Your information, in plain terms

1. What this policy covers

This policy explains how ABC of Money handles personal information when you create an account, use the app, visit this website or contact support.

It applies to the mobile application, this website and every service operated under the ABC of Money name. It does not cover third-party services you reach through links we provide, such as an app store listing or a payment provider, because those services set their own terms.

2. Information we collect

We collect only what the product needs to work. You decide how much financial detail to enter.

• Account details - your name, e-mail address, phone number and, if you upload one, a profile image.
• Credentials - your password is stored as a hashed value and never in readable form. One-time verification codes are hashed and expire after ten minutes.
• Financial information you choose to enter - income sources, budgets, categories, expenses, savings goals, contributions and debts including balances, rates and payments.
• Profile preferences - currency, language, time zone, notification switches and the biometric-login preference, which is a flag on our side rather than a copy of your fingerprint or face data.
• Quiz answers - your money personality responses and the archetype result derived from them.
• Technical records - device name used when you sign in, and timestamps for security events such as password changes and logouts.
• Support correspondence - messages you send through the contact form, help chat or e-mail, including any attachments you provide.

3. How we use it

Every use below has a clear purpose. We do not sell personal information and we do not rent or share it with advertisers.

• To provide the service - calculating safe-to-spend, producing your payoff date, tracking goal progress and rendering your dashboard.
• To secure your account - sending verification codes, detecting unexpected sign-ins and letting you revoke sessions on other devices.
• To send the notifications you have enabled - budget alerts, saving reminders, goal updates, community messages and family activity. Each is individually switchable.
• To answer support requests - creating a ticket from your message and replying to it.
• To improve the product - understanding which features are used and where people get stuck, in aggregate rather than per person.
• To meet legal obligations - responding to lawful requests and keeping the records required to operate the service.

4. Legal basis for processing

Where data protection law requires a basis, we rely on the performance of our contract with you for account and financial features, your explicit consent for optional notifications and marketing, our legitimate interest in keeping the service secure and improving it, and compliance with legal obligations where they apply.

Because the service operates from Nigeria with users in several regions, we apply the same standards everywhere rather than maintaining different practices per country.

5. When information is shared

Family workspace is the main place your information becomes visible to someone else. When you accept an invitation, the other members and the workspace owner can see the shared budgets, goals and activity within that workspace, at the access level you have been given. You can leave a workspace at any time.

We also share limited information with service providers who host our database, deliver e-mail, or process app store payments. Those providers act on our instructions, are contractually restricted to that purpose, and cannot use your data for their own.

We may disclose information where required by law, to protect the rights and safety of our users, or as part of a business transfer. We will notify you before your information becomes subject to a different privacy policy.

6. Storage and security

Data is stored in encrypted databases with encrypted transport. Access is restricted to the small number of people who need it to operate or support the service, and that access is logged.

Additional controls that apply to everyone:

• Passwords hashed with a cost factor of 12 rounds.
• One-time codes hashed, single use, with a ten-minute expiry, five-attempt lockout and a sixty-second resend throttle.
• Administrative secrets, such as service credentials, held in an encrypted database rather than in configuration files.
• Session revocation available to you from settings, including signing out of all devices.
• Soft deletion followed by a scheduled purge, so a deleted account stops being usable immediately and is removed on the retention schedule.

7. How long we keep it

Account information is kept for as long as your account is open. When you delete your account, access is revoked immediately, the record is marked deleted and the underlying data is purged by the scheduled cleanup job rather than lingering indefinitely.

Support tickets and security logs are retained for a limited period after closure so we can investigate a recurring problem or a disputed event, then removed.

Financial entries you have deleted are removed from your views immediately and purged from backups on the normal backup rotation.

8. Cookies and local storage

This website uses only what is needed to remember your light or dark mode choice, stored in your browser and never sent to us. There is no advertising or cross-site tracking cookie on this site.

The application stores your session token in the device keychain or keystore rather than in ordinary browser storage, and uses local storage only for non-sensitive flags such as whether you have seen the onboarding slides.

9. Your rights and choices

You have control over your information. Depending on where you live, the following rights may apply, and we honour them for everyone rather than by region.

• Access - request a copy of the personal information we hold about you.
• Correction - update your name, contact details or profile through settings.
• Deletion - delete your account from the profile screen, which revokes access immediately.
• Portability - request your data in a commonly used machine-readable format.
• Restriction and objection - ask us to limit or stop certain processing.
• Withdraw consent - turn off any optional notification at any time; this does not affect processing already carried out.
• Complaint - raise a concern with your local data protection authority.

10. Children

ABC of Money is built for adults managing their own finances. The service is not directed at children, and we do not knowingly collect information from anyone below the age at which they can consent independently. If you believe a child has provided information, contact us and we will remove it.

11. International transfers

Where information is processed outside the country it was collected in, we use appropriate safeguards such as contractual protections, and apply the same security standards described here regardless of location.

12. Changes to this policy

When we change this policy in a way that affects your rights, we will update the date at the top of this page and, for material changes, notify you in the app or by e-mail before the change takes effect.

13. Contact

Questions, requests or concerns about this policy can be sent through the support form on this site or to support@abcofmoney.com. We aim to respond within one working day.