Privacy Policy

EZ-Fin · Effective date: 26 October 2026 · Version 1.0

In short: we collect only what we need to run your EZ-Fin account, we never sell your information, your financial data is private to your account, and you can ask us to see, correct or delete your information at any time.

1. Who we are

EZ-Fin ("we", "us", "our") is a household finance web app operated by [Registered company name] (Pty) Ltd, registration number [____/______/07], the "responsible party" under the Protection of Personal Information Act 4 of 2013 ("POPIA").

Information Officer	Clint Proctor
Email	admin@ez-fin.co.za
Physical address	33 Beach Road, Westbrook, Tongaat, 4439, KwaZulu-Natal, South Africa

2. What information we collect

Type	Examples	Where it comes from
Account details	First name, last name, email, mobile number, province/region, country, how you heard about us	You, when you sign up
Login details	Email and an encrypted password (we cannot see your password), login dates and device type	You and your device
Your finance data	Transactions, budgets, categories, tax information and imported bank statements you choose to add	You
Subscription and payment records	Plan, payment dates, amounts, invoice numbers and payment references	Our payment provider
Consent records	When you accepted this policy and your marketing email choice	You

We never receive or store your card number. Card payments are processed directly by our payment provider, iKhokha, on its own secure (PCI-DSS compliant) payment page. When you import a bank statement, full bank account numbers are masked before they are stored.

3. Why we use it

To create and run your account, including your free trial and up to 3 linked users.
To store and sync your finance data so you can use EZ-Fin on any device.
To process payments and keep billing and tax records.
To send service emails: trial and renewal reminders, payment confirmations, password resets and important changes. These are part of the service and are not marketing.
To send news and offers, only if you ticked the marketing box. You can unsubscribe at any time.
To keep EZ-Fin secure, prevent fraud and fix problems.

We process your information with your consent, to perform our contract with you, to meet legal obligations (such as tax record-keeping), and for our legitimate interest in running a secure service (POPIA section 11).

4. Who can see your information

Your finance data is visible only to you and the other users on your account (maximum 3). By design, EZ-Fin administrators cannot open it.
Our administrators can see your account and subscription details to give support and manage billing.
Service providers ("operators") who process information for us under written agreements:
- Supabase — secure database and login hosting.
- iKhokha — card payment processing (South Africa).
- Our email delivery provider — for sending service and reminder emails.
- GitHub Pages — hosting of the website itself (it does not receive your account data).
Authorities, only where the law requires it.

We do not sell, rent or trade your personal information.

5. Information stored outside South Africa

Your account and finance data is stored by Supabase in data centres in the United Kingdom, and some service providers may process information in the European Union or the United States. Under POPIA section 72, we only transfer information to providers bound by laws, binding agreements or corporate rules giving protection substantially similar to POPIA (such as the UK and EU General Data Protection Regulation). By signing up, you consent to this transfer.

6. How we protect it

All connections are encrypted (HTTPS), and data is encrypted at rest by our hosting provider.
Database rules ensure each account can only reach its own data.
Passwords are stored as one-way encrypted hashes.
Access for our staff is limited to what is needed for support and billing.

If a security breach affects your personal information, we will notify you and the Information Regulator as required by POPIA section 22.

7. How long we keep it

Account and finance data: for as long as your account is open. If your account is cancelled or suspended, we keep your data for 12 months so you can return, then permanently delete it. You can ask us to delete it sooner.
Payment and invoice records: 5 years, as required by South African tax law.
Login and email logs: up to 12 months.

8. Your rights

Under POPIA you may, free of charge:

ask what personal information we hold about you and get a copy of it;
ask us to correct or update it;
ask us to delete it (subject to the legal record-keeping above);
object to processing, or withdraw your consent, including for marketing emails;
complain to the Information Regulator.

To use any of these rights, email admin@ez-fin.co.za. We will reply within 30 days. We may ask you to confirm your identity first.

Information Regulator (South Africa)
Website: inforegulator.org.za
Complaints: POPIAComplaints@inforegulator.org.za · General: enquiries@inforegulator.org.za

9. Cookies and device storage

EZ-Fin does not use advertising or tracking cookies. It saves your login session and a working copy of your data in your browser's local storage so the app is fast and can work briefly offline. Logging out removes your session from that device.

10. Children

EZ-Fin is meant for adults. You must be 18 or older to open an account. We do not knowingly collect information about children.

11. Changes to this policy

We may update this policy from time to time. If we make important changes, we will tell you by email or in the app before they take effect. The effective date at the top always shows the latest version.

12. Contact us

Questions about this policy or your information: admin@ez-fin.co.za · 33 Beach Road, Westbrook, Tongaat, 4439.