Nkapza Privacy Policy

Overview

Nkapza helps individuals and families plan budgets, track net worth, monitor investments, manage debt, set goals, and understand their financial picture.

This policy is intended to describe our practices in clear language. It is not a substitute for legal advice.

Information We Collect

We collect account information, financial planning information, connected financial account information, billing and subscription metadata, security information, support messages, and technical or diagnostic information needed to operate Nkapza.

Financial planning information can include budgets, categories, transactions, income sources, debts, goals, assets, liabilities, net worth snapshots, investment accounts, holdings, portfolio snapshots, allocation rules, and insights.

Consent

When you create an account, connect a financial account, use billing features, or use connected services, Nkapza obtains your consent where required for the collection, processing, storage, and sharing of information needed to provide those services.

Before launching Plaid Link, Nkapza presents a consent notice explaining that Nkapza and Plaid may collect, process, store, and share account information from your selected financial institution for Nkapza features. You must affirmatively consent before continuing to Plaid.

Financial Account Credentials

Nkapza does not store customer financial account login credentials. We do not store online banking usernames, passwords, security questions, answers, or one-time passcodes.

When you connect a financial account, credential collection and authentication are handled by authorized connection providers such as Plaid. Nkapza may store provider-issued tokens, account metadata, balances, transactions, and connection status needed to provide the service.

Plaid

Nkapza uses Plaid to help you connect financial accounts and retrieve account information that powers budgeting, transaction review, balance tracking, net worth, and related features.

Plaid may collect information needed to connect your financial account, including information you provide to Plaid and information from your financial institution. Plaid privacy materials are available at plaid.com/legal.

Stripe

Nkapza uses Stripe for billing, subscriptions, invoices, payment processing, and related fraud prevention and compliance functions.

When you provide personal data in connection with payment or billing services, Stripe receives that personal data and processes it according to Stripe's Privacy Policy. Nkapza does not store full card numbers or sensitive payment authentication data.

How We Use Information

We use information to create and authenticate accounts, provide financial planning features, sync connected accounts when authorized, process billing, protect accounts, provide support, improve reliability and security, send service communications, and comply with legal or contractual obligations.

How We Share Information

We do not sell your personal information. We may share information with service providers, Plaid, Stripe, professional advisors, authorities when required, or a successor organization in a business transaction, subject to appropriate protections.

Cookies And Local Storage

Nkapza uses cookies, local storage, and similar technologies to keep you signed in, store authentication/session information, remember preferences, support security, and improve product reliability.

Data Retention

We retain information for as long as needed to provide Nkapza, maintain your account, comply with legal and accounting obligations, resolve disputes, enforce agreements, preserve security logs, and support legitimate business purposes.

Nkapza maintains a Data Retention and Deletion Policy that defines retention periods, deletion triggers, deletion methods, ownership, and review cadence. The policy is reviewed at least annually and after material product, vendor, legal, infrastructure, or security changes.

Account Deletion And Bank Disconnection

You may request account deletion or ask us to help remove personal information, subject to legal, security, accounting, and operational requirements.

You may disconnect linked financial accounts where supported. For Plaid-connected bank or brokerage accounts, Nkapza attempts Plaid Item removal where applicable before deleting local connected account records.

When you delete your Nkapza account, Nkapza attempts to remove connected Plaid Items, deletes user-scoped product and financial data, revokes active sessions, removes sign-in and MFA material, and anonymizes the account identity. Nkapza may retain audit, security, billing, support, and operational records as needed for legal, security, accounting, fraud prevention, dispute, or compliance purposes.

Security

Nkapza uses administrative, technical, and organizational safeguards designed to protect personal and financial data, including access controls, authentication protections, two-factor authentication support, encryption in transit, provider-supported encryption at rest, logging, monitoring, and restricted production access.

Your Choices

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, receive a copy of certain information, disconnect financial accounts, and manage communication preferences.

Children

Nkapza is not intended for children under 18. We do not knowingly collect personal information from children under 18.

International Data Processing

Nkapza may process and store information in Canada, the United States, and other locations where we or our service providers operate.

Changes To This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the app, website, email, or another appropriate method.

Contact

For privacy questions, requests, or concerns, contact [email protected]. If that inbox is not yet active, contact Nkapza support through the app and your request will be routed to the appropriate owner.