We believe your financial habits are deeply personal. This Privacy Policy details the exact data we collect,
how transactions are categorized, our AI receipt processing principles, and how you remain in complete control.
Effective Date: October 2026
•
Governing Standard: Nigeria Data Protection Act (NDPA)
•
Data Controller: SpendMana Technology Group
1. Core Privacy Principles
SpendMana is built for everyday financial accountability. We adhere strictly to privacy-by-design
principles:
The 4 Pillars Rule: We only track transactions across your four life pillars —
Income, Expense, Savings, and Investment. We do not connect to your bank credentials or demand open
banking screen scraping. You log via plain text on Telegram, receipt photos, or the web dashboard.
2. Information We Collect
When you use SpendMana across our Web App or Telegram Bot, we collect the following limited categories of
data:
A. Account & Profile Identifiers
When registering or signing in: your full name, email address, password hash (encrypted via Argon2/Bcrypt),
and optional 2FA / biometrics authentication credentials.
B. Telegram Bot Connection Data
When linking your Telegram account: your unique Telegram user ID, handle/username, and chat thread identifier
so the bot can log entries and send notifications to you.
C. Financial Transaction Logs
Transaction entries you create (amounts in Naira or foreign currencies, description/merchant notes, custom
tags, and entry timestamps).
D. Uploaded Receipt Documents & Screenshots
Receipt photos or PDF invoices you choose to upload for automated transaction extraction and expense filing.
3. How We Use Your Data
Your information is used strictly to provide you with financial clarity and accountability:
Categorizing and aggregating your entries into Income, Expense, Savings, and Investments.
Calculating your safe daily spend, survival runway date, and Savings Pockets progress.
Powering your smart budget recommendations and spending archetype persona.
Sending Telegram bot balance notifications, streak praises, and weekly digests.
Preventing fraudulent logins and enforcing progressive PIN / rate-limiting lockouts.
4. AI & Receipt Vision Processing
SpendMana leverages Google Gemini AI models to parse informal Nigerian slang (e.g., "bought shawarma
of 5k") and extract amounts from bank receipts (Opay, Moniepoint, GTBank, Kuda, Zenith).
Consent-First AI
Your receipts and queries are sent to AI processing only when you enable AI features. We never use your raw
financial transactions to train public foundation models.
Deterministic Fallback
Wherever possible, our engine relies on deterministic regex parsers locally before ever invoking cloud AI,
minimizing external API calls and keeping latency under 100ms.
5. Data Sharing & Anonymization
We Never Sell Your Identity: We do not sell, rent, or trade your personal contact information,
email, or individual transaction histories to brokers, advertisers, or third parties.
Any affiliate offers (such as high-yield savings opportunities, fintech accounts, or investment options) are
matched exclusively against anonymized, aggregated cohort trends (e.g. "Users saving over
20% of income"). Partner advertisers never receive your name, email, or individual transaction history.
6. Storage, Encryption & Security
Security is at the heart of our infrastructure:
Transport Security: All web traffic and bot webhooks require strict TLS/SSL encryption with
HSTS and automated security headers.
Password & PIN Protection: Passwords are encrypted using modern hashing algorithms. Admin
actions and sensitive exports require dedicated PIN or biometrics confirmation.
Brute-Force Lockouts: Progressive account locks protect against automated password guessing
and credential stuffing attacks.
Server Isolation: Database credentials and API keys are stored in environment vaults
inaccessible from web document roots.
7. Your Rights & Account Erasure
Under the Nigeria Data Protection Act (NDPA) and international privacy frameworks, you have sovereign rights
over your financial ledger:
📥 Right of Portability (Export)
You can download a clean PDF export of all your transactions and ledger breakdowns anytime directly from your
dashboard.
🗑️ Right of Erasure (Permanent Account Deletion)
You can permanently delete your SpendMana account from the Settings modal. Permanent deletion
immediately and irrevocably wipes all your transaction records, categories, Savings Pockets, linked Telegram
identifiers, and tokens from our database.
🔄 Right to Reset Learning Patterns
You can clear your AI personalization profile and learned categorization memory anytime with a single click in
your Budget preferences.
8. Contact & Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, reach out
directly to our Data Protection team:
