Privacy Policy
Last updated: November 3, 2026
1. Information We Collect
We collect the following categories of information:
a) Account Information
When you sign up, we collect your name, email address, and account credentials through Firebase Authentication (Google). We never store your password in readable form.
b) Business Transaction Data
All transaction records you enter — including sales, purchases, expenses, payments, product names, supplier and customer names, quantities, and amounts — are stored linked to your unique user ID.
c) Voice & Text Entered for Wanja
When you type or speak to Wanja (our AI assistant) to record a transaction, that text is sent to an AI provider for parsing. If your browser supports on-device speech recognition, your voice is turned into text locally by your browser and never leaves your device as audio. If it doesn't, a short audio clip is sent to a speech-to-text provider solely to transcribe it, and is not retained by TUNDA afterwards.
d) Uploaded Files
Excel files you upload are read to create your records and are not kept. We keep only a fingerprint of each file, so the same file isn't imported twice by mistake.
e) Usage Data
We may collect basic technical information such as browser type and timestamps. This data is used solely for maintaining the Service and is never sold.
f) Signing in with Google
If you choose Sign in with Google, Google shares your name, email address and profile picture with TUNDA (the basic “openid”, “email” and “profile” permissions). We use this information only to create your TUNDA account and sign you in. We never receive your Google password, we do not access your Gmail, Drive, contacts or any other Google data, and we never sell Google user data or use it for advertising. You can remove TUNDA's access at any time from your Google Account at myaccount.google.com/permissions.
2. How We Use Your Information
- Authenticate you and manage your account session
- Store and retrieve your business transaction records
- Generate dashboard metrics (Money In, Money Out, profit/loss, inventory levels, amounts owed to you, etc.)
- Send your typed or spoken transaction text to our AI provider (via Wanja) for parsing, classification, and plain-language summaries
- Remember which Excel files were already imported, so no file is counted twice
We do not use your data for advertising or profiling.
3. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Google Firebase Authentication | Authentication | Email, name |
| Google Sign-In | Optional sign-in with your Google account | Google shares your name, email and profile picture with TUNDA |
| Resend | Sending password reset and email verification messages, and receiving and answering emails you send to TUNDA's addresses | Email address, name, and the emails you exchange with us |
| Groq & Anthropic (Claude) | Wanja's AI transaction parsing, chat, and insights | Transaction text and chat messages only |
| Speech-to-text provider | Transcribing a voice note when on-device recognition isn't available | A short audio clip, only when this fallback is used |
| Google Firebase (Cloud Firestore) | Database | All app data (encrypted) |
4. Data Storage & Security
- Database: Google Cloud Firestore, reachable only through TUNDA's servers — browsers can't read it directly
- Profile pictures: resized and stored privately with your account, shown only to you
- Data Isolation: Every record is tagged with your unique user ID
- Transit Security: All communication encrypted via HTTPS/TLS
5. Data Retention
We retain your data for as long as your account is active. To request account deletion, please contact us directly.
6. Data Sharing
We do not sell, rent, or share your personal or business data with any third party for commercial purposes.
7. Your Rights
- Access: Request a copy of all data stored about you
- Correction: Request correction of inaccurate data
- Deletion: Request permanent deletion of your account and data
- Portability: Request an export of your transaction data
8. Children's Privacy
The Service is intended for adults and business owners. We do not knowingly collect information from individuals under 18.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If a change is significant enough to require it, you will be asked to re-confirm your consent the next time you sign in before you can continue using the Service.
10. Your Consent
By creating a TUNDA account, and again by ticking “I have read and agree” on the consent screen shown at your first sign-in, you confirm that you have read and agree to this Privacy Policy and to our Terms of Service. If you do not agree, please do not create an account, and you may sign out instead of continuing from the consent screen.
11. Contact Us
If you have any questions, please contact us through the TUNDA Business Assistant platform.