Privacy Policy

1. Introduction

Accurify Ltd. (“Company”, “we”, “us”) operates the Thrifty platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using Thrifty, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Information you provide:

• Account information — full name, email address, phone number, and password when you register.
• Profile information — bank account details (bank name, account number, account holder name) provided for receiving payouts.
• Group information — group names, contribution amounts, member details, and payout schedules you create or participate in.
• Communications — messages sent through the platform's messaging features.

Information collected automatically:

• Usage data — pages visited, actions taken, timestamps, and feature usage patterns.
• Device information — browser type, operating system, device type, and screen resolution.
• IP address — collected for security, rate limiting, and fraud prevention purposes.

Information from third parties:

• Payment data — when you use Paystack for contributions, we receive transaction status, references, and payment confirmation. We do not store your card details — Paystack handles all sensitive payment data directly.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Thrifty platform.
• Process and track contributions and payouts within your savings groups.
• Send transactional notifications (payment reminders, group updates, payout confirmations).
• Calculate and display credibility scores based on payment history.
• Prevent fraud, abuse, and unauthorized access.
• Respond to support requests and communications.
• Comply with legal obligations.

4. Information Sharing

We do not sell your personal information. We share information only in these circumstances:

• Within your group — your name, contribution status, and credibility score are visible to your group manager. Bank details are only visible to the group manager for payout purposes.
• Payment processors — we share necessary transaction data with Paystack to process payments. Paystack's use of your data is governed by their own privacy policy.
• Service providers — we may share data with trusted providers who help us operate the Service (e.g., email delivery, hosting). These providers are contractually bound to protect your data.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of the Company or others.

5. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) for all communications.
• Hashed and salted password storage — we never store passwords in plain text.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Webhook signature verification for payment processor communications.

No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

6. Data Retention

• Active accounts — we retain your data for as long as your account is active.
• Deleted accounts — upon account deletion, we remove your personal data within 30 days, except where retention is required for legal or compliance purposes.
• Transaction records — contribution and payment records may be retained for up to 6 years for financial record-keeping and dispute resolution.

7. Your Rights

You have the right to:

• Access your personal data — request a copy of the information we hold about you.
• Correct inaccurate data — update your profile information at any time through the app.
• Delete your account — request deletion of your account and associated data.
• Withdraw consent — opt out of non-essential communications at any time.
• Data portability — request your data in a machine-readable format.

To exercise any of these rights, contact us at support@accurify.co.

8. Cookies & Tracking

Thrifty uses the following cookies:

• Authentication cookies — essential cookies to keep you signed in (access token and refresh token).
• Preference cookies — to remember your settings and preferences.

We do not use third-party advertising cookies or tracking pixels. We do not sell or share cookie data with advertisers.

9. Children's Privacy

Thrifty is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided personal data, we will delete it promptly.

10. International Data Transfers

Your data may be processed on servers located outside of Nigeria (e.g., for hosting and email delivery). Where we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. The “Last updated” date at the top reflects the most recent revision.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: support@accurify.co
• Company: Accurify Ltd., Lagos, Nigeria