Your data, protected.

Gwiza handles your most sensitive financial information. Here is exactly how we protect it.

Last updated: April 2026 · Rwanda Law N° 058/2021 compliant

What we store

Your income sources and salary amount
Your financial goals and progress
Your debts and repayment plans
Your expenses you log manually
Your execution plan (how your salary is allocated)
Conversations with Advisor Gwiza
Your device token for push notifications (encrypted)

We store only what you give us. We do not connect to your bank account, read your SMS, or access any data you did not enter manually.

What we never do

We never hold your money — Gwiza sends instructions, your bank or MTN MoMo executes them
We never access your bank account credentials or passwords
We never read your SMS messages or call history
We never sell your data to third parties — ever
We never share your individual financial data with any institution without your explicit consent
We never store your national ID number or passport

How your data is protected

✓Encrypted in transit — all data between your device and Gwiza travels over TLS 1.3 encryption. The same standard used by banks.

✓Encrypted at rest — your data is stored in Supabase, a SOC 2 Type II certified database hosted in Frankfurt, EU. All data is encrypted at rest using AES-256.

✓Row-level security — every piece of data in Gwiza is locked to your account. Even if someone accessed the database directly, they could only see their own data — never yours.

✓No API keys on your device — your Anthropic AI key and database service key never leave our servers. Your device only holds a session token that expires automatically.

✓Automatic session expiry — if you are inactive for 7 days, your session expires and you must log in again.

Advisor Gwiza and your data

Advisor Gwiza is powered by Anthropic's Claude AI, one of the most safety-focused AI systems available. When you ask Gwiza a question, your financial profile is included in the conversation to give you relevant advice.

Conversations are stored in Gwiza's database so Gwiza remembers context across sessions. You can delete your entire conversation history at any time from your profile settings.

Your conversations are not used to train Anthropic's AI models.

Rwanda legal compliance

Gwiza operates under Rwanda Law N° 058/2021 on the protection of personal data and privacy. This law requires us to:

Collect only data necessary for the service you use
Store your data securely and for no longer than necessary
Give you the right to access, correct, and delete your data
Never transfer your data outside Rwanda without adequate protection
Notify you within 72 hours if a data breach occurs that affects your data

Gwiza is registered as a data controller with RISA (Rwanda Information Society Authority).

Your rights

Legal

Gwiza is a product of Gwiza Fintech Ltd, a company registered in Rwanda.
Gwiza Fintech Ltd operates under Rwanda Law N° 058/2021 on data protection and privacy.
Registered office: Kigali, Rwanda.
Contact: admin@gwizafintech.com