Privacy Policy
This policy explains what personal data Stockingfinity (a business being registered with the Corporate Affairs Commission of Nigeria; referred to as “Stockingfinity”, “we” or “us”) collects through the Stockingfinity web app, why, and your rights. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to you, other applicable data protection laws.
1. What we collect
- Account data: your email address, first name (optional) and password. Passwords are stored only in hashed form by our authentication provider.
- Learning and practice data: lessons completed, quiz answers and practice-trade activity using virtual money.
- Consent record: the date and time you accepted our Terms and Risk Disclaimer.
- Early-access list: the email you give if you ask to hear about the App Store / Google Play version.
- Usage and technical data: privacy-friendly, cookie-free analytics (pages visited, feature events, device type, country) and error reports when the app crashes.
We do not collect bank details, payment card data, government ID or BVN in this version, and we never hold or move real money.
2. Why we use it (lawful basis)
- To create and run your account and save your progress — performance of a contract.
- To fix bugs, keep the service secure and understand which features help people learn — legitimate interests.
- To email you about the mobile app launch if you joined the early list — consent, which you can withdraw at any time.
- To comply with the law — legal obligation.
3. Who we share it with
We do not sell your data. We share it only with service providers that run the app for us under contract: hosting (Vercel), authentication and database (Supabase), analytics (Plausible) and error monitoring (Sentry). Some of these providers store data outside Nigeria; where that happens we rely on the transfer safeguards permitted under the NDPA. We may disclose data if required by law or a lawful request from a Nigerian authority.
4. How long we keep it
We keep account and learning data while your account is open and delete it within 30 days of your deletion request. Early-access emails are deleted after the mobile launch or when you unsubscribe. Analytics are aggregated and do not identify you.
5. Your rights
You can download a copy of your data and delete your account yourself at any time in the app, under Profile → Account & privacy. You can also ask us to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email support@stockingfinity.com and we will respond within 30 days. You may also complain to the Nigeria Data Protection Commission (NDPC).
5a. If you live outside Nigeria
Stockingfinity is available worldwide. Your account data is stored with Supabase in London, United Kingdom, and the app is served by Netlify, whose servers may be in other countries. We rely on our providers' standard data-protection terms for these transfers.
UK, EU and EEA: you have rights under the UK GDPR and EU GDPR, including access, correction, deletion, portability, restriction and objection. You can complain to your local data protection authority, such as the ICO in the UK.
United States: depending on your state (for example California), you may have rights to know, correct and delete your personal information. We do not sell or share your personal information for targeted advertising.
Everywhere else: we honour the same rights for every user, whatever your country's law requires.
6. Security
Data is encrypted in transit (HTTPS) and access is restricted to people who need it. No system is perfectly secure; if a breach affects you, we will notify you and the NDPC as the law requires.
7. Children
Stockingfinity is for people aged 18 and over. We do not knowingly collect data from children.
8. Changes
We will post updates here and change the effective date. Material changes will be notified in the app.