Privacy Policy · Moneytaw

Moneytaw ("we", "us") is a personal finance application available on Android and on the web at app.moneytaw.com. This policy explains what data we collect, why, and the rights you have over it. It is written to comply with the Nigeria Data Protection Act 2023 (NDPA) and to follow internationally recognised data-protection practice.

What we collect

Account data — your email address, name, and password (stored as a salted hash), or your Google account identifier if you sign in with Google.
Financial records you add or import — transactions, account balances, budgets, debts, investments, and giving records. These may be entered manually, uploaded as bank statements (CSV/Excel), or parsed from bank alert emails and SMS messages you explicitly connect.
Email data (only if you enable Email Sync) — with your consent, we read bank transaction alert emails from your connected mailbox to create transaction records. We access only the messages needed to identify bank alerts. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Gmail data for advertising, and we do not allow humans to read your email except with your explicit consent for support, for security purposes, or as required by law.
SMS data (Android, only if you enable SMS parsing) — bank alert SMS messages are processed to detect transactions. Per-sender controls let you choose which senders are read.
Device and usage data — app version, device type, crash reports, and privacy-friendly usage analytics.

How we use it

To provide the product: storing your records, syncing them across your devices, computing budgets, net worth, health scores, and insights.
To categorise transactions automatically. Transaction descriptions may be processed by an AI service (Anthropic) solely to assign categories. No email credentials or account passwords are ever shared with AI services.
To process subscription payments (via Paystack). We never see or store your full card details.
To send transactional email (receipts, reminders, loan-link notifications) and, if you opt in, product updates.
To keep the service secure and debug failures (error tracking via Sentry).

Lawful basis

We process your data on the basis of contract performance (providing the app you signed up for), consent (email sync, SMS parsing, marketing email — each individually revocable), and legitimate interest (security, fraud prevention, service improvement).

Who processes your data

We use a small set of processors, each bound by data-processing agreements: Supabase (database and authentication), Paystack (payments), Anthropic (AI categorisation of transaction text), Resend and Loops (email delivery), Sentry (error tracking), and Vercel (web hosting). We never sell your personal data.

Retention & deletion

Your records are retained while your account is active. You can delete your account and all associated data at any time — see our Account Deletion page. Backups are purged on a rolling schedule within 30 days of deletion.

Your rights

Under the NDPA you may request access to, correction of, or deletion of your personal data; object to or restrict processing; and receive a portable export (available directly in-app under Settings → Export). To exercise any right, contact us at the address below. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

Cookies & analytics

The moneytaw.com website uses cookieless, privacy-friendly analytics (Umami and Vercel Analytics). No advertising trackers, no cross-site cookies, and therefore no cookie banner. The web app uses strictly necessary storage (your session) only.

Security

Data is encrypted in transit (TLS) and at rest. App access can be protected with a PIN and biometrics on your device. Access to production systems is restricted and audited.

Children

Moneytaw is not directed at children under 18, and we do not knowingly collect their data.

Changes & contact

We will post any material changes here and update the date above. Questions or requests: support@moneytaw.com — this address also reaches our data-protection contact.