Privacy

Last updated 16 August 2026

The short version: your money stays your business. Asiko is free, has no ads, and sells nothing to anyone. Your ledger lives on your phone. What you log — amounts, providers, notes, categories — is never sent to our analytics, and a copy only reaches our servers if you ask us to back it up.

Who we are

Asiko is a free app for tracking naira exchange rates, setting rate alerts, and keeping a personal record of transfers. It is an independent project based in Nigeria, and the data controller is Opeyemi Agbeja. You can reach us at hello@getasiko.com about anything on this page.

What we collect

From the moment you open the app

An anonymous account ID. A random identifier so your settings and alerts have somewhere to live. It is not linked to your name, phone number, or device identifiers, and we cannot use it to work out who you are.
Your currency preferences — base currency, which corridors you follow, your typical send amount. These decide what the app shows you.
Usage analytics. Which screens are reached and which choices are made, so we can tell what works. See the limits below.

If you turn on notifications

A push token from Apple or Google, so we can send the alert you asked for. It identifies a device installation, not a person, and stops working when you uninstall.

Only if you back up your ledger

Your email address, so you can restore on a new phone.
A copy of your ledger — entries and the categories you created. Stored against your account and readable only by you.

Until you do this, your ledger exists on your phone and nowhere else. That is also the trade-off: without a backup, losing the phone loses the ledger.

What we never collect

This list is enforced in code, not just policy:

Ledger amounts and category names never reach our analytics. We record that an entry was added, along with its direction and currency corridor. Never how much, never what you called it, never the note.
No contacts, no location, no photos, no advertising identifiers.
No bank details, card numbers, or payment credentials. Asiko never moves money, so it never has a reason to ask.
No selling or sharing of anything to advertisers or data brokers. Ever.

Rate data

Exchange rates are fetched by our servers, never by your phone, and they are identical for every user. Requesting a rate tells the source nothing about you, because you never contact it. The rate providers and money-transfer companies we compare receive no data about you at all.

Who processes data for us

We keep this list short on purpose. Each of these is a processor acting on our instructions:

Service	What for	Where
Supabase	Database, accounts, backed-up ledgers	European Union
PostHog	Usage analytics	United States
Expo, Apple, Google	Delivering push notifications	United States
Resend	Sending sign-in codes by email	Ireland
Cloudflare	This website, domain, email forwarding	Global

Analytics are processed in the United States, which is a transfer outside the UK, EU and Nigeria. The data involved is deliberately low-sensitivity — event names and a currency corridor, never amounts — and transfers rely on the processor's standard contractual clauses.

How long we keep it

Your ledger: until you delete it, or until you delete your account.
Anonymous accounts that never backed anything up: removed automatically after 60 days of inactivity.
Push tokens: removed within 30 days of a device becoming unreachable.
Historical exchange rates: kept indefinitely. This is market data about the naira, identical for everyone and connected to no user.

Your rights

You can exercise all of these inside the app, without asking us and without waiting. Settings → Your data:

Export everything we hold about you, as JSON or CSV.
Delete your account. This removes your email, your backed-up ledger, your alerts and your devices from our servers, and wipes the local copy on your phone. It cannot be undone, which is why the app offers you the export first.

Under the UK and EU GDPR and the Nigeria Data Protection Act 2023 you also have the right to correct your data, object to processing, and complain to your data protection authority. Email hello@getasiko.com and we will answer within 30 days.

Our legal bases: performing the service you asked for (your account, backups and alerts), and legitimate interests in understanding how the app is used and keeping it secure.

Security

Traffic is encrypted in transit. Backed-up ledgers are protected by row-level security, so an account can only ever read its own rows. Sign-in uses a one-time code sent to your email — there is no password to leak or reuse.

Children

Asiko is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has used the app, email us and we will delete the account.

Changes

If this policy changes in a way that affects what we collect, we will say so in the app before it takes effect. The date at the top always reflects the current version.

Contact

hello@getasiko.com