Your data, over WhatsApp.

Who we are

Ada is operated by Ada, Inc., based in Nairobi, Kenya. We are the data controller for the information you send us. Ada uses the WhatsApp Business Platform (Cloud API), provided by Meta Platforms, Inc., to send and receive messages. Meta acts as our messaging provider and processes message data under its own WhatsApp Privacy Policy.

What we collect

When you contact Ada on WhatsApp, we receive and process:

• Your WhatsApp phone number and your WhatsApp profile name — so we can identify your account and reply to you.
• The content of the messages you send — text, questions, instructions, and voice notes.
• Files and media you choose to upload — such as bank statements, receipts, invoices, and document or photo attachments you want Ada to work with.
• Message metadata generated by WhatsApp — message identifiers, timestamps, and delivery and read receipts.
• One-time passcodes we send you over WhatsApp to sign you in securely.

We do not collect anything you don’t send us, and we never read messages you exchange with anyone other than Ada.

Why we use it

We use the information above only to run the service you asked for:

• To understand your requests and reply with bookkeeping, tax, and accounting help.
• To read the financial documents you upload and turn them into summaries, reports, and filings you ask us to prepare.
• To verify your identity when you sign in, using the one-time passcode.
• To send you the reports, files, and answers you request.
• To keep a secure audit record of actions taken on your behalf, for your protection and to meet our legal obligations.

We do not use your WhatsApp information for advertising, and we do not share it with Meta or anyone else for advertising or marketing purposes.

AI processing

Ada uses artificial-intelligence models to understand your messages and process your documents. Message content and uploaded files may be sent to trusted model providers strictly to generate your response. These providers act on our instructions, are bound by confidentiality, and are not permitted to use your data to train their general models.

Who we share it with

We do not sell your data. We share it only with service providers who help us operate Ada — cloud hosting and storage, AI model providers, and messaging and authentication providers — each under contract and only to the extent needed to deliver the service. We may also disclose information to the Kenya Revenue Authority or another authority where you ask us to file on your behalf, or where the law requires it.

Where it lives and how we protect it

Your messages and documents are stored on access-controlled cloud infrastructure. Credentials are held in an encrypted vault, access is restricted to the systems and staff that need it, and sensitive actions are written to a tamper-evident audit log. We use encryption in transit and apply reasonable technical and organisational measures to keep your information safe.

How long we keep it

We keep your information for as long as your account is active and for as long as we need it to provide the service. Financial records may be retained for the period required by Kenyan tax law. Outside those obligations, we delete the information you ask us to remove within 30 days of your request.

Your rights

Under the Data Protection Act, 2019 you have the right to access, correct, or delete your personal data, to object to or restrict its processing, and to withdraw consent at any time. To exercise any of these rights, message us on WhatsApp or write to team@ada-finances.com. The Office of the Data Protection Commissioner is the regulator if you ever need to escalate.

How to delete your data

You can ask us to delete your data at any time. To make a request:

• Email team@ada-finances.com with the subject line “Data Deletion Request”.
• Include the WhatsApp phone number linked to your Ada account, so we can confirm the request is really yours.
• Tell us whether you’d like everything deleted, or only specific information.

We will confirm your request, erase the data we are not legally required to retain, and complete the deletion within 30 days. You can also send a deletion request to us on WhatsApp, and our team will handle it the same way.

Children

Ada is intended for businesses and adults. It is not directed at anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

If we change how we handle your data, we will update this page and revise the date below. Material changes will be communicated to you on WhatsApp where appropriate.