Privacy Policy

Ijeaku ('we', 'our', 'us') is a personal finance application developed and operated by Ijeaku.app based in Lagos, Nigeria. We are committed to protecting your personal data and being transparent about how we collect and use it.

Data Controller Contact:

• Email: [email protected]
• Address: Lagos, Nigeria

This policy explains what personal information we collect when you use the Ijeaku mobile application, why we collect it, how we use it, and your rights over that information.

This policy applies to all users of the Ijeaku app regardless of location, including users in Nigeria, the United Kingdom, European Union, United States, and across Africa.

• To create and manage your Ijeaku account
• To generate your personalised budget recommendations using the Ijeaku Method
• To calculate and display your financial health score
• To send bill reminders, budget alerts, and notifications you have requested
• To process your Premium subscription payment through Apple App Store or Google Play Store
• To provide the Ajo group savings tracking feature
• To detect and prevent fraud and security incidents
• To improve the app based on anonymised usage patterns
• To communicate with you about your account and the service

We process your personal data under the following legal bases:

Under the Nigeria Data Protection Act 2023 (NDPA), we process your data as a Data Controller. Under the EU and UK General Data Protection Regulation (GDPR and UK GDPR), we process data for users located in those jurisdictions on the same legal bases listed above.

We share your data only with the following third-party service providers, and only to the extent necessary to provide the Ijeaku service. We do not sell your personal data to any third party. We do not share your financial data with advertisers.

We have Data Processing Agreements in place with all third-party providers. We review these providers regularly to ensure they maintain appropriate security standards.

When you join or create an Ajo group, limited information is visible to other group members:

• Your display name (visible to group members)
• Your payment status for the current cycle: paid, pending, or missed
• Your collection position in the group schedule

The following is never visible to other group members:

• Your full financial profile
• Your income amount
• Your budget breakdown
• Your expense history
• Any other personal financial data

Ijeaku does not hold, move, or guarantee any funds in Ajo groups. The app provides tracking and accountability tools only. All money movement occurs directly between group members outside the app.

Under the NDPA 2023 and GDPR, you have the following rights over your personal data:

We will respond to all rights requests within 30 days. We may need to verify your identity before processing your request.

Your data may be stored and processed outside Nigeria. When data is transferred to countries without equivalent data protection laws, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the relevant data protection authority
• Data processing agreements with all third-party providers
• Transfer impact assessments where required

For users in the UK and EU, transfers outside the EEA are conducted in compliance with UK GDPR and EU GDPR respectively.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach
• Notify affected users without undue delay where the breach is likely to result in high risk to their rights
• For UK and EU users: notify the relevant supervisory authority within 72 hours
• Take immediate steps to contain and remediate the breach
• Keep a record of all breaches regardless of whether notification is required

Ijeaku is not intended for users under 18 years of age. We do not knowingly collect personal data from children under 18.

If you believe a child under 18 has provided us with personal data without appropriate consent, please contact us immediately at [email protected] and we will delete the data promptly.

Ijeaku is a mobile application and does not use browser cookies. The app uses the following device storage mechanisms:

• Encrypted secure storage: for authentication tokens and sensitive preferences. This is not accessible by other apps.
• App local storage: for non-sensitive preferences such as tour completion flags and UI preferences
• Supabase session storage: for maintaining your logged-in session

If a web version of Ijeaku is launched in the future, a separate cookie policy will be provided at that time.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes via:

• In-app notification when you next open the app
• Email to your registered address for material changes

The date at the top of this policy shows when it was last updated. Continued use of the app after changes have been notified constitutes acceptance of the updated policy. If you do not agree with changes, you may delete your account at any time.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the relevant supervisory authority:

For any privacy-related questions, to exercise your rights, or to raise a concern:

• Email: [email protected]
• Address: Ijeaku.app, Lagos, Nigeria

We aim to respond to all privacy queries within 5 business days and to complete all rights requests within 30 days.