Legal

Privacy Policy

Last updated: May 2026

ThriftVault ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ThriftVault mobile application and website (collectively, the "Service").

Please read this policy carefully. By using ThriftVault, you agree to the practices described here.

1. Information We Collect

Information you provide directly

• Account information: Full name, phone number, email address, and PIN when you register
• Identity verification: If you complete enhanced verification, we may collect additional identity documents
• Payment information: Payment receipts and transaction references. We do not store full card details - these are handled by Paystack and Stripe
• Group information: Groups you create or join, contribution amounts, payout schedules
• Communications: Messages and content you submit within the platform

Information collected automatically

• Device information: Device type, operating system, unique device identifiers, and push notification tokens
• Usage data: Features you use, actions you take, and time spent on the app
• Error data: Crash reports and performance data collected via Sentry to help us fix bugs

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process contributions and payouts within your savings groups
• Send payment reminders and group notifications via push notifications and SMS
• Calculate and display reputation scores based on your payment history
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve the ThriftVault platform and fix bugs
• Respond to your support requests

3. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

Within your savings groups

Your name and contribution status are visible to other members of savings groups you belong to. This is necessary for the transparent operation of the group.

Service providers

• Paystack - payment processing for Nigerian users (NGN)
• Stripe - payment processing for diaspora users
• Termii - SMS notifications and WhatsApp messaging
• Expo - push notification delivery
• Sentry - error monitoring and crash reporting
• Supabase - secure database hosting

Legal requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights and safety of ThriftVault, our users, or the public.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Group transaction records may be retained for up to 6 years for financial record-keeping purposes, after which they are permanently deleted.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to certain uses of your data

To exercise any of these rights, contact us at hello@thriftvault.app.

6. Security

We take security seriously. ThriftVault uses industry-standard measures including:

• Encrypted data transmission (HTTPS/TLS)
• Hashed PIN storage - we never store your PIN in plain text
• JWT-based authentication with expiring tokens
• Regular security monitoring via Sentry
• Secure cloud infrastructure hosted on Railway and Supabase

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

ThriftVault is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. International Data Transfers

ThriftVault operates internationally and your data may be stored and processed in countries outside your home country. We ensure appropriate safeguards are in place for any international transfers in accordance with applicable data protection laws.

9. Third-Party Links

The app may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.