At LenWise, your privacy is not a feature — it's a foundation. This document explains what personal data we collect, why, and how we protect it. By using the App, you agree to the practices described here.
Data We Collect
To deliver and enhance LenWise, we gather the following categories of information:
| Data Type | Purpose | Storage Destination |
|---|---|---|
| Mobile Number | Serves as your login identifier. Verified at sign-up, then used for identity confirmation and safeguarding your account against unauthorized logins. | Encrypted & uploaded to our server |
| Financial SMS | Upon your consent, LenWise reads text messages sent by banks, e-wallets, and card issuers to extract transaction details and populate your expense log. You may decline this and input transactions by hand. | Extracted details encrypted & uploaded to our server |
| Device Details | Phone brand, model, OS release, Android ID, and carrier — used to optimize the app for your hardware, identify irregular activity, and keep your session stable. | Encrypted & uploaded to our server |
| Approximate Location | General area (city-level) to sync timestamps with your local time zone and flag logins from unfamiliar regions. Exact coordinates are never captured or stored. | Encrypted & uploaded to our server |
| Installed Apps List | A list of applications installed on your device — used to detect compatibility issues, identify potential fraud or risky apps, and improve service stability. Only app names and package identifiers are collected; no in-app content or activity data is accessed. | Encrypted & uploaded to our server |
| Passcode | Protected with industry-standard cryptographic hashing. The plain-text password is never visible to us — only its hashed representation is stored for verification. | Hashed only, uploaded to our server |
All authorized data is transmitted via encrypted connections to our own server endpoint at https://lenwise.xyz/api. We do not route your data through any external third-party servers. When you request account deletion, all stored data is permanently removed from our servers.
How We Use Your Data
- Account protection: Your mobile number acts as a unique key that prevents others from accessing your profile.
- Smart bookkeeping: SMS data is parsed into categorized entries within your expense log, then securely uploaded so you never lose your records.
- Suspicious-activity alerts: Device, location, and installed app signals help us spot unusual behavior and risky app environments.
- Smooth operation: Device specifics allow us to adapt the app's behavior to your hardware.
- Server-side backup: All data you authorize is encrypted and stored on our own servers at https://lenwise.xyz/api, ensuring your financial records remain safe even if you switch or lose your device.
- Ongoing improvement: Aggregated, anonymized trends guide our feature roadmap.
Data Security
Every piece of data you consent to share is encrypted before leaving your device and transmitted exclusively to our own server endpoint at https://lenwise.xyz/api. No data passes through any third-party infrastructure. Passwords are hashed with industry-standard algorithms and never stored in plain text. Access to stored data is restricted to authorized personnel and fully logged.
Deletion guarantee: When you request account deletion, we permanently erase all your personal data from our servers — including phone number, financial records, SMS-derived data, device details, and location history. No residual copies are retained beyond a 30-day backup window for security purposes.
Third-Party Services
We do not share your financial data, SMS content, or phone number with third parties for advertising or marketing. One analytics SDK is used:
AppsFlyer SDK
Used for user behavior analytics and marketing attribution. AppsFlyer may collect:
- Advertising ID (GAID) for attribution
- Device model, OS version, carrier
- IP address (for approximate location)
- App install and engagement events
Important: Your financial data, SMS content, and phone number are never shared with AppsFlyer. Only aggregated analytics are provided to us.
Your Rights Under RA 10173
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you are entitled to:
To exercise any of these rights, contact us at support@lenwise.xyz or use the in-app Delete Account feature.
Account Deletion
You can permanently delete your account via Settings → Delete Account in the app. This removes:
- Phone number and login credentials
- All processed SMS data and financial records
- Device information and installed apps data stored in our systems
- App settings and preferences
Deletion is permanent and cannot be undone. Residual backup data may be retained for up to 30 days for security purposes before full deletion.
Children's Privacy
LenWise is not intended for users under 18. We do not knowingly collect data from minors. If we discover such data has been collected, it will be promptly deleted. Please contact us immediately if you believe a minor's data is in our system.
Data Retention
We retain personal data only as long as necessary to provide our services. Upon account deletion, active data is removed within 30 days. Backup copies are securely destroyed within an additional 60 days.
Policy Updates
We may update this policy to reflect changes in our services, technology, or legal requirements. Significant changes will be communicated via in-app notification. The "Last Updated" date above reflects the most recent revision. Continued use after updates constitutes acceptance.
Contact
Get in Touch
App: LenWise
Developer: MY PEA POD LLC
Email: support@lenwise.xyz
Website: https://lenwise.xyz