Privacy policy
Last updated 27 October 2026
Your financial information is personal, and we treat it that way. This policy explains what we collect, why we need it, who helps us run Jaytrail, how long we keep things, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA).
The short version
- We collect only what Jaytrail needs to work: your account details and the money information you give us.
- We never sell your data, never use it for advertising, and never ask for your bank password or PIN.
- Our team can see your account details, never your balances, transactions or statements.
- You can download everything or delete your account at any time.
1. Who we are
Jaytrail is the data controller for the personal data described here. You can reach us, including about anything in this policy, at support@jaytrail.com.
2. What we collect
What you give us:
- Account details: your name, email address, country and password (stored only as a secure hash).
- Money information: statements you upload, and the accounts, transactions, categories, funds, budgets and notes you create or that Jaytrail reads from your statements.
- Messages: what you send Jaytrail in chat, and the chat ID that links it to your account.
- Feedback: what you write to us and, if you add one, a screenshot of the screen (amounts hidden unless you choose to show them).
- Payments: your plan, payments and receipts. Card details are taken by Paystack; we keep only the card type, last four digits, expiry date and a token for renewals.
What’s created when you use Jaytrail:
- Sign-in information: session records with your IP address and browser, to keep your account secure.
- Usage and error information: which screens fail and how features are used, tied to an account ID and role, never your name, email or amounts.
- Where you came from: the website or link that brought you to sign up, if there was one.
We don’t collect your bank login, card PIN, BVN or location, and Jaytrail never connects to your bank.
3. How we use it
- To run Jaytrail for you: reading statements, sorting transactions, totalling balances, budgets and reports, and answering in chat.
- To remember your choices, so sorting gets better for you over time.
- To keep your account and our service secure and to prevent fraud.
- To take payments for Plus and send receipts.
- To send emails you need (verification, password resets, receipts, plan changes) and, if you choose, a monthly summary.
- To answer your feedback and support questions.
- To fix problems and improve Jaytrail.
We don’t sell your data, share it for advertising, or use your financial information to build profiles for anyone else.
4. Our lawful bases
Under the NDPA we rely on:
- Contract: to provide the service you signed up for, including Plus.
- Consent: for optional things, such as connecting a chat or the monthly summary email. You can withdraw consent at any time in Settings; it doesn’t affect anything done before.
- Legal obligation: to keep payment and tax records and to respond to lawful requests.
- Legitimate interests: to keep Jaytrail secure and to understand and fix problems, in ways that don’t override your rights.
5. AI and automatic sorting
To read statements and suggest categories, Jaytrail sends the text of transactions to an AI provider. They process it only to give us an answer, under terms that don’t allow them to use it to train their models. The AI suggests; you stay in control. Anything Jaytrail isn’t sure about waits for you to check, and you can change any category.
7. What our team can see
Our team can see account-level information: your name, email, plan, payments, sign-up date and how much of your plan you’ve used. They can’t see your balances, transactions or statements. Every time a team member opens a customer’s page it’s recorded, and every change they make needs a reason and is logged.
8. Data outside Nigeria
Some of our providers store or process data outside Nigeria, for example in the European Union or the United States. When that happens we rely on the safeguards the NDPA allows, such as the destination’s adequate level of protection or contracts with appropriate protections, and we choose providers with strong security.
9. How long we keep it
- Your account and money information: for as long as you have an account.
- When you delete your account: your statements, transactions, funds, budgets, messages and feedback are deleted straight away. Copies in our backups are deleted as those backups expire.
- Payment records and receipts: as long as tax and accounting law requires, even after you delete your account.
- Sign-in and security records: for a limited time, to protect accounts.
10. How we protect it
Data travels over encrypted connections. Uploaded statements are encrypted when stored. Passwords are stored only as secure hashes. Access to our systems is limited to the people who need it, and admin access is logged. No system is perfectly secure, so if a breach ever affects your data, we’ll tell you and the Nigeria Data Protection Commission as the law requires.
11. Your rights
Under the NDPA you have the right to:
- get a copy of your data (Settings → Your data → Export my data gives you everything as a file);
- correct anything that’s wrong;
- have your data deleted (Settings → Your data → Delete my account);
- restrict or object to how we use it;
- take your data to another service;
- withdraw consent you’ve given;
- not be subject to decisions made only by automated means that have legal or similarly significant effects on you (Jaytrail’s sorting only suggests; you decide).
To use any of these, write to us at support@jaytrail.com. We’ll reply within 30 days. If you’re unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
13. Children
Jaytrail is for people aged 18 and over. We don’t knowingly collect data from children; if you think a child has signed up, tell us and we’ll delete the account.
14. Changes to this policy
If we change this policy in a way that matters, we’ll email you and show a notice in the app before the change takes effect. The date at the top shows when it last changed.