Privacy Policy
Effective date: June 2026
This Privacy Policy explains how Heykara collects, uses, stores, and protects your personal information when you use the Heykara mobile application. By using Heykara, you agree to the practices described in this policy.
1. Who We Are
Heykara is a personal finance application built for Nigerian users. Payment processing is handled by Paystack Payments Limited, a company licensed by the Central Bank of Nigeria.
2. Information We Collect
Information you provide directly: • Phone number (required for registration and login) • Full name • Email address (optional) • Bank account details (bank name, account number, account name) for withdrawal purposes Information generated by your use of the app: • Budget names, categories, amounts, and schedules you create • Transaction history (fund deposits, budget releases, withdrawals, refunds) • Notification read status • Device identifiers for push notifications Information we do not collect: • BVN or NIN • Card details (handled entirely by Paystack) • Location data • Contacts or camera data
3. How We Use Your Information
We use your information to: • Verify your identity and maintain your account • Process wallet funding and bank withdrawals via Paystack • Schedule and execute budget releases • Send transaction and budget notifications • Provide customer support • Comply with legal and regulatory obligations We do not sell your personal data to third parties. We do not use your data for advertising purposes.
4. Data Sharing
We share your data only in the following circumstances: • Paystack: Your bank account details and transaction amounts are shared with Paystack to process withdrawals. • Legal obligations: We may disclose your information if required by Nigerian law, court order, or regulatory authority. • Business transfers: If Heykara is acquired or merges with another company, your data may be transferred as part of that transaction.
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account: • Your personal information (name, phone number, email, bank details) is permanently anonymised immediately • Transaction history is retained for a minimum of 7 years for regulatory compliance, but is no longer linked to any identifiable information
6. Security
We take reasonable technical and organisational measures to protect your data, including: • TLS encryption for all data in transit • Encrypted storage for authentication tokens on your device • PIN verification for all withdrawals No system is completely secure. If you believe your account has been compromised, contact us immediately.
7. Your Rights Under the NDPR
Under the Nigeria Data Protection Regulation (NDPR), you have the right to: • Access the personal data we hold about you • Correct inaccurate data • Delete your data (see Section 5) • Object to how we process your data • Portability — receive your data in a structured format To exercise any of these rights, contact us at support@heykara.com. We will respond within 30 days.
8. Children
Heykara is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification. Continued use of Heykara after changes are posted constitutes your acceptance.
10. Contact
For privacy-related questions or to exercise your rights: Email: support@heykara.com