Privacy Policy

1. Introduction

Welcome to Kuditrak! Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application and website (collectively, the "Service"). By using Kuditrak, you consent to the data practices described in this policy.

2. Information We Collect

We collect the following types of information:

• Personal Information: Name, email address, phone number, and profile information you provide during registration.
• Financial Data: Transaction history, budget details, savings goals, and linked bank account information.
• Device Information: IP address, device ID, operating system, browser type, and app version.
• Usage Data: How you interact with our app, including features used, time spent, and crash logs.
• Push Tokens: Device tokens to send notifications about budgets, alerts, and account activity.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and improve Kuditrak services.
• To manage your budgets, transactions, and financial tracking.
• To process subscription payments through Apple and Google.
• To send you important notifications (budget alerts, payment reminders).
• To comply with legal and regulatory requirements.
• To analyze app usage and improve user experience.
• To respond to customer support inquiries.

4. Open Banking and Third-Party Integration

Kuditrak uses Mono Technologies as our trusted open banking partner to enable you to securely link your Nigerian bank accounts.

Key Points:

• We never store your banking credentials (username, password, PIN, or security questions).
• Mono provides read-only access to your account and transaction data after you authorize access.
• All banking data is encrypted and shared only with your explicit consent.
• You may revoke access at any time by disconnecting your bank account in the app.
• Mono is licensed by the Central Bank of Nigeria (CBN) as an Open Banking provider.

For more information, see Mono's Privacy Policy: https://mono.co/legal/privacy

5. Data Sharing & Third-Party Services

We do not sell your personal data. We share limited data with third parties for the following purposes:

6. Data Protection & Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3.
• Authentication: We use JWT tokens for secure API access.
• Password Security: Passwords are hashed using bcrypt before storage.
• Data Storage: Your financial data is stored in secure MongoDB Atlas databases with encryption at rest.
• Access Controls: Only authorized personnel have access to production data.

Despite these measures, no method of internet transmission is 100% secure. We encourage you to safeguard your account credentials and devices.

7. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Update inaccurate or incomplete information.
• Deletion: Delete your account and all associated data (see Section 8).
• Data Portability: Receive your data in a structured format.
• Opt-out: Unsubscribe from marketing communications.
• Withdraw Consent: Disconnect bank accounts at any time.

To exercise these rights, contact us at privacy@kuditrak.com.

8. Account Deletion

You may delete your Kuditrak account at any time by navigating to: Profile → Settings → Delete Account.

What happens when you delete your account:

• All personal data is permanently removed from our servers.
• Transaction history, budgets, and savings buckets are deleted.
• Connected bank accounts are disconnected (but remain on Mono).
• Your subscription must be cancelled separately through Apple/Google.

Data Retention: We retain anonymized analytics data for service improvement. Transaction data is deleted immediately upon account deletion.

9. Data Retention

We retain your personal data for as long as your account is active. After account deletion:

• Personal data: Deleted immediately
• Transaction data: Deleted immediately
• Analytics data: Anonymized and retained for up to 24 months
• Backup data: Automatically overwritten within 30 days

10. Compliance & Regulations

Kuditrak complies with applicable data protection laws:

• GDPR: For users in the European Economic Area (EEA).
• CCPA: For California residents.
• NDPR: For Nigerian users (Nigeria Data Protection Regulation).

If you are in the EEA, you have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

Kuditrak is not intended for children under 13. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via:

• In-app notification
• Email (if you have an account)
• Website announcement

The "Last Updated" date at the top of this policy indicates when changes were made. Continued use of Kuditrak constitutes acceptance of the updated policy.