Privacy Policy

1. Who we are

Roar Media Ltd (RC 8856701), a company registered in Nigeria and based in Lagos, is responsible for your personal data. For any privacy question or to exercise your rights, contact us at info@roarmedia.com.ng, marked for the attention of the Data Protection Officer.

2. The information we collect

Account and profile data: your name, email address, password (stored only in hashed form), date of birth (used for retirement calculations), base currency, and, for household members you add, their name, relationship, and date of birth.

Financial data you enter: the holdings, transactions, balances, valuations, goals, watchlists, and notes you record. This is the core of the Service and can reveal your overall financial position. You choose what to enter.

Subscription and payment data: your plan, billing status, and payment references. Card payments are processed by Paystack; we do not store your full card number or CVV.

Usage, device, and log data: information generated as you use the Service, such as feature usage, AI-question counts, log and diagnostic data, IP address, and general device/browser information, used to run, secure, and improve the Service.

Cookies and similar technologies: used for authentication (keeping you signed in), security, and essential functionality, and where applicable for analytics. See section 10.

3. How we use your information and our lawful bases

We use personal data to: create and manage your account; provide the tracking, planning, forecasting, and AI features; process subscriptions and payments; send service-related and (where you have opted in) marketing communications; provide support; secure the Service and prevent abuse; comply with legal obligations; and analyse and improve the Service. Depending on the context and your location, we rely on the following lawful bases: performance of a contract (to provide the Service you sign up for); your consent (for example, optional marketing or certain cookies, which you can withdraw at any time); legitimate interests (to secure and improve the Service, in a way balanced against your rights); and compliance with legal obligations.

4. AI processing

When you use the AI Coach, relevant portions of your data (such as a summary of your holdings and the question you ask) are sent to our third-party AI provider to generate a response. We take steps to limit what is shared to what is needed for the feature. Our AI provider processes this data to return the output to you and, under our arrangement, does not use it to train its models. AI output is educational only and is not financial advice. If you prefer not to have data processed this way, you can choose not to use the AI features.

5. How we share your information

We do not sell your personal data. We share it only as needed to run the Service, with:

• Service providers (processors) who process data on our behalf under contract, including: Supabase and Vercel (database, hosting, and infrastructure), Paystack (payments), our transactional email provider, our AI provider (for the AI Coach), market-data providers, and Google (if you use Google sign-in).
• Household members you authorise, to the extent you share an account with them.
• Legal and safety recipients, where we are required to disclose data by law, regulation, or valid legal process, or to protect our rights, users, or the public.
• Business transfers, if we are involved in a merger, acquisition, or sale of assets, subject to this Policy.

6. International data transfers

Our infrastructure and some processors operate outside Nigeria, so your data may be processed in other countries. Where we transfer personal data across borders, we take steps required by the NDPA (and, where applicable, the GDPR) to ensure an adequate level of protection, such as using providers that offer appropriate safeguards and contractual protections.

7. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or dispute-resolution obligations, or to enforce our agreements. You can export your data before deletion.

8. How we protect your information

We use technical and organisational measures appropriate to the sensitivity of the data, including encryption of data in transit, row-level security so that users can access only their own records, access controls, and automatic idle logout. No system is perfectly secure, and we cannot guarantee absolute security; you also play a role by protecting your credentials and devices. If a data breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.

9. Your rights

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; withdraw consent where processing is based on consent; and receive your data in a portable format. Many of these you can exercise directly in the app (for example, editing your profile or exporting your data). To make any other request, contact us at info@roarmedia.com.ng. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), or, where applicable, your local data-protection authority.

10. Cookies and tracking

We use cookies and similar technologies that are strictly necessary to sign you in and keep the Service secure and functioning, and, where applicable and with your consent, for analytics to understand and improve usage. You can control non-essential cookies through your browser settings or any in-product controls we provide; disabling essential cookies may prevent the Service from working.

11. Children

RoarWEALTH is intended for adults (18+) and is not directed to children. We do not knowingly collect personal data directly from children. Where an adult account holder creates a sub-account or plan relating to a minor (for example a child’s education plan), that information is provided and managed by the adult account holder, who is responsible for having the right to provide it; the minor is not a user of the Service. If you believe a child has provided us data directly, contact us and we will take appropriate steps.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example by email or in-app notice) and update the effective date above. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

13. How to contact us

For any privacy question, or to exercise your rights, contact the Data Protection Officer at Roar Media Ltd, info@roarmedia.com.ng. We will respond within the timeframes required by applicable law.