Privacy Policy
1. Who controls your data
MyNetWorths is operated by Eworldlab International, Ogbomoso, Oyo State, Nigeria, as data controller under the Nigeria Data Protection Act 2023 (NDPA). Contact our Data Protection Officer at privacy@mynetworths.com.
2. What we collect
- Account data: your name, email address, optional phone number and a one-way hash of your password (we never see or store the password itself).
- Financial records you enter: names, categories, currencies, values and notes for assets and liabilities, and your monthly snapshots.
- Next of kin (optional): name, relationship, email and phone of a person you choose to record. Only add someone who is happy for you to share these details.
- Consent records: the version of the Terms and this Policy you accepted, with date, time and IP address.
- Security data: sign-in times, IP addresses, browser type and an audit log of account activity, kept to protect your account and investigate misuse.
We do not collect bank logins, card numbers, BVN or NIN in this version.
3. Why we use it (lawful basis)
- To provide the Service you signed up for (contract): storing your records, calculating totals and snapshots.
- To keep your account secure (legitimate interest and legal obligation): verification codes, lockout protection and audit logging.
- To contact you about your account, security and important changes (contract and legitimate interest).
- Your consent for anything else we may offer later; you can withdraw it at any time.
4. What we never do
- We never sell, rent or trade your personal or financial data.
- We never show advertising or share your data with advertisers.
- We never move money or give your data to lenders, investors or marketers.
5. Who we share it with
Only service providers we need to run the Service — our hosting provider and email delivery provider — under contracts that require them to protect your data and use it only on our instructions. We may disclose information where the law requires it, for example a valid court order. If your data is stored outside Nigeria, we use the safeguards required by the NDPA.
6. How we protect it
- Encrypted connections (HTTPS) between your device and our servers.
- Argon2id password hashing; bcrypt-hashed, single-use verification codes that expire in 10 minutes.
- Automatic account lockout after repeated wrong passwords, and protection against cross-site attacks.
- Restricted staff access and an audit trail of account activity.
No system is perfectly secure. If a breach affecting your data occurs, we will notify you and the Nigeria Data Protection Commission as the law requires.
7. How long we keep it
We keep your data while your account is open. When you delete your account in Settings, your account, records, snapshots, next of kin and audit history are permanently erased immediately. We keep only a minimal, anonymised note that a deletion took place (with no name or email) for security purposes.
8. Your rights
Under the NDPA you can ask to access, correct, export or erase your data, object to or restrict processing, and withdraw consent. Most of this you can do yourself in the app; for anything else, email privacy@mynetworths.com. We will respond within the time the law requires. You may also complain to the Nigeria Data Protection Commission.
9. Cookies
We use one strictly necessary session cookie to keep you signed in and protect forms. We do not use advertising or tracking cookies.
10. Children
The Service is not for anyone under 18, and we do not knowingly collect their data.
11. Changes
We will update the version and date above when this Policy changes, and tell you about material changes before they take effect.