Privacy Policy

Last updated: February 1, 2026

At Bledga ("we", "us", or "our"), your privacy is fundamental to how we build and operate our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign up via Google or phone number, we receive the associated profile information from those services.

Financial Data

To provide our core service, we process the financial information you provide, including:

• Expense and income transactions you enter manually, via voice, or by scanning receipts
• Budget categories and savings goals you create
• Invoice and business details you add
• Receipt images you upload for AI scanning
• Tax-related information you provide to the Tax Advisor

WhatsApp Data

If you use our WhatsApp integration, we process messages you send to our business number including text, images, and voice notes. This data is used solely to provide the expense tracking and financial query services you request. We do not store raw WhatsApp messages beyond what is necessary to process your request and maintain conversation context.

Usage Data

We automatically collect information about how you interact with Bledga, including pages visited, features used, device type, browser, IP address, and session duration. This helps us improve the product.

Communications

If you contact us for support or feedback, we retain those communications to help resolve your issues and improve our services.

2. How We Use Your Information

We use your information to:

• Provide the service: process transactions, generate reports, provide tax guidance, and manage your account
• Improve the product: analyze usage patterns to build better features and fix issues
• Send communications: account notifications, security alerts, product updates, and marketing (with your consent)
• Ensure security: detect fraud, prevent abuse, and protect your account
• Legal compliance: meet regulatory obligations under Nigerian law

3. AI and Automated Processing

Bledga uses artificial intelligence to power features including receipt scanning, expense categorization, spending insights, and tax guidance. Your financial data is processed by AI models to provide these services. We do not use your personal financial data to train general-purpose AI models. AI processing is limited to providing your requested features.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• Service providers: We use trusted third-party services for hosting (Supabase), payments (Paystack), and AI processing. These providers are contractually bound to protect your data.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share data for purposes you explicitly authorize, such as connecting to an accountant or exporting to a third-party service.

5. Data Storage and Security

Your data is stored on secure servers managed by Supabase, with data centers that maintain industry-standard security certifications. We implement:

• TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Row-level security policies on all database tables
• Regular security audits and vulnerability assessments
• Strict access controls for our engineering team

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal and financial data within 30 days, except where we are legally required to retain certain records (e.g., transaction records for tax compliance purposes, which may be retained for up to 6 years as required by Nigerian tax law).

7. Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and other applicable laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Data portability: Export your data in a machine-readable format
• Withdraw consent: Withdraw consent for marketing communications at any time
• Object: Object to processing of your data for certain purposes

To exercise any of these rights, contact us at privacy@bledga.com.

8. Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising trackers. Analytics cookies are used in anonymized form to understand usage patterns.

9. Children's Privacy

Bledga is not designed for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly.

10. International Data

Your data may be processed in countries outside Nigeria where our service providers operate. We ensure that any international transfer of data is protected by appropriate safeguards consistent with the NDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Bledga after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@bledga.com
• Company: Bemny Technologies Ltd.
• Address: Lagos, Nigeria