Privacy Policy

This Privacy Policy explains how Zhuzh collects, uses, stores, and protects information when you use our app, website, and related services.

Information We Collect

The information we collect depends on how you use Zhuzh.

We may collect the following types of information:

Account Information

When you create an account, we may collect your name, email address, password and device information

Onboarding Information

During onboarding, we ask for your country, age range, how you heard about Zhuzh, and general money habits or priorities.

This helps us personalize your experience and guide your setup.

Financial Information You Enter

Zhuzh may collect financial information that you choose to enter, such as available money, account names, assets, income, budget items, expenses, transactions, savings goals, Debt balances, debt payment plans, target dates, and recurring financial commitments

Zhuzh data is stored using MongoDB on AWS, a GDPR-compliant cloud platform. AWS stores data in secure data centres and implements industry-standard encryption for data at rest (AES encryption) and data in transit (TLS/SSL).

App Usage Information

We may collect usage information to understand how people use Zhuzh and improve the product. This may include screens visited, features used, Setup progress, session activity, app version, device type, operating system, crash reports, and performance logs.

We do not use analytics to sell your personal financial data.

Website Information

When you visit our website, we may collect basic technical information such as browser type, device type, pages visited, referring website, cookie preferences, approximate location based on IP address and marketing campaign source, where applicable.

How We Use Your Information

We use your information to:

• Provide and maintain Zhuzh
• Create and manage your account
• Personalize your onboarding experience
• Help you organize your financial information
• Generate budgets, summaries, and insights
• Improve app performance and reliability
• Understand feature usage
• Provide customer support
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Communicate important product updates

We may also use anonymous or aggregated data to understand general user behavior and improve Zhuzh.

AI Processing

Zhuzh includes AI-assisted features; information you provide may be processed to generate financial explanations, summaries, or suggested next steps.

Depending on the feature, this may include prompts(messages sent in zhuzh chat), budget information, savings goals, debts, transactions, financial priorities, country context and user-selected preferences. We aim to limit AI processing to the information needed to provide the feature, and we do not intend for AI tools to replace professional financial advice.

Where we use third-party AI providers, we will take reasonable steps to protect your data and will disclose relevant providers in this policy. A backend server is employed to abstract the prompts from the user and hide the OpenAI API key. The server processes user input via the OpenAI API. OpenAI does not store data for more than 30 days and does not train its models on user data. You can read more about how OpenAI uses the data in their OpenAI API data usage policies.

Legal Basis for Processing

Where applicable, we process your personal information based on one or more legal grounds:

• Contract performance: to provide the app and services you requested
• Consent: where we ask for permission, such as optional analytics or marketing
• Legitimate interest: to improve Zhuzh, maintain security, and prevent abuse
• Legal obligation: where we must comply with applicable laws

Third-Party Services

Zhuzh may use third-party services to operate the app and website. These may include authentication providers, cloud hosting providers, database providers, analytics tools, crash reporting tools, payment processors, email delivery tools, AI service providers, and customer support tools

Examples include services such as OpenAI, RevenueCat, Apple, and Google.

We only use third-party services where they help us operate, secure, improve, or provide Zhuzh.

Each third-party provider may process information according to its own privacy policy.

Payment Information

If you purchase a paid plan, subscription, or in-app product, payment may be processed by a third-party provider such as Apple or Google.

Zhuzh does not store your full card details. Payment providers may collect and process payment information according to their own terms and privacy policies.

Data Security

We use reasonable technical and organizational measures to protect your information.

These may include:

• Encrypted communication using HTTPS/TLS
• Secure authentication systems
• Access controls
• Password protection mechanisms
• Database security controls
• Monitoring for suspicious activity
• Limited access to user data by authorized personnel only

However, no digital service can guarantee complete security. You are responsible for keeping your login details safe and notifying us if you suspect unauthorized access.

Data Retention

We keep your information for as long as needed to provide Zhuzh, comply with legal obligations, resolve disputes, and improve our services.

In general:

• Account data is kept while your account is active.
• Financial data is kept until you delete it or request deletion, unless retention is legally required.
• Analytics data may be kept in anonymous or aggregated form.
• Support messages may be kept for customer service and record-keeping.
• Payment records may be kept where required for tax, accounting, or legal purposes.

You may request deletion of your account and personal data by contacting us.

Your Rights

Depending on where you live, you may have rights over your personal information, including the right to:

• Access your data
• Correct inaccurate data
• Delete your data
• Export your data
• Restrict certain processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with a data protection authority

To exercise these rights, contact us at:

Contact@zhuzhfinance.com

Children’s Privacy

Zhuzh is not intended for children under the age of 13, or the minimum age required by law in your country.

We do not knowingly collect personal information from children.

If we learn that a child has provided personal information without appropriate consent, we will take steps to delete it.

International Data Transfers

Zhuzh may process and store information in countries outside your country of residence.

Where required, we will take reasonable steps to ensure your information receives appropriate protection, including contractual safeguards or other lawful transfer mechanisms.

Privacy Updates

We may update this Privacy Policy from time to time.

If we make significant changes, we may notify users through the app, website, email, or another appropriate method.

Your continued use of Zhuzh after an update means you accept the updated Policy.

Contact

If you have questions regarding this poilicy, contact us at:

Contact@zhuzhfinance.com

Jurisdiction and Governing Law

These terms and conditions, and any disputes or claims arising out of or in connection with the use of Zhuzh, shall be governed by and construed in accordance with the laws of Nigeria.

Any legal disputes or claims arising from the use of Zhuzh shall be subject to the exclusive jurisdiction of the courts of Germany. By using Zhuzh, you hereby consent to the jurisdiction of the Nigerian courts for any such disputes.

In the event of a legal dispute, the parties involved agree to first attempt to resolve the matter through good-faith negotiations. If an amicable resolution cannot be reached, the dispute shall be submitted to the competent court in Nigeria.