Privacy Policy

This Privacy Policy explains what JamaSoft Concept LTD ("we", "us", "TrackAm") collects when you use the TrackAm mobile app or this website, why we collect it, who can see it, and the rights you have over it. We've tried to write it in plain English. If anything is unclear, email privacy@gettrackam.com.

1. The short version

• We do not connect to your bank, see your card, or pull your transactions through any bank-aggregation service.
• You log transactions manually inside TrackAm. We hold those records to give you insights.
• We never sell your data. There is no advertising partner. You are not the product.
• Data lives in EU data centres. Your phone holds an encrypted copy you control.
• You can export or permanently delete everything from inside the app at any time.

2. Who's processing your data

The data controller is JamaSoft Concept LTD, registered at 33 Democracy Crescent, Abuja, FCT, Nigeria. For data inquiries, write to privacy@gettrackam.com.

3. What we collect

3.1 Account data

• Email address, first name, last name (so we can address you).
• An optional profile photo if you upload one.
• Hashed password (we never see the plaintext) or your Google / Apple sign-in identifier.

3.2 Financial behaviour data (what you log)

• Transactions you enter manually: amount, recipient name (a label you choose), purpose, category, importance.
• Buckets you create, goals you set, debts you record, family members you support.
• Receipt photos you choose to scan — stored encrypted, deletable in one tap.
• Daily check-in entries and reconciliation history.

What we do not collect: bank account numbers, sort codes, IBANs, card numbers, CVVs, or any direct credentials. None of these fields exist in TrackAm.

3.3 Stingy AI conversations

Your chat history with Stingy AI is stored so the assistant can reference past context. You can delete individual conversations from inside the app. Stingy AI responses are generated using AI language-model providers we partner with. Your messages are processed in the moment to produce a reply, are not used to train those providers' public models, and are not retained by them beyond the lifetime of the request.

3.4 Device + usage data

• Device type, OS version, app version, and a randomly generated device identifier (for push notifications).
• Crash reports — anonymised stack traces, no transaction content.
• Approximate locale (for currency defaults). We do not track GPS.

4. Why we collect it

• To operate the service — your transactions belong to your account and only render when you sign in.
• To give you insights — calculate balances, behaviour scores, forecasts and Stingy AI narratives from data you yourself entered.
• To deliver notifications — daily check-in reminders, subscription renewals, programs.
• To improve safety — detect repeated failed logins, suspicious refresh-token reuse (token rotation).
• To respond to support requests — we look at your account only with your explicit request.

5. Where it lives

Your data is held on secure cloud infrastructure operating in European data centres, with strong encryption in transit and at rest. We rely on a small set of established service providers strictly to deliver the product — for example, an AI provider that powers Stingy AI's responses, an email service for transactional messages such as password resets, and a notification service for push alerts. These providers act on our instructions only and do not receive your data for any other purpose.

Your phone also keeps a local copy of recently-viewed data, secured by:

• Operating-system protected storage for authentication tokens.
• Optional in-app PIN lock with Face ID / fingerprint quick-unlock.
• Auto-lock after a configurable idle period.

6. Who can see it

• You. Full read of your own data, any time.
• Our small operations team — only when you contact support, and only with your explicit consent. We log every internal access.
• Sub-processors listed in §5 above, strictly to deliver the service.
• Nobody else. We don't sell data. There's no advertising network integration. No third-party SDKs that scrape your transactions.

7. Your rights (GDPR + similar laws)

Regardless of jurisdiction, you have these rights with TrackAm:

• Access — see everything we hold about you (one-tap export inside the app).
• Correction — edit any field inside the app, or email us.
• Deletion — permanently delete your entire account and all data from inside the app, or via our data deletion page. Deletion is immediate.
• Portability — the export is a single JSON file in a clean schema.
• Objection / restriction — email privacy@gettrackam.com and we'll comply within 30 days.
• Withdraw consent — uninstall the app and request deletion. We honour requests from the registered account email.

8. Retention

While your account is active, we retain your data so the app works. When you delete your account, every record tied to you is permanently removed from live storage within minutes. Encrypted backups age out within 30 days of the deletion. Receipt images are removed from secure storage immediately.

Anonymised aggregated metrics (for example, "total active users last week") may be retained indefinitely — these contain no personal data.

9. Children

TrackAm is not directed at children under 13 (or under 16 where local law sets a higher age). We don't knowingly collect data from anyone in that age group. If you believe a child has created an account, email privacy@gettrackam.com and we'll delete it.

10. International transfers

Data is processed in the EU. Some service providers we rely on for AI inference may process individual requests in other regions. Where this occurs, we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses to safeguard the transfer.

11. Cookies on this website

Our marketing site uses only essential cookies needed for the page to function. No analytics, advertising, or tracking cookies are set. Full detail on the cookie policy page.

12. Changes

If we materially change this policy, we'll notify you inside the app and via email. The "Last updated" date at the top of this page is the source of truth.

13. Contact

Data Protection Inquiries — privacy@gettrackam.com
Postal — JamaSoft Concept LTD, 33 Democracy Crescent, Abuja, FCT, Nigeria

You also have the right to lodge a complaint with the supervisory authority in your country.