Privacy Policy

DreamFund respects your privacy. This policy explains what personal and financial information we collect, why we collect it, and the choices you have. We handle your data in line with applicable Zambian data protection law.

• Account details, name, email, phone number, city, and profile photo (if you add one).
• Sign-in data, when you use Google or Apple sign-in, we receive your name and email from that provider. We do not receive your Google or Apple password.
• Financial profile, monthly income you provide, savings goals, wallet balance, and transaction history.
• Usage data, saving streaks, achievements, Dream Score components, and in-app actions.
• Payment data, processed by our payment partners (e.g. Lenco, Lipila); we do not store full card or mobile-money PINs.
• Communications, SMS one-time codes for sign-in (where enabled), deposit alerts, and support messages you send us.

• To operate your wallet, process deposits and withdrawals, and track your dreams.
• To calculate your Dream Score and personalise AI coaching.
• To send you notifications about your savings (in-app and, where enabled, SMS).
• To prevent fraud, comply with law, and improve the platform.

We do not share your Dream Score or savings history with lender partners unless you explicitly opt in via Settings. You can withdraw this consent at any time. Banks and employers only see data where you have an existing relationship and the applicable controls allow it. We never sell your personal data.

We use trusted processors to deliver our service, including payment partners (Lenco, Lipila), SMS providers, Google and Apple (when you choose social sign-in), and cloud infrastructure (Supabase). These processors only receive the data necessary to perform their function and are bound to protect it.

If you sign in with Google or Apple, authentication is handled by that provider under their privacy policies. DreamFund receives basic profile information (such as your name and email) to create and manage your account. You can disconnect social sign-in at any time by contacting us or signing out and using phone sign-in instead.

We use browser local storage to keep you signed in and remember your preferences (such as theme). We do not use third-party advertising cookies. Essential session tokens are required for the app to function.

We keep your information for as long as your account is active and as required to meet legal, accounting, and fraud-prevention obligations. You may request deletion of your account, subject to records we must retain by law.

We use encryption in transit, access controls, and row-level security to protect your data. No system is perfectly secure, but we work continuously to safeguard your information.

You can access and update your profile in Settings, control lender sharing, and request a copy or deletion of your data by contacting us. We will respond within a reasonable period.

DreamFund is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us and we will delete it.

For privacy questions or data requests, contact us at info@dreamfund.app.