI Models): We send text prompts containing financial context to these providers to generate responses.

Note: We actively strip sensitive Personally Identifiable Information (PII) like Account Numbers before sending data to AI models where possible. However, transaction descriptions and amounts are necessary for the AI to function.

6. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy.

  • User Account: Retained until you delete your account.
  • Uploaded Files: Raw PDF/CSV files are processed and then may be deleted from storage or retained for re-processing capabilities, controllable in your settings.

7. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. Data is encrypted in transit (HTTPS) and at rest (Firebase Encryption). Access to data is restricted via strict Row Level Security (RLS) rules, ensuring you can only access your own data.

8. Your Privacy Rights (POPIA)

Under POPIA, you have the right to:

  • Access: Request copies of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and associated data.
  • Objection: Object to the processing of your personal information.

To exercise these rights, please contact us at [email protected].

9. International Transfers

Your information may be transferred to, stored, and processed in servers located outside of South Africa (e.g., Google Cloud servers in the USA/Europe). By using the Service, you consent to this transfer.

10. Contact Us

If you have questions or comments about this policy, you may email us at: