The short version
treasurywithwesi is a demo. The money in it is practice money. We do not connect to your bank, we cannot see your real accounts, and we never ask for a bank password, a PIN or a card number — there is nowhere in the app to type one.
We keep as little as possible: enough to give you an account and show you your own demo. You can erase all of it yourself, at any time, from your profile page.
What we collect, and why
There are only three ways we end up with anything about you.
•
If you try the demo without signing up, we create an anonymous account. It has no name, no email and no phone number — just an ID so the app knows which practice money is yours.
•
If you make an account with an email address, we keep that email and the name you type. The email is how you sign in and how we could reset your password. Your password itself is stored by our login provider as a one-way hash; nobody at treasurywithwesi can read it.
•
If you send us a message through the contact form, we keep your name, your email, what you are interested in and your message, so we can reply.
What the app stores while you use it
Your demo: the practice accounts, savings goals, movements, saved people, requests, practice holdings and alerts you create. All of it is made up by you or seeded by us as an example. None of it comes from a bank.
A record of what happened: every movement writes an entry to your own activity log with a reference. This is there so you can check the app, and so we can investigate if something looks wrong.
On your own device: if the online demo is unavailable, the app runs entirely on your phone or browser and keeps your demo in that device’s own storage. In that case the data never reaches us at all.
What we never collect
Not "we promise not to" — there is no field for it, no column for it and no code path that could use it.
•
Bank passwords, PINs, one-time codes, card numbers or CVVs.
•
Your real account balances or real transactions.
•
Your location, your contacts, your photos or your device’s files.
•
Anything from third-party advertising or tracking networks. The site has no advertising trackers and no third-party analytics cookies.
Who can see your data
You can. Nobody else using the app can — the database refuses to return another person’s rows, enforced at the database itself and not only in the app. We test this.
Our hosting and database providers hold the data on our behalf: Supabase (database and login) and Vercel (website hosting). They are processors — they do not use your data for their own purposes.
We do not sell your data, and we do not share it with advertisers. We would only hand anything over if the law required it, and we would tell you unless we were legally barred from doing so.
Where it is kept, and for how long
The database is hosted in the European Union (eu-west-1), which is outside Botswana. We tell you this plainly because the Data Protection Act 2024 expects us to.
Anonymous demo accounts that have not been used for 7 days are deleted automatically, every night, along with everything in them.
An account with an email stays until you delete it. Contact-form messages are kept while we still need them to deal with your enquiry.
Erasing everything
Open your profile in the app, type DELETE, and confirm. That removes your login and every row attached to it — accounts, goals, movements, saved people, requests, holdings, alerts and the activity log — in one step, immediately and permanently. We cannot get it back for you afterwards, and we do not keep a shadow copy.
If you also used the on-device demo, the same button erases that device’s copy.
Your rights under the Data Protection Act 2024
Botswana’s Data Protection Act 2024 gives you rights over your own information. In practice:
•
See what we hold: everything we hold about you is already on your screen in the app. Ask us and we will confirm it in writing.
•
Correct it: your name and email are editable in your profile.
•
Erase it: the delete button above does this in full.
•
Object or complain: write to us first. If we have not put it right, you can complain to the Information and Data Protection Commission.
Security
Every connection uses HTTPS. Passwords are hashed by our login provider, never stored by us in a readable form. The database has row-level security switched on for every table, so a request can only ever return your own rows, and no part of the app can write to a money table directly — all changes go through checked functions that log what they did.
The tables reserved for real bank data exist but are unreachable: they have security on and no access rules at all, so nothing in the app can read or write them until a licensed connection is built.
If we ever had a breach that put you at risk, we would tell you and the Commission.
Children
The demo is not aimed at children. If you are under 18, please use it with a parent or guardian.
Changes to this page
If we change what we collect, we change this page and update the date at the top. If a change is significant, we will say so in the app.
Getting hold of us
Any question about your data — or a request to see, correct or erase it — goes through the contact form and we reply by email.
Write to us →
Read the terms →
