Privacy Policy

Ailopin Technologies Limited ("Ailopin", "we", "our", "us") is the data controller for personal data processed under this policy. We process personal data in line with Nigeria data protection laws and regulatory guidance, including the Nigeria Data Protection Act (NDPA) 2023 and related implementation guidance by the Nigeria Data Protection Commission (NDPC), as applicable.

This document is our public data privacy policy and may be used for compliance due-diligence requests that require a data privacy policy.

This is an umbrella policy. It covers all Ailopin products and services, while product-specific notices below provide additional details where needed.

Where a separate product-specific privacy policy exists, that product-specific policy governs that product or service.

• KudiTrackr (personal finance management web/app)
• Developer tooling/software
• Game outsourcing studio services (B2B creative/production services)
• Other current and future products/services operated by Ailopin

• Personal Data: information relating to an identified or identifiable individual.
• Processing: any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).
• Controller: an entity that determines the purposes and means of processing personal data.
• Processor: an entity that processes personal data on behalf of a controller.
• Data Subject: the person to whom the personal data relates.

Depending on the product or service, we may collect:

• Identity and contact data (name, email, phone number)
• Account and profile data (login credentials, settings, preferences)
• Usage and technical data (IP address, browser/device data, logs, diagnostics)
• Support and communication data (messages, support tickets)
• Business and transaction records (contracts, invoices, service history)
• Verification outcomes and reference IDs where identity checks are required

Data collected varies by product. Some products collect more or less information than others.

• Directly from you: when you register, subscribe, complete forms, request support, or sign contracts.
• Automatically: through cookies, app telemetry, server logs, and analytics tools.
• Via integrations: where you authorize third-party integrations (for example, Mono Connect for financial data access in KudiTrackr).
• From service providers: processors supporting verification, hosting, communication, analytics, and infrastructure (for example, VerifyMe for identity verification in KudiTrackr).

We process personal data based on one or more of the following legal bases:

• Consent
• Performance of a contract
• Legitimate interests (such as service improvement, security, and fraud prevention)
• Compliance with legal obligations

Where processing depends on consent, we request consent through clear product flows before collecting or accessing data. In KudiTrackr, users must provide valid informed consent before any account or transaction data is accessed through Mono Connect.

Users can withdraw consent by disconnecting integrations (for example, unlinking a bank account in KudiTrackr) or by contacting us. Withdrawal does not affect processing already carried out before withdrawal but will affect future processing.

• To provide, maintain, and improve our products/services
• To authenticate users and provide customer support
• To monitor reliability, detect abuse, and protect platform security
• To comply with legal, regulatory, and contractual obligations
• To communicate service updates and, where required, marketing with consent

We may share personal data with:

• Trusted processors/service providers supporting our operations
• Product-specific processors where you enable integrations (for example, Mono Connect and VerifyMe in KudiTrackr)
• Authorities or counterparties where required by law or legal process
• Parties involved in a merger, acquisition, financing, or asset transfer

We do not sell personal data.

We retain personal data only as long as necessary for the purposes described in this policy, including legal, accounting, audit, dispute, and security requirements. Retention periods vary by product, data category, and legal obligations.

For KudiTrackr, linked account and transaction data is retained while your account is active or until you request deletion, subject to legal retention obligations. Verified deletion requests are typically completed within 30 days. Integration disconnection is typically immediate in-app and may take up to 72 hours to fully reflect across connected providers.

We apply reasonable technical and organizational measures to protect personal data, such as role-based access controls, monitoring, and encryption. Personal data we collect is encrypted in transit and at rest. No system is fully immune from risk, so we cannot guarantee absolute security.

Subject to applicable law, you may have rights to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent where processing depends on consent
• Object to certain processing
• Request data portability where applicable
• Lodge a complaint with the relevant data protection regulator (including the NDPC, where applicable)

To exercise your rights, contact us using the details in the Contact section.

We may use cloud or infrastructure providers that process data outside Nigeria. When this happens, we use safeguards appropriate under applicable law, including contractual protections and security controls.

Our products/services are generally not intended for individuals under 18 where applicable. We do not knowingly collect personal data from children in violation of applicable law.

We may use cookies and similar technologies for:

• Essential platform functions (authentication, security, session management)
• Analytics and performance measurement
• Preference storage (such as language or interface settings)

You can manage cookies in your browser settings. Some features may not function properly if cookies are disabled.

Our websites/apps may contain links to third-party sites and services. Their privacy practices are independent from ours, so we encourage you to review their policies before sharing personal data.

We may update this policy from time to time. Updates will be reflected by revising the "Last Updated" date above. Where appropriate, we will provide additional notice through website or in-product channels.

Some Ailopin products and services may publish additional product-specific privacy policies, notices, or contractual privacy terms.

Where a product-specific privacy policy or contract term applies, it should be read together with this umbrella policy. If there is any conflict, the product-specific or contractual terms for that product/service will apply.

What KudiTrackr Does

KudiTrackr is a personal finance management product for budgeting, analytics, and expense tracking. KudiTrackr uses financial data for read-only insights.

Financial Data Access (Accounts and Transactions)

KudiTrackr accesses account and transaction data only. KudiTrackr does not initiate payments, process transfers, hold funds, or debit user accounts.

Mono Connect (Read-Only Access)

KudiTrackr uses Mono Connect for account and transaction data access. Users must provide valid informed consent before any data access. KudiTrackr uses Mono strictly for read-only access to account and transaction data. We do not collect bank login credentials ourselves.

VerifyMe Identity Verification

Where identity verification is required, verification is performed by VerifyMe. We do not store BVN. We store only verification outcome/status, reference IDs, and optional last-4 digits where operationally necessary.

Sync Frequency

To optimize infrastructure and integration costs, transaction syncing may occur periodically (for example, monthly), rather than continuously in real time.

How to Disconnect Your Bank Account

1. Open KudiTrackr and go to connected accounts or settings.
2. Select the bank account you want to unlink.
3. Choose disconnect or unlink and confirm.
4. If you need assistance, contact us at support@kuditrackr.com.

Expected timeline: disconnection is usually immediate in-app, with provider-side propagation up to 72 hours.

How to Delete Your KudiTrackr Data

1. Use any in-app account deletion function where available.
2. Or submit a deletion request using your registered email address to support@kuditrackr.com.
3. We may verify identity before final deletion.

Expected timeline: we target completion of verified deletion requests within 30 days, except where legal retention requirements apply.

Ailopin developer tooling/software may process limited data for licensing, updates, support, and reliability, including account email, license identifiers, optional telemetry, and crash logs where enabled.

We aim to avoid unnecessary personal data collection and process only what is reasonably needed to deliver and support the software.

For game outsourcing services, we may process client business contacts, contracts, statements of work, invoices, project communications, delivery files, and approved portfolio materials.

We also process NDA-governed information and may process applicant data where recruitment is involved. Details may vary by contract.

• Company: Ailopin Technologies Limited
• RC Number: 9270360
• Email: hello@ailopin.xyz