Privacy Policy
Last updated: 25 September 2026
This policy explains how OneBase collects, uses, stores and protects your information. OneBase is a personal finance tracking tool that lets you record and organise your own money: expenses, budgets, accounts, and money you have borrowed from or lent to people you know. OneBase does not lend money, does not facilitate lending, and is not a financial institution. It is a record-keeping tool that you fill in yourself.
By creating an account and using OneBase, you agree to this policy.
Who we are
OneBase is developed and operated by Innocencia Ndembera, based in Kigali, Rwanda. For any questions about this policy or your data, contact:
- Email: innondembera@womenintechmalawi.org
- Phone: +250 795 574 343
What information we collect
We collect only what the app needs to work.
Account information. When you create an account, we collect your email address and a securely hashed version of your password. We never store your password in readable form.
Financial information you enter. OneBase stores the financial records you choose to add: expenses and income, amounts and currencies, categories, budgets, account names and balances, loans and repayments, transfers between your accounts, recurring bills, and similar records. This is data you type in yourself. For accounts and cards, we store only a name and, if you choose, the last four digits. We never collect or store full card numbers, CVVs, or PINs.
Receipts you upload. If you attach a receipt image or PDF to a transaction, we store that file.
Shared-loan information. If you invite another OneBase user to a shared loan, we share only that single loan's details with the person you invite. Nothing else in your account is visible to them.
What we do not collect
- We do not access your contacts, SMS messages, call logs, or location.
- We do not access your photos, except a receipt image you deliberately choose to upload.
- We do not sell your data to anyone.
- We do not use your financial data for advertising.
How we use your information
We use your information only to:
- provide the app's features (recording, calculating, and displaying your finances);
- log you in securely;
- enable the shared-loan feature with people you explicitly invite;
- keep the app secure and working.
How your data is stored and protected
Your data is stored in a database hosted by our infrastructure provider, Railway, and receipt files are stored on storage attached to our server with the same provider. These servers may be located outside Rwanda. Passwords are hashed, and data sent between the app and our servers is encrypted in transit (HTTPS). Access to your data is restricted to your own account. Other users cannot see your data, except the single loan you deliberately share with a specific person you invite.
No method of storage or transmission is completely secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your information.
Data sharing
We do not share your personal or financial data with third parties, except:
- the person you explicitly invite to a specific shared loan, who sees only that loan;
- our hosting provider, strictly to run the app;
- where required by law.
Your rights and choices
- Access: all your data is visible to you in the app at any time.
- Correction: you can edit or remove records you have entered.
- Deletion: you can permanently delete your account and all associated data from within the app (Settings, then Delete account). This cannot be undone.
- Shared loans: you choose who you invite, and a shared loan can be unshared.
To exercise any of these rights or ask questions, contact us using the details above.
Data retention and deletion
We keep your data for as long as your account exists.
When you delete your account, your personal and financial data, including receipt files, is deleted immediately from our live systems. Copies that exist in our backups are removed automatically within 30 days. After that, your data cannot be recovered.
If you were part of a shared loan when you deleted your account, the other person keeps their own record of that loan's agreed history, as described in the app.
Age requirement
OneBase is intended for users aged 16 and older. We do not knowingly collect data from anyone under 16. If you believe someone under 16 has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new "Last updated" date, and will let you know in the app about significant changes.
Contact
For privacy questions or requests:
- Email: innondembera@womenintechmalawi.org
- Phone: +250 795 574 343