Privacy Policy for iTax Returns Builder

Effective date: June 17, 2026

iTax Returns Builder is an independent mobile tool for preparing Kenya resident individual income tax return upload packages. It is not an official Kenya Revenue Authority (KRA) application, does not submit returns directly to KRA, and does not replace professional tax advice.

This policy explains how the app handles information while helping you prepare, validate, export, and share an iTax-compatible upload ZIP.

Contact

For privacy and support questions, contact: itax@ammonvictor.com

Information The App Handles

The app may handle information you enter or import while preparing a return, including:

• taxpayer identifiers and profile details needed for the return
• return period and residency details
• income, expense, employment, business, rental, spouse, loss, relief, credit, withholding tax, and balance sheet information
• certificate or payer details you enter for tax credit validation
• previous return files or XML/ZIP files you choose to import
• generated XML and upload ZIP files
• app preferences such as selected language

This information can be sensitive personal and financial data. You should only enter information that you are authorized to use for the return being prepared.

What We Collect

The current app is designed as a local-first tool. In the production Android build:

• we do not collect your return data on our servers
• we do not operate an app backend for return preparation
• we do not create user accounts
• we do not store KRA passwords or credentials
• we do not use advertising trackers
• we do not submit returns to KRA on your behalf
• the release Android app does not request internet access

Debug or development builds may include developer-only networking permissions required by React Native tooling. Those builds are not intended for end users.

How The App Uses Your Information

Information you provide is used on your device to:

• guide you through the return preparation wizard
• save and restore local drafts
• run iTax-style validation checks
• calculate return summaries, credits, balances, and readiness status
• generate the XML payload, SHA-256 hashes, and upload ZIP
• let you export or share the generated upload ZIP using Android system share or file flows
• remember app preferences such as language

Local Storage And Security

Drafts and app preferences are stored locally on your device. Sensitive local draft data is protected using Android secure storage mechanisms, including Android Keystore-backed encryption where supported by the device.

You remain responsible for your device security, including screen lock, device updates, backups, and access by other people who can unlock the device.

When you export or share an upload ZIP, the file may be copied outside the app into storage locations or apps you choose. Those exported copies are controlled by you and by the selected destination app, not by iTax Returns Builder.

Sharing And Third Parties

The app does not sell personal data and does not share your tax return data with advertisers.

Your data may leave the app only when you choose to export, save, share, import, or upload a file through another app or service. Examples include:

• Android file picker and share sheet
• cloud storage or file manager apps you select
• messaging or email apps you select
• the KRA iTax portal if you manually upload the generated ZIP
• Google Play services related to installing and updating the app

Once you use another service, that service's privacy policy and security practices apply.

KRA And iTax

If you upload a generated ZIP to the KRA iTax portal, KRA processes that information under its own legal authority, privacy practices, and taxpayer rules. iTax Returns Builder only prepares a local upload package and does not control KRA systems.

Retention And Deletion

Local drafts remain on your device until you clear them, uninstall the app, or remove app data using Android settings.

The app includes controls to clear the local draft. Clearing the local draft removes the app's stored draft data from the device, but it does not delete files that you already exported, shared, uploaded, backed up, or copied elsewhere.

Generated upload files are retained wherever you choose to save or share them. You should delete exported files from those destinations when you no longer need them.

Your Choices And Rights

Because the current app does not collect return data on a backend, most access, correction, and deletion actions happen directly on your device:

• review and edit your return details in the wizard
• clear the local draft from the app
• delete exported files from the locations where you saved them
• uninstall the app to remove app-local data managed by Android

If you have a privacy question or believe we have received personal data from you outside the app, contact us using the email above. We will respond in line with applicable data protection requirements.

Children's Privacy

The app is intended for taxpayers or authorized preparers. It is not directed to children, and we do not knowingly collect personal data from children.

Data Safety Summary For Google Play

For the current production Android build:

• Data collected by developer: none
• Data shared by developer: none
• Data processed on device: tax return details, local drafts, generated XML/ZIP files, and app preferences
• Data encryption: local draft data is encrypted where supported; no app-managed network transmission is used for return data
• Data deletion: users can clear local drafts, delete exported files, clear Android app data, or uninstall the app

User-directed exports, shares, backups, or uploads are not considered developer collection, but they may disclose data to the destination selected by the user.

Changes To This Policy

We may update this policy as the app changes. If a future version adds accounts, analytics, cloud backup, direct submission, support uploads, or any backend integration, this policy and the Google Play data safety disclosures must be updated before release.

Consent

By using the app, you acknowledge that your return data is processed locally on your device for the purposes described in this policy, and that any exported or shared files are handled according to the destination you choose.