Privacy Policy

Your privacy matters to us. This policy explains how KukaPay collects, uses, and protects your personal information.

Last updated: January 15, 2026

Information We Collect

  • Personal identification information (Name, email address, phone number, NIN, government-issued ID, and face/selfie for verification — we do not collect or store your BVN)
  • Financial information (Bank account details, transaction history)
  • Device information (Device type, operating system, unique device identifiers)
  • Usage data (App features used, time spent, interaction patterns)
  • Location data (With your consent, for security and fraud prevention)

How We Use Your Information

  • Process your transactions and provide financial services
  • Verify your identity and prevent fraud
  • Improve our services and develop new features
  • Send you important updates about your account
  • Comply with legal and regulatory requirements
  • Provide customer support and respond to inquiries

Data Security

  • End-to-end encryption for all transactions
  • Bank-grade security infrastructure (256-bit SSL)
  • Two-factor authentication (2FA) for account access
  • Regular security audits and penetration testing
  • Secure data centers with 24/7 monitoring
  • Compliance with PCI-DSS standards

Data Sharing

  • We do not sell your personal information to third parties
  • Data shared with payment processors (Flutterwave) for transactions
  • Shared with regulatory bodies when required by law (CBN, NDIC)
  • Shared with identity verification partners for KYC compliance
  • Service providers under strict confidentiality agreements

Your Rights

  • Access your personal data at any time through the app
  • Request correction of inaccurate information
  • Request deletion of your account and data
  • Opt-out of marketing communications
  • Data portability - export your transaction history
  • Lodge complaints with the Nigeria Data Protection Commission

Data Retention

  • Active account data retained while you use our services
  • Transaction records kept for 7 years (regulatory requirement)
  • Account deletion requests processed within 30 days
  • Anonymized data may be retained for analytics
  • Backup data deleted within 90 days of account deletion

Questions About Your Privacy?

Our Data Protection Officer is available to address any concerns.

privacy@kukapay.com.ng