Privacy Policy

1. Introduction

myfinbuk (“we”, “our”, or “us”) operates the Finbuk application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use Finbuk.

We are committed to protecting your privacy and handling your data responsibly. This policy is written in plain language so you can clearly understand your rights and our practices. We comply with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR).

By using Finbuk, you consent to the data practices described in this Privacy Policy. If you have any questions, contact us at support@myfinbuk.com.

2. Information We Collect

We collect information you provide directly and information generated by your use of the app:

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide the core Finbuk features — bookkeeping, invoicing, tax estimation, compliance reminders, and financial reporting.
• Tax guidance: To generate personalised tax estimates (VAT, CIT, PITA, Presumptive Tax) based on your business type, revenue, and transaction history.
• In-app notifications: To send relevant alerts, such as upcoming VAT filing deadlines, overdue debt reminders, and low stock warnings.
• Account management: To verify your identity, manage your session, and provide technical support when needed.
• App improvement: To analyse usage patterns and improve Finbuk's features, performance, and user experience over time.

We do not use your data for advertising or sell it to marketing companies.

4. Data Storage & Security

We take the security of your data seriously. Here is how we protect it:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Your financial records and personal information are stored on encrypted servers.
• Access controls: Only authorised myfinbuk personnel with a legitimate operational need can access your data, and only in accordance with strict internal policies.
• NDPA compliance: Our data storage and processing practices comply with the requirements of the Nigeria Data Protection Act 2023 and NDPR.

While we implement industry-standard security measures, no method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you in accordance with our obligations under the NDPA.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may only be shared in the following limited circumstances:

• With your consent: Where you have explicitly authorised a specific disclosure (e.g., sharing a report with your accountant via export).
• Legal obligations: Where we are required by applicable Nigerian law, regulation, court order, or lawful government request to disclose information.
• Safety and security: Where disclosure is necessary to protect the rights, property, or safety of myfinbuk, our users, or the public.
• Service providers: We may share limited technical data with trusted service providers (e.g., cloud hosting, SMS gateway providers) solely to operate the Finbuk service. These providers are contractually bound to protect your data.

We require all third-party service providers to handle your data securely and in compliance with applicable data protection law.

6. Your Rights Under the NDPA 2023

Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You can request deletion of your account and associated personal data. Financial records may be retained for a limited period where required by Nigerian tax law.
• Right to data portability: You can request an export of your business data in a structured, machine-readable format.
• Right to object: You can object to certain types of processing, including direct marketing (though we do not currently engage in this).

To exercise any of these rights, email us at support@myfinbuk.com with the subject line "Data Request — [your phone number]". We will respond within 14 working days.

7. Cookies & Local Storage

Finbuk uses browser local storage and session storage to maintain your login session, store your preferences, and enable the app to function correctly without requiring you to log in on every visit.

We do not use third-party advertising cookies, tracking pixels, or cross-site tracking technologies. Your in-app activity is not shared with advertising networks.

You can clear your local storage at any time via your browser or device settings. Note that doing so will log you out of the app and may reset local preferences.

8. Children's Privacy

Finbuk is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a person under 18, we will take steps to delete that information promptly.

If you believe that a minor has created a Finbuk account, please contact us immediately at support@myfinbuk.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of Finbuk. When we make material changes, we will:

• Notify you via in-app notification at least 14 days before the changes take effect.
• Update the "Last updated" date at the top of this page.
• Where required by law, request your fresh consent to the updated terms.

Your continued use of Finbuk after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your data, please get in touch: