Privacy policy

Financiar is a business spend-management service operated by Innoedge Technologies Limited ("Innoedge", "we", "us"), a company incorporated in Nigeria (RC 1749421), whose registered office is at 12 Parakou Street, Wuse 2, Abuja, FCT. Innoedge is the data controller for the personal data described in this policy.

This policy covers the Financiar mobile app, the web console at app.thefinanciar.com and this website. Questions about it go to [email protected]. Our Data Protection Officer can be reached at [email protected].

We collect only what we need to run the service, keep it secure and meet the law:

Face ID and fingerprint data never leave your device: the operating system tells the app only whether the check passed. We do not collect your contacts or location, and we do not use advertising identifiers.

• To provide the service you signed up for (performance of a contract): creating your account, signing you in, running approval chains, moving money on approved requests, buying bills, producing receipts, invoices and payslips.
• To verify identity and prevent fraud, money laundering and abuse (legal obligation and legitimate interest): checking your BVN before a business can be funded, screening unusual activity, and keeping an audit trail of who approved what.
• To meet our legal and regulatory duties (legal obligation): keeping financial records, answering lawful requests from regulators and law enforcement, and tax and accounting obligations.
• To keep you informed (performance of a contract, and consent for push notifications): sign-in codes, approval requests, payment outcomes and security notices. You can turn push notifications off in your device settings.
• To support and improve the service (legitimate interest): answering support requests, fixing faults and understanding which features are used. We do this with records we already hold; we do not sell your data or build advertising profiles.

Inside your business, people see what their role allows: approvers see the requests they approve, owners and admins see the business’s activity. Outside Financiar, we share data only with the service providers below, each bound by a contract to use it only to provide their service to us, and with authorities where the law requires it.

We will tell you here before we add a provider that receives personal data. We do not sell personal data.

Our servers are in Germany, and some providers above process data in the European Union or the United States. Where personal data leaves Nigeria we rely on the transfer grounds in Part VIII of the Nigeria Data Protection Act 2023, including contractual safeguards with each provider, and we transfer only what the provider needs.

• Account and profile details: for as long as your account is open, then deleted or anonymised when a deletion request is completed, except where they are part of a record below.
• Financial records, approvals, evidence attached to requests and the audit trail: for at least five years after the transaction or the end of the business relationship, as Nigerian anti-money-laundering and tax law requires. These records are never edited; corrections are recorded as new entries.
• Identity-verification results: for five years after the business relationship ends.
• Sign-in codes: they expire within minutes and the challenge records are removed after 90 days.
• Server logs: up to 30 days.

When a retention period ends, the data is deleted or irreversibly anonymised.

Data is encrypted in transit. PINs and sign-in codes are stored only as one-way hashes. Sessions on the phone are kept in the device’s secure keychain and require Face ID, a fingerprint or your PIN to unlock. Each business’s data is separated at the database level, staff access is limited and logged, and money only moves after an approval chain and a PIN. No system is perfectly secure; if a breach affects your personal data we will notify you and the Nigeria Data Protection Commission as the law requires.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, subject to the records the law requires us to keep (see Delete your account);
• restrict or object to processing based on our legitimate interests;
• give you your data in a portable format;
• withdraw consent you have given, such as for push notifications, without affecting earlier processing.

Email [email protected] from the address on your account. We will answer within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

• Camera: to photograph or film a receipt as evidence, only when you choose to.
• Photos: to attach an existing photo or video, and to save a receipt image when you choose Save Image.
• Microphone: to record a voice note as evidence, only while you are recording.
• Face ID or fingerprint: to unlock the app.
• Notifications: to tell you about approvals, payments and security events.

You can withdraw any of these in your device settings; the related feature will stop working.

The web console uses strictly necessary cookies to keep you signed in. They are not used for advertising or tracking across other sites.

This website (thefinanciar.com) uses Google Analytics to count visits and see which pages are read, so we know what is worth writing. Nothing is stored on your device unless you accept it. Until you do, analytics storage is switched off and Google receives only an anonymous, cookieless record of the page view — no identifier that follows you between visits or between sites.

If you accept, Google Analytics sets cookies (_ga and _ga_-prefixed) that distinguish your browser from other browsers for up to two years. You can decline on the banner, and you can change your mind at any time by clearing this site’s stored data in your browser, which brings the banner back.

We do not use Google Analytics for advertising: advertising, ad-personalisation and ad-user-data signals are refused whatever you choose, and we do not use advertising identifiers. Google acts as our processor for this data and may process it outside Nigeria — see Transfers outside Nigeria. Google’s own practices are described in its privacy policy.

Financiar is a service for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

We will post any change here and update the date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.