Trackalat
Log inStart free trial

Privacy policy

Last updated 7 October 2026

Trackalat helps businesses in any country track stock expiry dates. This policy explains what we collect, why, and the rights you have under data protection laws such as the Nigeria Data Protection Act 2023 (NDPA) and the EU and UK General Data Protection Regulation (GDPR).

What we collect

  • Account details: your name, phone number, email address and a hashed password (we never store your password itself).
  • Business details: business name, type, country, state or region, city, time zone and branch names.
  • Stock records you enter: products, quantities, batches, expiry dates, suppliers and prices.
  • Billing records: plan, currency (naira or US dollars), invoices and payment status. Card details are handled by Paystack and are never stored by Trackalat.
  • Basic usage data such as when you last logged in, to keep your account secure.

How we use it

  • To run the service: show your stock, work out what is expiring and send the alerts you choose (in-app, email, WhatsApp or SMS).
  • To confirm your email address and to help you recover your account.
  • To bill you for paid plans and send invoices.
  • To answer support requests.

We do not sell your data. We do not use your stock data for advertising.

Who we share it with

Only the providers needed to run Trackalat: our hosting provider, Paystack (payments), and our email, SMS and WhatsApp delivery partners. Each receives only what it needs, for example your phone number and the alert text. Some of these providers may process data outside your country; where the law requires it, we rely on appropriate safeguards for those transfers.

Your rights

You can see and correct your data in the app, export your stock and reports, object to or restrict certain processing, and ask us to delete your account and its data. Write to support@trackalat.com and we will respond within 30 days.

Security and retention

We use HTTPS everywhere, hashed passwords, phone verification and two-factor authentication for our staff. We keep your data while your account is open and delete it within 90 days of a deletion request, except records we must keep by law (such as invoices).