Home › Privacy Policy

Privacy Policy

We are committed to protecting your personal and financial data. This policy explains what we collect, why we collect it, and how we keep it safe.

Last updated: 24 August 2026  |  Effective date: 24 August 2026

Plain language summary: Mint Wallet collects your name, email, phone number, National Registration Card (NRC) number, and the financial records you enter into the app. We store this data securely using our cloud database provider, use Google LLC push notification services to send you notifications, use enterprise AI providers (Anthropic PBC and Google LLC) to generate anonymized AI financial reviews via Mint Sage, and use Lenco by Broadpay only to process subscription payments. Your data is NEVER used to train third-party AI models, and we never sell your data. You can request deletion of your account and data at any time.

Contents

  1. Who we are
  2. What information we collect
  3. How we collect your information
  4. How we use your information
  5. How we share your information
  6. Third-party services
  7. Data storage and security
  8. Data retention
  9. Your rights
  10. Push notifications
  11. Children's privacy
  12. Changes to this policy
  13. Contact us

1. Who We Are

Mint Wallet is a personal finance management application developed and operated by MDStudio, a creative and technology studio based in Lusaka, Zambia.

For the purposes of this Privacy Policy, "Mint Wallet", "we", "us" and "our" refer to MDStudio. "You" and "your" refer to any individual who downloads, registers for, or uses the Mint Wallet mobile application or website.

Contact: mint@mdstudio.co.zm

2. What Information We Collect

We collect the following categories of information when you use Mint Wallet:

2.1 Account Information

  • Full name
  • Email address
  • Phone number
  • National Registration Card (NRC) number (optional, or required for affiliate payout verification)
  • Date of birth
  • Gender (optional)
  • Profile photo (optional, uploaded by you)
  • Encrypted 4-digit app PIN (stored as a secure hash — we cannot read your PIN)

2.2 Financial Data You Enter

All financial data in Mint Wallet is entered manually by you. We do not connect to or retrieve data from your bank or mobile money provider. The financial information we store includes:

  • Account names, types and opening balances
  • Transaction records (income, expenses, transfers, loan repayments)
  • Budget categories, limits and spending history
  • Financial goals and deposit records
  • Investment records (name, type, principal, interest rate, maturity dates)
  • Loan and debt records
  • Transaction descriptions and notes you enter

2.3 Mint Sage AI & Mint Score Data

  • Selected Financial Focus Goals (e.g. Save More, Pay Off Debt, Stick to Budget)
  • Conversational query history and follow-up prompts within Mint Sage chat
  • Generated weekly review history and calculated Mint Score historical records

2.4 Device and Technical Information

  • Device type and operating system version
  • App version
  • Google Cloud Messaging device token for push notifications
  • General location data (country/region level only, used to confirm you are in Zambia)

2.5 Subscription and Payment Information

  • Subscription plan selected (monthly or annual)
  • Payment status and reference number (provided by Lenco/Broadpay)
  • Mobile money number used for payment (passed directly to Lenco — we do not store your full mobile money credentials)
  • Referral coupon code used (if any)

2.6 Affiliate Programme Information

If you are approved as a Mint Wallet affiliate, we additionally store:

  • Your assigned referral coupon code
  • Commission earnings and payout history
  • Mobile money provider and number for commission payouts
  • A record of users who subscribed using your code (no personal details of those users are shared with you beyond a partial name)

3. How We Collect Your Information

  • Registration: When you create a Mint Wallet account using email and password, or via Google or Apple Sign-In.
  • App usage: When you manually enter transactions, budgets, goals, investments, loan records and focus goals within the app.
  • Profile updates: When you update your name, phone number, photo or other settings.
  • Payments: When you subscribe to a premium plan via Lenco by Broadpay.
  • Notifications: When the app registers your device with Firebase Cloud Messaging to deliver push notifications.
  • Affiliate application: When you submit an affiliate application via our website contact form (processed via email).

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide the service: Create and maintain your account, store and display your financial records, and deliver the app's core features.
  • To process payments: Initiate and confirm subscription payments via Lenco/Broadpay and update your account tier accordingly.
  • To send notifications: Deliver push notifications you have opted into, such as daily summaries, goal reminders, investment maturity alerts and loan due-date reminders.
  • To generate statements: Produce PDF account statements on your request, using your own transaction data.
  • To generate Mint Sage AI reviews & insights: Process anonymized transaction data, budgets, loan aggregates, and stated focus goals through AI models (Anthropic Claude and Google Gemini) via secure APIs to deliver personalized prose summaries and interactive chat advice.
  • To compute your Mint Score: Calculate your 300 to 850 financial wellness score across 6 core pillars based on your in-app records to help you monitor and improve your financial habits.
  • To operate the affiliate programme: Track referral conversions and calculate and process commission payouts.
  • To improve the app: Understand how features are used to fix bugs and improve performance.
  • To communicate with you: Respond to your support enquiries and send important service announcements.
  • To comply with legal obligations: Maintain records as required under Zambian law.

5. How We Share Your Information

We do not sell, rent or trade your personal data to any third party for commercial or marketing purposes.

We share limited information only with the following parties, strictly as necessary to operate the service:

  • Our Cloud Database Provider: Our cloud database and authentication provider. Your account and financial data is stored on their servers. They act as our data processor under strict data processing agreements.
  • AI Service Providers (Anthropic PBC & Google LLC): We transmit anonymized financial aggregates (such as weekly income/expense totals, budget limits, debt repayments, and chat queries) to Anthropic PBC (Claude AI) and Google LLC (Gemini AI) via encrypted enterprise APIs solely to generate your weekly Mint Sage reviews and conversational responses.
    • No PII Shared: We NEVER transmit personally identifiable information (such as your full name, email address, phone number, NRC number, or security PIN) to AI providers.
    • No Model Training: Under our enterprise API terms, your financial queries and records are strictly NOT used by Anthropic or Google to train, retrain, or improve public AI models.
  • Google LLC (Firebase Cloud Messaging): We use Google's cloud messaging infrastructure to deliver push notifications (device token sharing only).
  • Lenco / Broadpay: When you make a subscription payment, your payment amount and mobile money number are shared with Lenco by Broadpay to process the transaction.
  • Legal authorities: We may disclose information if required to do so by Zambian law (such as validating your NRC number), court order or regulatory authority.

6. Third-Party Services

Mint Wallet uses the following third-party services. We encourage you to review their privacy policies:

7. Data Storage and Security

Your data is stored on our cloud database provider's secure infrastructure. They use industry-standard security practices including:

  • Encryption of data in transit using TLS/SSL
  • Encryption of data at rest
  • Row-Level Security (RLS) policies that ensure your data is accessible only to your authenticated account
  • SOC 2 Type II compliance

Within the Mint Wallet app:

  • Your 4-digit PIN is stored as a cryptographic hash — it cannot be reversed or read by us
  • Sensitive credentials (such as your session token) are stored in your device's secure storage
  • Financial data is cached locally on your device using SQLite (Drift) for offline access, encrypted by your device's operating system

While we take reasonable measures to protect your data, no system is completely secure. We encourage you to use a strong password and enable biometric or PIN lock within the app.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account:

  • Your profile, financial records, goals, investments, loans and budgets will be permanently deleted from our servers within 30 days.
  • Subscription payment records may be retained for up to 7 years as required by Zambian financial record-keeping regulations.
  • Affiliate commission records will be retained for the same period.
  • Anonymised or aggregated usage data (with no personally identifiable information) may be retained indefinitely for analytical purposes.

9. Your Rights

You have the following rights with respect to your personal data:

  • Access: You can view all your personal and financial data within the Mint Wallet app at any time.
  • Correction: You can update your name, phone number, email and other profile details in the Account Information screen.
  • Export: Premium users can export their financial data in CSV format via the Financial Data screen.
  • Deletion: You can delete your account and all associated data from Security Settings → Delete Account, or by emailing us at mint@mdstudio.co.zm.
  • Restriction: You can disable push notifications at any time from Notification Settings within the app or from your device settings.
  • Withdrawal of consent: You may withdraw consent for data processing at any time by deleting your account. Note that withdrawal of consent means you will no longer be able to use the service.

To exercise any of these rights, contact us at mint@mdstudio.co.zm. We will respond within 10 business days.

10. Push Notifications

With your permission, Mint Wallet sends push notifications via Google Cloud Messaging services. These include:

  • Daily finance update reminders
  • Goal deposit reminders
  • Investment maturity alerts
  • Loan due-date reminders
  • Subscription renewal reminders
  • Affiliate commission notifications (for affiliates only)

You can manage which notifications you receive in Notification Settings within the app, or disable all notifications from your device settings. Disabling notifications does not affect your ability to use the app.

11. Children's Privacy

Mint Wallet is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us immediately at mint@mdstudio.co.zm and we will delete the account promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the features of the app. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Send a push notification to all users (if you have notifications enabled)
  • Display an in-app notice on your next login

Your continued use of Mint Wallet after a policy update constitutes your acceptance of the revised policy. If you do not agree with any changes, you may delete your account.

13. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 10 business days.