MoneyMap Privacy Policy

For information used to register an account, administer subscriptions, provide support, operate the platform and secure the Services, MONEYMAP DIGITAL SOLUTIONS LIMITED generally determines why and how that information is processed.

Businesses using MoneyMap may independently determine which employee, customer, patient, supplier or other records to enter into their business wallets. For that merchant-controlled information, the merchant may be the data controller and we may provide software and processing services on its instructions. The precise roles depend on the data and purposes involved.

If your personal information was entered by a pharmacy, retailer, employer or another MoneyMap merchant, you may need to contact that business first about the underlying record. We will assist with requests as required by applicable law.

Some existing merchant arrangements may have been entered into with HAG-AITEC ACADEMY LTD before MoneyMap Digital Solutions Limited was incorporated. The legal party and data roles under those arrangements are determined by the relevant agreement and any valid subsequent transfer, not by this privacy notice alone. Requests concerning a legacy arrangement will be directed to the responsible organisation as appropriate.

Depending on the features you use and information you provide, the Services may process:

• Account and identity details such as name, email address, phone number, account identifiers, profile information and authentication details managed through our authentication services.
• Personal finance records such as incomes, expenses, budgets, savings goals, debts, bills, uploaded records and financial categories.
• Business and inventory records such as business and branch details, product names, stock movements, suppliers, purchases, pricing, sales, invoices, receipts, payment methods, refunds and outstanding balances.
• Customer, patient, staff and supplier information entered by a merchant, such as names, contact details, account/reference numbers, transaction history, shifts, employment details and payroll-related entries where enabled.
• Healthcare-related information only where a merchant chooses to use applicable pharmacy or healthcare workflows or enters that information into the Services. Such information may be sensitive and should be restricted to authorised personnel.
• Payment-related information and identifiers such as transaction references, payment status, receiving account details and reconciliation records from integrations when enabled. Card payments are performed by authorised payment providers; MoneyMap is not a bank or card acquirer.
• Documents, images, receipts, KYC or onboarding information, including camera uploads, barcode scans and other attachments where a user chooses to provide them.
• Technical and usage data such as device/browser type, IP address, diagnostic events, login activity, application logs, security events, cookies and local offline data needed to operate the Services.
• Communications you choose to send through support, email, messaging channels, SMS/receipt import or voice/AI features where enabled and permission has been granted.

Some features are optional or restricted by your subscription, device, merchant setup or role. We do not suggest that every category above is collected about every user.

• Provide requested Services, create and maintain accounts, operate subscriptions, record transactions and provide business reports.
• Fulfil contractual obligations to users and merchants and administer payments for MoneyMap products where applicable.
• Secure accounts, detect misuse, investigate incidents, enforce applicable access permissions and maintain operational continuity.
• Provide customer support, respond to authorised requests and deliver necessary service notices.
• Maintain required financial, tax, dispute-resolution or other records where the law requires it.
• Improve the reliability and usability of the Services through appropriately limited diagnostics and product analysis.
• Provide optional AI-assisted analysis, messaging, notifications or communications when you activate or request those features.

Depending on the activity, our lawful basis may be performance of a contract, compliance with legal obligations, legitimate interests balanced against people's rights, consent where legally required, or another basis permitted by law. You may withdraw consent for consent-based optional activities, although this does not necessarily affect processing already undertaken lawfully.

Business-wallet owners and authorised administrators can configure staff roles, branches and access rights. Users must only access information for which their organisation has given them authority. Business users are responsible for giving appropriate notices to their own customers and staff, maintaining accurate records and applying suitable permissions.

We use platform access controls and security measures appropriate to the Services, but no internet service or electronic storage can be guaranteed completely secure. Please protect your sign-in credentials and promptly report suspected misuse.

Where necessary for the relevant feature, information may be shared with:

• Infrastructure, authentication, hosting, storage, support and other technology providers necessary to operate the Services, including the Base44 platform used to power parts of MoneyMap.
• Licensed payment and financial-service providers that a merchant or user chooses or enables for authorised payment collection, verification and settlement (including existing integrations such as Flutterwave where applicable).
• Communication delivery providers for service messages, verification, email, SMS or WhatsApp-related features where enabled.
• AI-processing providers when users deliberately use AI-supported tools, limited to the information needed to fulfil the requested function.
• Professional advisers, authorities or other recipients where lawfully required or necessary to protect rights, investigate fraud or comply with legal obligations.

MoneyMap does not sell personal information to advertisers. Sharing for future integrations occurs only when the integration is actually enabled and the relevant lawful requirements are met. Payment providers may process information under their own privacy notices. We do not intentionally request or retain full card PINs or card verification values as part of MoneyMap's business-management records.

Where supported, MoneyMap can store selected application data and transactions temporarily on your device using browser or app storage, including offline queues. Changes may be synchronised to the account when connectivity resumes. Shared devices and unlocked devices can expose locally stored information, so users should secure their devices and sign out where appropriate.

Some features allow users to analyse business records, ask questions of an AI assistant, scan receipts/barcodes, upload images, use voice tools or import authorised transaction data. Such features may require user permissions and may involve service providers processing selected content to respond to the user's request.

Avoid including highly sensitive information in optional AI prompts unless necessary and lawfully authorised. Merchants handling patient or employee information should apply strict role-based access and assess whether a proposed use of sensitive information is appropriate.

Cookies and similar technologies may be used for authentication, security, preferences and essential functionality. Optional cookie preferences are described in our Cookie Policy and can be changed through the website's Cookie settings control. Device permissions such as camera, photos, microphone, location or notifications are requested only where the feature and device require them; availability and permission controls depend on your device and platform.

We may send necessary account, operational and security notices. Promotional messages, where offered, will be handled subject to applicable consent, preference and opt-out rules.

Some infrastructure, cloud, communication or AI service providers may operate outside Nigeria, including in the United States, depending on the enabled services and service-provider configurations. Where personal information is transferred internationally, we assess the applicable legal requirements and seek appropriate safeguards required by Nigerian data-protection law. Contact us for information about the safeguards relevant to a specific request.

Our retention decisions are based on the relevant purpose, lawful merchant instructions and applicable legal requirements. We retain information only for as long as reasonably necessary for the relevant purposes, such as maintaining active accounts, delivering contracted Services, protecting users, resolving disputes, operating backups and meeting tax, legal or regulatory retention obligations. Retention periods differ by category and legal requirements. Merchant-controlled records may also be subject to the merchant's lawful retention instructions and obligations.

Closing an account does not necessarily require immediate deletion of records that must be retained by law, relate to an unresolved dispute or remain temporarily in secure backups. Those records should no longer be used for unrelated purposes.

Depending on the applicable law and circumstances, you may request information about our processing, access to your personal information, correction, deletion, restriction, portability, withdrawal of consent, or object to certain processing. You may also have rights regarding decisions made solely by automated processing.

Submit requests using the contact below. We may need to verify your identity and may have to coordinate with the business that controls a merchant-entered record. Legal exemptions or retention requirements can affect the outcome.

You may also raise data-protection concerns with the Nigeria Data Protection Commission via ndpc.gov.ng .

Personal MoneyMap accounts are intended for adults. Business records processed through a merchant's account may nonetheless concern minors, including where a healthcare business lawfully records information relevant to its services. Merchants must apply appropriate legal safeguards and authorisation when entering children's or other sensitive information.

We may update this Policy as the Services, technologies or legal requirements change. Material changes will be communicated by reasonable means where required. The current effective date appears at the top of this page. Please review it periodically.

Data protection enquiries for MoneyMap
MONEYMAP DIGITAL SOLUTIONS LIMITED (RC 9949685)
33A Abakaliki Road, GRA, Enugu, Enugu State, Nigeria
Privacy contact: moneymapdigitalsolutions@gmail.com
Support: support@moneymaptracker.com
WhatsApp support (messages only): +234 814 522 4536
Website: www.moneymaptracker.com

For requests to access, correct, delete or otherwise exercise your privacy rights, contact the privacy address above. We may require identity verification and coordinate requests concerning merchant-controlled records with the relevant merchant. The designated data protection contact coordinates responses; an NDPC filing alone is not a claim of external privacy certification or of completion of a formal independent audit.