Privacy policy

This policy applies to the Kudimata Capital mobile app and website, operated by Kudimata Capital Limited. The Android app is distributed through the KUDIMATA APP developer account. References to “we”, “us” and “our” mean Kudimata Capital.

For privacy questions or to exercise your rights, contact compliance@kudimatacapital.com. For account assistance, contact support@kudimatacapital.com.

• Account and contact details: your name, email address, telephone number, date of birth, address, nationality, and other profile details you provide.
• Identity and verification details: your BVN, NIN, verification results, and the identification or business information required for the services you request.
• Financial information: bank and payout-account details, wallet balances, savings and investment instructions, transaction history, and account statements.
• Information you choose to add: a profile photo, next-of-kin details, referral information, and messages you send to support. Provide another person’s details only when you are authorised to do so.
• Technical information: information needed to operate the app and deliver updates, such as app version, device and operating-system details, network connection information, and error or security logs.

Some preferences and cached account information are stored on your device. The app requests access to photos when you choose a profile picture and notification permission when you enable reminders. You can manage these permissions in your device settings.

We use information to create and administer your account, verify your identity, process the transactions you request, show balances and statements, provide customer support, deliver service notices and app updates, and detect or investigate fraud and misuse.

We process information where needed to provide services you request, meet legal obligations, or pursue legitimate interests such as operating and protecting our services, subject to your rights. Where consent is required, you can withdraw it; this does not affect processing already carried out lawfully.

We share information needed to provide a service with relevant banks, payment and investment providers, identity-verification providers (including Prembly), technology and hosting providers, and professional advisers. Expo services are used to deliver compatible mobile-app updates.

We may disclose information when required by law or to investigate fraud, comply with regulatory requests, or protect legal rights. We do not sell your personal information.

Service providers may process information in other countries. Where information is transferred internationally, applicable data-protection requirements and appropriate safeguards must be followed.

We keep personal information for as long as it is needed for the purpose for which it was collected, including providing your account services and meeting applicable legal obligations.

You can request deletion of your account and associated personal data, even if you have uninstalled the app. After identity verification and resolution of any outstanding account matters, information no longer required is deleted or anonymised.

Identity-verification records, transaction and financial records, and information needed for fraud investigations, disputes, or legal obligations may need to be retained after account closure. Retention depends on the record and the applicable obligation; contact our compliance team for the period applicable to your records. Retained information remains restricted to those purposes and is deleted or anonymised when retention is no longer necessary.

Subject to applicable law, including the Nigeria Data Protection Act 2023, you may request access to your personal data, correction of inaccurate information, deletion, restriction of processing, or a portable copy of eligible data. You may also object to certain processing and withdraw consent where processing relies on it.

Email our compliance team from your registered email address. We may need to verify your identity before acting on a request. Do not include passwords, transaction PINs, OTPs, full BVNs, or NINs in an email.

If you are not satisfied with our response, you may raise a concern with the Nigeria Data Protection Commission.

Access to account information is limited to the purposes described in this policy. No method of storage or transmission is completely risk-free. Keep your password and transaction PIN private, protect your device, and contact support promptly if you suspect unauthorised access.

Links to external services are governed by those services’ own privacy notices. Review them before sharing information.

Kudimata Capital account services are intended for people aged 18 and over. If you believe a child has provided personal information to us, contact our compliance team.

We may update this policy as our services or legal obligations change. The date at the top identifies the latest version. Material changes will be communicated through the app, website, or appropriate account communications.