TrakTrak watches things that change and tells you when they do. This policy explains exactly what we hold about you, why, and what you can ask us to do with it. It is written to describe our actual systems rather than to cover every eventuality in the abstract.
We hold your name, your phone number, and what you asked us to watch. We use your number to send alerts and nothing else. We do not sell your data and we do not run advertising. We never hold your login details for any airline, railway or government portal, because you complete every booking yourself on those sites rather than through us.
TrakTrak is an alert service operating at traktrak.com.ng. For questions about this policy or about your data, write to privacy@traktrak.com.ng.
| What | Why we need it |
|---|---|
| Your name | To address you in the service. You choose what to enter. |
| Your phone number | This is your account identifier and the address alerts are sent to. Without it the service cannot work. |
| Your PIN | Stored only as a one-way hash. We cannot read it, recover it, or tell you what it is. |
| Your email | Optional at sign-up. Required only when you buy credits, because the payment provider issues a receipt and because a disputed payment needs somewhere to reach you. |
| What you watch | Routes, dates, classes, price limits, flight numbers, job searches, your CRS score if you enter one. This is the instruction that makes the service do anything. |
| Alerts we sent you | Kept so you can see what you were told and what you were charged, and so we can investigate if something did not arrive. |
| Credit and payment records | Balance, what each alert cost, and the reference of each purchase. Kept for accounting and for resolving disputes. |
| Your Telegram ID | Only if you choose to link Telegram, and only so alerts can be delivered there. |
Your phone number is used to send the alerts you asked for, and to send a reset code if you forget your PIN. That is all. We do not send marketing messages to it, and we do not send alerts you did not ask for.
Aggregated, de-identified information about what changes and how often — how quickly a fare changes, for instance — may be used to improve the service or described publicly. Nothing in that identifies you.
Only the providers that make the service function, and only what each of them needs:
We do not sell your data. We do not share it for advertising. We will disclose it if a court or a competent authority lawfully requires us to, and we will tell you unless we are prohibited from doing so.
Our servers and database are hosted outside Nigeria, which means your data is transferred internationally. We use providers that offer contractual protections for that transfer. If you would rather your data were not transferred outside Nigeria, we cannot currently offer the service to you.
When you close your account we delete your name, phone number, email and watches. We keep payment records for the period above, because we are obliged to, and we anonymise what we can.
Under the Nigeria Data Protection Act 2023 you may ask us to:
Write to privacy@traktrak.com.ng and we will respond within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.
The site is served over HTTPS. PINs are stored as hashes and never in readable form. Access to the database is restricted to the service itself. Reset codes are single-use and short-lived, and requests for them are rate-limited.
We will not claim our systems cannot be breached, because no one can honestly claim that. If a breach affects your data we will tell you and the Commission as the law requires.
TrakTrak is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has registered, write to us and we will remove the account.
If we change it we will update the date at the top. If a change materially affects how we use your data we will tell you by message before it takes effect.