Privacy Policy

OnyeshaMessage requests permission to read SMS messages on your device. By default, the app is set to only show M-PESA confirmation messages, filtering out everything else — you won't see, and we won't use, unrelated SMS content unless you change this yourself.

In Settings, you can choose to widen this filter so the app shows all of your SMS messages instead of only M-PESA ones. This is optional and off by default. Regardless of this setting, message content is only ever used to display messages to you inside the app — it is never uploaded, transmitted, or stored outside your device.

You can review or revoke the SMS permission at any time from your device's Settings, though doing so will prevent the app from finding your messages.

When you select an M-PESA confirmation message, OnyeshaMessage reads it directly from your phone's messaging storage and reformats it into a clean payment screen — showing details like the amount paid, recipient, transaction ID, and date. Sensitive information, such as your account balance, is deliberately left out of this screen. This processing happens locally, on your device. The content of your messages is never sent over the internet, to us, or to any third party.

Unlike your message content, some limited analytics information is sent to us, but only when your device is connected to the internet. This includes:

• The fact that the app was installed (download count).
• How many times you've opened the app.

This information is tied to a unique device ID that is randomly generated when you install the app. This ID cannot be traced back to you, and is not linked to your name, phone number, or any M-PESA account details. We use it only to understand overall usage of the app, such as how many people have installed it and how often it's used.

Your messages are never stored on our servers. Anything the app displays from your messages is read directly from your phone at the moment you open it, and because that part of the app works offline, it stays under the same protections as the rest of your device — for example, your phone's lock screen and storage encryption. The limited analytics described above are stored on our servers against your anonymous device ID only.

We do not sell or rent your messages, transaction details, or analytics information to advertisers or any other third party.

If you choose to share, print, or send a payment screen generated by the app — for example, to a vendor — that is an action you take deliberately, using your device's normal sharing tools. OnyeshaMessage does not share this information on your behalf automatically.

OnyeshaMessage is not directed at children, and we do not knowingly design the app to collect information from children. The analytics we collect are anonymous and are not used to identify or profile any individual user, including children.

We may update this Privacy Policy from time to time, for example to reflect changes in the app's features or to clarify existing practices. If we make material changes, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how OnyeshaMessage handles your information, you can reach us at info@arimi.co.ke.