Privacy Policy

This Privacy Policy explains how Budgetify Technologies Limited (“Budgetify AI”, “we”, “us”) collects, uses, shares and protects your information when you use our websites, apps and services (together, the “Service”).

We are the data controller responsible for your personal data. We are a technology company, not a bank, and we are committed to handling your data lawfully, fairly and transparently, in line with the Nigeria Data Protection Act 2023 (the “NDPA”) and applicable regulations issued by the Nigeria Data Protection Commission (the “NDPC”).

If you have any questions about this policy or your data, contact us at hello@budgetifyai.com.

We collect the following categories of information:

• Account information you give us, such as your name, email address, phone number and password.
• Financial and transaction data from accounts you choose to connect, including balances, transactions, and account details, accessed on a read-only basis through licensed open-banking and bank-data providers.
• Information you add yourself, such as budgets, goals, manual expenses, and receipts or documents you upload or forward to us.
• Communications with us, including support messages and your notification preferences.
• Device and usage data, such as IP address, device type, app and browser information, and how you interact with the Service, collected to keep it secure and working well.

We do not knowingly collect more than we need to provide and improve the Service.

We use your information to:

• provide the Service and your account, and keep it running;
• understand your money, categorise transactions, detect patterns and give you insights;
• send you the alerts, reports and notifications you have chosen, on the channels you prefer;
• where you authorise it, help you protect and grow money through licensed partners;
• keep the Service and your account secure, and prevent fraud and abuse;
• respond to your requests and provide support;
• improve the Service and develop new features, using aggregated or de-identified data where possible;
• meet our legal, regulatory and compliance obligations.

We do not sell your personal or transaction data, and we do not use it for third-party advertising.

Under the NDPA, we process your personal data on one or more of the following lawful bases:

• Your consent, for example when you connect a bank account, enable a notification channel, or authorise an automated action. You can withdraw consent at any time.
• Performance of a contract, to provide the Service you have asked for under our Terms.
• Our legitimate interests, such as securing the Service, preventing fraud and improving our product, balanced against your rights.
• Legal obligation, where we must process data to comply with the law.

We share information only as needed to run the Service, and only with parties bound to protect it. The categories of recipients are:

• Open-banking and bank-data providers that enable your read-only account connections.
• Licensed financial and investment partners that, where you authorise it, hold and grow protected money. Budgetify AI does not hold your funds in its own name.
• Service providers that process data on our behalf under contract, such as cloud hosting, security, analytics and communications (email, push, SMS and messaging).
• Legal and safety recipients, where we are required by law, or where it is necessary to protect our rights, our users or the public.
• In a business transfer, such as a merger or acquisition, subject to this policy continuing to protect your data.

We require everyone who processes data for us to keep it secure and use it only for the purposes we specify.

When you connect a financial account, you grant read-only access through a licensed provider. This lets Budgetify AI see your transactions and balances so it can help you. Read-only access does not let us move your money.

Moving money is always a separate, explicit permission that you grant and can withdraw. You can disconnect an account at any time from your settings, which stops new data being collected from it.

We keep your data for as long as your account is active and for as long as we need it to provide the Service, meet legal and regulatory requirements, resolve disputes and enforce our agreements.

Some financial records are kept for longer where the law requires it. When data is no longer needed, we delete it or de-identify it.

We use technical and organisational measures designed to protect your data, including encryption of sensitive information, strict access controls, monitoring, and secure development practices. No system is perfectly secure, but we work hard to keep your data safe and to respond quickly if something goes wrong.

Under the NDPA, you have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• request deletion of your data in certain circumstances;
• restrict or object to certain processing;
• receive your data in a portable format and, where possible, have it transferred;
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with the NDPC if you believe your rights have been breached.

To exercise any of these rights, see our Data Rights page or email hello@budgetifyai.com. We may need to verify your identity before we act, and we will respond within the timeframes set by the NDPA.

We use cookies and similar technologies to keep you signed in, remember your preferences, keep the Service secure, and understand how it is used so we can improve it. You can control non-essential cookies through your browser settings or any consent controls we provide. Essential cookies are needed for the Service to work.

Some of our service providers may process data outside Nigeria. Where we transfer data internationally, we take steps to ensure it remains protected to a standard consistent with the NDPA, including through appropriate contractual safeguards.

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

You can reach us about this policy or your data at hello@budgetifyai.com, or by writing to Budgetify Technologies Limited, No. 10, Muhammad Abu Ali Crescent, Jahi, Abuja, Nigeria.