Privacy Policy

KudiTrail (“we”, “us”, “our”) is a personal finance tool that helps you understand where your money goes. We are based in Nigeria and operate at kuditrail.com.

Questions about this policy? Email us at hello@kuditrail.com.

• Account data: your name and email address when you create an account.
• Transaction data: amounts, dates, descriptions, and other transaction details that you choose to save by pasting alerts, entering a transaction, or importing a statement.
• Technical data: service providers may process basic connection and device information when you use the site. KudiTrail does not currently run a product analytics or error-tracking service.

We never collect: your bank login credentials, PIN, password, BVN, or NIN. We do not connect to your bank. You paste or upload text — that is all.

• To provide and improve the KudiTrail service.
• To parse your transaction alerts and display your money trail.
• To send you essential service emails (password resets, security notices).
• To detect and prevent fraud or abuse.

We do not sell your data. We do not use your financial data to train AI models. We do not share your personal data with advertisers.

Your saved account and transaction records are stored in Supabase. CSV files are parsed in your browser. PDF and Excel files are sent to KudiTrail's server for parsing and are not saved as uploaded files. Parsed transactions are saved only when you confirm the import. We do not store the original transaction text for new imports.

We apply industry-standard security measures including row-level security so only you can access your own transactions.

You have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account and saved records from Settings. The app submits the deletion to Supabase; provider backups may be retained according to Supabase's backup policies.
• Access or export your data — the app does not yet provide a full account export. Email us to request access or a copy.
• Object to processing — email us and we will stop using your data for any purpose beyond core service delivery.

These rights apply to all users. If you are in the European Economic Area (EEA) or the UK, you also have rights under GDPR. If you are in Nigeria, your rights are protected under the Nigeria Data Protection Regulation (NDPR).

KudiTrail uses:

• Session cookies (Supabase authentication): necessary to keep you logged in. Without these the service cannot function.
• Local storage: to remember your UI preferences (e.g. selected month). No personal data is stored here.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

We use the following third-party services:

• Supabase (database and authentication) — their privacy policy
• Vercel (hosting) — their privacy policy
• ExchangeRate-API supplies exchange-rate data for the optional currency display. It receives the rate request and normal connection metadata, not your transaction records.

Each of these providers has their own privacy practices. We share only the minimum data necessary for the service to function.

We retain saved account and transaction records while your account is active. When you request account deletion, KudiTrail asks Supabase to delete the Auth user and its related records. Copies in provider backups may remain for the period set by that provider.

KudiTrail is intended for users who are 18 years of age or older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us at hello@kuditrail.com and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or by a notice on the app. Continued use after changes means you accept the updated policy.

For any privacy-related questions or requests:

Email: hello@kuditrail.com
We aim to respond within 5 business days.