Banqroll holds some of the most personal information there is: what you earn, what you spend, and who you share money with. This policy explains, in plain language, what we collect, why, who else handles it, and what you can do about it.
01The short version
- We collect what we need to run your account and the features you use, and nothing for advertising.
- We don’t sell your data, and we don’t use it to train AI models.
- If you sign in with Google, we receive only your name, email address and profile picture, and use them only to sign you in and run your account.
- A linked bank account is view-only. Banqroll can read transactions; it can’t move money from it, and we never see your bank password.
- People you share a wallet with see only that wallet, within the role you give them. You can remove them at any time.
- You can ask for a copy of your data or for it to be deleted by emailing privacy@banqroll.com.
02Who we are
Banqroll is operated by BanqrollHQ LTD, Wuse, Abuja, Nigeria (company number RC 8672322) (“Banqroll”, “we”, “us”). We are the controller of the personal data described here.
This policy covers the Banqroll mobile apps, the website at banqroll.com, and the waitlist. Banqroll is not a bank. Where you use a banking feature, a regulated partner provides it and also handles your data under its own privacy policy (see section 7).
03What we collect
Information you give us
- Account details: your name, email address, phone number, country, preferred language and currency, and your password (stored only as a one-way hash).
- Sign in with Google: if you choose it, your Google account name, email address, profile picture and Google account ID (see section 6).
- Financial records you enter: wallets, balances, transactions, categories, notes, splits, budgets, goals, recurring rules and exchange rates you set.
- Statements you import: the files you upload (CSV, spreadsheet, PDF, text, Word or image) and the transactions extracted from them.
- Questions you ask: what you type into Ask, and the answers returned.
- Sharing: the email or phone number of people you invite, and the roles and permissions you give them.
- Support: anything you send us when you contact us.
- Waitlist: your email address and country.
Information from features you choose to turn on
- Bank linking (Nigeria today): when you connect a bank account, our partner Mono provides the account holder name, account details, balance and transaction history. The link is read-only. Your bank login goes to Mono and your bank, never to us.
- Spending account and @tag transfers (Nigeria today): to open an account with our partner VFD Microfinance Bank, you provide identity details such as your Bank Verification Number (BVN) and date of birth. These are passed to the partner to verify you and are not stored by Banqroll, not even in masked form. We keep the account number, balance, transfers and fees needed to show your account in the app.
- Subscriptions: Apple, Google or Paystack process your payment. We receive your plan, its status and renewal dates, not your full card details.
Information collected automatically
- Security and activity records: sign-ins, device type and changes made on shared accounts (who, what, when).
- Crash reports: technical details when the app fails. These exclude your email, phone number, access tokens, request contents and screenshots.
- Waitlist sign-ups: the date and your browser type.
- Website: our hosting provider records standard server logs (such as IP address) for security. The site uses no advertising or analytics cookies. Your light or dark theme choice is kept in your own browser.
04How we use it
| Purpose | Legal basis |
|---|---|
| Create and run your account, show your wallets, plans and insights | Contract |
| Share wallets with the people you invite, enforce their roles, keep the change log | Contract |
| Read imported statements, sort transactions and answer your questions with AI | Contract |
| Link bank accounts and operate spending accounts through our partners | Contract; legal obligation for identity checks |
| Process subscriptions and send receipts | Contract |
| Keep Banqroll secure, prevent fraud, fix crashes | Legitimate interests |
| Tell you when Banqroll opens in your country (waitlist) | Consent |
| Meet legal, tax and regulatory requirements | Legal obligation |
We do not sell your personal data, use it for third-party advertising, or make decisions about you that have legal effects based solely on automated processing.
05AI features
Statement import, automatic sorting and Ask use large language models run by third-party AI providers. When you use these features, the relevant text (for example the contents of a statement, or your question with the transactions needed to answer it) is sent to the provider to process and the result is returned to you.
- Banqroll does not train AI models on your data.
- We do not write the text of your statements or questions to our logs.
- Our AI providers are DeepSeek, OpenAI and Anthropic. They process the text only to return a result to you, under their API terms.
- AI suggestions never change your records without your approval, and you can undo them.
06Sign in with Google
You can create a Banqroll account or sign in using your Google account. This section explains exactly what Banqroll receives from Google and what we do with it.
What we access
When you choose Sign in with Google, Google asks for your permission to share the following with Banqroll, using only theopenid, email and profile scopes:
- your name;
- your email address and whether Google has verified it;
- your profile picture;
- a unique Google account identifier.
Banqroll does not request or access your Gmail, Google Drive, Contacts, Calendar, Google Pay, location or any other Google data. We never receive your Google password.
How we use it
- to create your Banqroll account and sign you in securely;
- to fill in your name and email on your profile, which you can change;
- to show your name and picture to people you choose to share a wallet with;
- to contact you about your account, such as security notices and receipts.
We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train AI or machine learning models. We do not use Google user data to determine credit-worthiness or for lending purposes, and we never send it to our AI providers, banking partners or payment providers.
Banqroll does not use Google Workspace APIs or Google user data to develop, improve or train generalized or non-personalized AI and/or ML models.
How we store and protect it
Google user data is stored with your Banqroll account on our servers, protected in transit with TLS and at rest with encryption, and accessible only to staff who need it to support your account. See section 10 for our wider security measures.
Who we share it with
We do not transfer Google user data to third parties, except: to the people you invite to a shared wallet (your name and picture only); to service providers that host our systems on our behalf, under contract; or where the law requires it.
Keeping and deleting it
We keep Google user data for as long as your Banqroll account is open. If you delete your account, we delete it within 30 days. You can also remove Banqroll’s access at any time from your Google Account at myaccount.google.com/permissions; you will then need another way to sign in, or you can ask us to delete your account by emailing privacy@banqroll.com.
Limited Use
Banqroll’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
08International transfers
Banqroll is used worldwide and our providers operate in several countries, so your data may be processed outside the country you live in. Our servers and database are hosted by Amazon Web Services (AWS). Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.
09How long we keep it
- Account and financial records: for as long as your account is open. When you delete your account, we delete or anonymise them within 30 days, except where we must keep them longer by law.
- Change log on shared accounts: for as long as the account exists.
- Spending account and transfer records: for the period required by financial regulations, which may continue after you close your Banqroll account.
- Imported statement files: deleted once the transactions are extracted and you have reviewed them, and kept for no more than 30 days.
- Crash reports: 90 days.
- Waitlist: until we have told you Banqroll is available in your country, or until you ask us to remove you.
10How we protect it
- Bank-connection credentials are encrypted at rest.
- Identity numbers such as your BVN and your date of birth are never stored.
- Every action on your account is checked against your role on our servers, not just in the app.
- Transfers require your PIN.
- Access to our internal tools requires two-factor authentication and is itself logged.
11Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct data that is wrong;
- delete your data;
- object to or restrict certain processing;
- receive your data in a portable format (you can also export your transactions from the app);
- withdraw consent, for example to leave the waitlist;
- complain to your local data protection authority.
To use any of these rights, email privacy@banqroll.com from the address on your account. We will respond within 30 days, and may need to verify your identity first. We don’t charge for requests unless they are clearly excessive.
12Children
You must be at least 18 (or the age of majority where you live) to open a Banqroll account. We do not knowingly collect data from children. If you believe a child has given us personal data, contact privacy@banqroll.com and we will delete it.
13Changes to this policy
We will update this page when our practices change and revise the effective date above. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect. If we change how Banqroll uses Google user data, we will update this policy and notify you in the app or by email before the change takes effect.
14Contact
Questions or requests about your data: privacy@banqroll.com. Our Data Protection Officer is James Holden, reachable at dpo@banqroll.com. Post: BanqrollHQ LTD, Wuse, Abuja, Nigeria.