1. Introduction

KeepAm ("we," "our," or "us") is operated by KeepAm Technologies Limited, a company registered in Nigeria. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax compliance application.

This policy applies to all information collected through our website, mobile application, and any related services, sales, marketing, or events.

By using KeepAm, you consent to the data practices described in this policy in accordance with the Nigeria Data Protection Act 2023 (NDPA).

2. Information We Collect

Account Information

• Phone number (required for account creation)
• Email address (optional)
• Full name (optional)
• State of residence

Tax and Financial Data

• Tax Identification Number (TIN): Your government-issued TIN for tax filing purposes
• Income entries you manually add
• Expense entries you manually add
• Tax calculation inputs (income, rent, deductions)
• Receipt images you upload
• Invoice details you create

Bank Account Data (Optional Feature)

If you choose to connect your bank account through our Open Banking integration, we access:

• Account holder name
• Account number (masked)
• Transaction history (read-only)
• Account balance

Invoice Recipient Data

When you create invoices, you provide information about your clients, including:

• Client name
• Email address
• Phone number
• Business address
• Payment reference details

This information is stored to generate and deliver invoices on your behalf. Your clients do not have accounts with KeepAm, and we only use their information for invoice delivery and payment tracking.

Usage Data

• Features you use and how often
• Time spent in the app
• Actions taken (calculations, entries added, invoices created)

Device Information

• Device type and operating system
• Browser type and version
• IP address (for security purposes)

3. How We Use Your Information

We use the information we collect to:

• Provide our service: Calculate taxes, track income and expenses, generate tax reports, create and send invoices
• Process payments: Handle subscription payments and invoice payment tracking
• Send reminders: Tax deadlines, filing notifications, and invoice payment reminders
• Improve the product: Understand usage patterns to build better features
• Customer support: Respond to your questions and resolve issues
• Security: Detect and prevent fraud or unauthorised access
• Legal compliance: Meet our regulatory obligations under Nigerian tax and data protection laws

4. Information Sharing

We may share your information only in these circumstances:

Service Providers

We work with trusted partners who help us operate our service. These providers only access data necessary to perform their functions:

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

Invoice Recipients

When you send an invoice, the recipient receives access to that specific invoice, including your business name and payment details you choose to include.

Legal Requirements

We may disclose information if required by law, court order, or government request, including requests from the Federal Inland Revenue Service (FIRS) or state tax authorities.

With Your Consent

If you grant your accountant or tax professional access to your KeepAm account, they can view your financial data. You control this access and can revoke it at any time.

Business Transfers

If KeepAm is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We take the security of your data seriously, particularly given the sensitive nature of tax and financial information.

Encryption

• All data is encrypted in transit using TLS 1.3
• All data is encrypted at rest using AES-256
• Tax Identification Numbers (TINs) are encrypted using AES-256-GCM encryption with separately stored keys. Even in the unlikely event of a database breach, your TIN cannot be read without the encryption key.

Infrastructure Security

• Our servers are hosted on enterprise-grade cloud infrastructure
• We use row-level security policies to ensure users can only access their own data
• All API endpoints require authentication

Access Controls

• Strict internal access controls limit who can access production systems
• All access is logged and audited
• Employees only access user data when necessary to provide support (with your permission)

Security Practices

• Regular security assessments and code reviews
• Secure development practices
• Incident response procedures

6. Your Rights

Under the Nigeria Data Protection Act 2023, you have the following rights:

• Right to Access: View all data we hold about you
• Right to Rectification: Correct any inaccurate information
• Right to Erasure: Request deletion of your account and data
• Right to Data Portability: Export your data in a machine-readable format
• Right to Restrict Processing: Limit how we process your data
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)

To exercise any of these rights, contact us at privacy@keepam.ng. We will respond within 30 days.

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

7. Data Retention

• Active accounts: We retain your data while your account is active
• Account deletion: Upon account deletion, most data is permanently removed within 30 days
• Tax records: Some records may be retained for up to 6 years after the relevant tax year, as required by Nigerian tax law
• Invoice records: Invoice data may be retained for up to 6 years for legal and accounting purposes
• Anonymised data: Aggregated, anonymised data may be retained indefinitely for analytics

Bank Connection Data

If you disconnect your bank account, we stop receiving new transaction data. Previously synced transactions are retained unless you request deletion.

8. Cookies

We use minimal cookies:

• Essential cookies: Required for the app to function (authentication, session management, security tokens)
• Analytics cookies: Anonymised usage data to help us improve our service

We do not use advertising cookies, tracking pixels, or sell data to advertisers.

You can control cookie settings through your browser. Note that disabling essential cookies will prevent you from using KeepAm.

9. Children's Privacy

KeepAm is a business tool designed for adults. Our service is not intended for users under 18 years of age.

We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from someone under 18, please contact us immediately at privacy@keepam.ng, and we will delete the information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

For significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you by email or through an in-app notification
• Where required by law, seek your consent before implementing material changes

Your continued use of KeepAm after any changes indicates your acceptance of the updated policy. If you do not agree with a change, you may delete your account.

11. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about our data practices, contact us: