Privacy Policy.

This Privacy Policy explains how KoBank collects, uses, stores, shares, protects, and otherwise processes personal information when you use our mobile application, website, wallet, savings tools, group savings plans, investment-access features, learning content, support channels, and related services.

By using KoBank, creating an account, submitting information, completing KYC, joining a plan, subscribing to an offer, contacting support, or visiting our website, you agree to the practices described in this policy.

KoBank is a financial education, savings, wallet, and investment-access platform. For purposes of applicable data-protection laws, KoBank may act as a data controller for information we determine how and why to process, and as a processor where we handle data on behalf of regulated or technical partners.

We may work with banks, payment processors, identity-verification providers, custodians, trustees, investment partners, analytics providers, cloud infrastructure providers, messaging providers, and compliance vendors to deliver our services.

We may collect identity and contact information such as your name, phone number, email address, date of birth, gender, address, country, occupation, next-of-kin details, and account preferences.

We may collect verification information such as BVN, NIN, government-issued ID details, selfie or liveness images, proof of address, source-of-funds information, risk profile answers, sanctions-screening results, and other KYC or AML records required to provide regulated or risk-sensitive features.

We may collect financial and transaction information such as wallet balance, funding history, withdrawals, bank account details, savings goals, group savings contributions, investment subscriptions, payouts, fees, failed transactions, device authorisations, support tickets, and account limits.

We may collect technical information such as device type, operating system, IP address, app version, browser type, device identifiers, crash logs, session activity, security events, approximate location inferred from network data, cookies, and similar tracking technologies.

We collect information directly from you when you register, fill forms, complete KYC, use product features, contact support, join waitlists, respond to surveys, or subscribe to updates.

We also receive information from partners and third parties, including payment processors, banks, identity-verification providers, fraud-prevention services, credit or compliance databases, device-security tools, regulators, law-enforcement bodies, and other service providers where lawful.

We use personal information to create and manage your account, verify your identity, provide wallet services, process payments, support savings and group savings features, enable eligible investment access, manage subscriptions and payouts, communicate with you, and respond to support requests.

We use information for fraud prevention, security monitoring, AML and sanctions checks, regulatory reporting, transaction monitoring, risk management, dispute resolution, audit, recordkeeping, service improvement, product analytics, personalisation, and legal compliance.

We may use your information to send important service messages, product notices, account alerts, policy updates, educational content, waitlist updates, and marketing communications where permitted. You can opt out of non-essential marketing communications.

Depending on the context, we process your information because it is necessary to perform our contract with you, comply with legal and regulatory obligations, protect legitimate interests such as fraud prevention and platform security, protect vital interests, perform a task in the public interest, or because you have given consent.

Where we rely on consent, you may withdraw that consent, but withdrawal may not affect processing already completed or processing that remains necessary for legal, compliance, security, or contractual reasons.

KoBank may verify your identity and screen account activity to meet KYC, AML, counter-terrorism-financing, sanctions, fraud-prevention, tax, payment, investment, and regulatory requirements.

This may include automated checks, manual review, transaction monitoring, risk scoring, partner verification, document review, and reporting to regulators, partner institutions, courts, or law-enforcement bodies where required by law or lawful request.

We may share your information with service providers who help us operate KoBank, including cloud hosting, analytics, support, communications, payment processing, identity verification, fraud prevention, compliance, legal, audit, accounting, security, and infrastructure providers.

We may share information with banks, custodians, trustees, investment partners, issuers, payment processors, regulators, dispute-resolution bodies, courts, law-enforcement agencies, tax authorities, or other parties where necessary to provide services, complete transactions, comply with law, protect rights, or investigate misuse.

We do not sell your personal information. Where partners need your data to provide a service, we require them to process it only for lawful and permitted purposes.

Some of our infrastructure, vendors, or partners may process information outside Nigeria or outside your country of residence. Where this occurs, we take steps designed to ensure appropriate protection, including contractual safeguards, security measures, and partner due diligence where applicable.

We retain personal information for as long as necessary to provide KoBank services, manage your account, comply with legal and regulatory obligations, resolve disputes, prevent fraud, enforce agreements, conduct audits, and maintain business records.

Some compliance, transaction, KYC, audit, dispute, and security records may be retained after account closure where required or permitted by law. When data is no longer needed, we delete, anonymise, archive, or restrict it in line with our retention practices.

We use administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, disclosure, alteration, or destruction. These safeguards may include encryption, access controls, monitoring, secure infrastructure, authentication controls, logging, and staff access restrictions.

No system is perfectly secure. You are responsible for keeping your phone, email, SIM, PIN, biometrics, passwords, and OTPs secure. If you suspect compromise, contact KoBank support immediately.

Our website and digital channels may use cookies, pixels, local storage, analytics tags, and similar technologies to remember preferences, measure traffic, improve performance, detect abuse, support marketing attribution, and understand how users interact with KoBank.

You can control some cookies through your browser or device settings. Disabling cookies may affect website performance or certain features.

We may send marketing messages about KoBank products, educational content, feature updates, offers, events, or waitlist opportunities where permitted by law. You may opt out of marketing messages by using available unsubscribe instructions or contacting support.

You may still receive important service, transaction, compliance, or security messages even if you opt out of marketing communications.

Subject to applicable law, you may have rights to access your personal information, request correction, request deletion, object to or restrict processing, request portability, withdraw consent, and lodge a complaint with a data-protection authority.

To protect your account, we may need to verify your identity before acting on a rights request. Some requests may be limited where we must retain information for legal, compliance, fraud-prevention, dispute, audit, or contractual reasons.

KoBank is intended for users who are at least 18 years old. We do not knowingly onboard children or collect personal information from children for account use. If we learn that a child has provided personal information without lawful basis, we may delete or restrict that information.

KoBank may contain links to third-party websites, payment pages, app stores, partner services, or documents. Those third parties are responsible for their own privacy practices. You should review their privacy notices before sharing information with them.

If KoBank is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be transferred or disclosed as part of that transaction, subject to applicable law and reasonable confidentiality protections.

If you have a privacy question, request, or complaint, contact KoBank through the official support channels published in the app or on our website. We may request additional information to verify your identity and handle your request.

If you are not satisfied with our response, you may have the right to contact the relevant data-protection authority or regulator.

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, operational updates, partner requirements, or security practices. The latest version will be available on our website or app.

Where required, we will notify you of material changes. Continued use of KoBank after an update means you acknowledge the updated policy.