Privacy Policy

1. Information we collect

Identity information

This may include your full name, date of birth, photograph, government-issued identifiers, Bank Verification Number (BVN) and other information needed to verify identity and meet financial-services obligations.

Contact information

Email address, phone number, residential or mailing address, and messages sent to Kashtok.

Device and usage information

Device type, operating system, browser, IP address, app version, identifiers, network information, security signals, pages viewed, actions taken, feature interactions, cookies and diagnostics.

Transaction-related information

When you use supported payment services, this may include wallet activity, transfers, bill payments, airtime or data purchases, beneficiaries, transaction references, amounts, dates, status and support records.

2. How we use information

• Provide, operate and improve Kashtok services.
• Create and secure accounts, verify identity and prevent fraud.
• Process transactions and communicate their status.
• Respond to support, refund, privacy and deletion requests.
• Meet legal, regulatory, audit and record-keeping obligations.
• Send service notices and permitted product updates.

3. Security practices

We use safeguards appropriate to the information, including access controls, encryption in transit, monitoring, secure development, vendor review and incident-response procedures. No system is completely secure, so users should protect passwords, devices and one-time codes.

4. Third-party service providers

We may use providers for identity verification, payment processing, banking infrastructure, cloud hosting, communications, analytics, fraud prevention and customer support. Providers may process information only for agreed services and under confidentiality, security and legal requirements.

5. Data retention

We retain information only as long as needed to provide services, resolve disputes, prevent fraud and meet financial, tax, anti-money-laundering and other legal obligations. Information no longer required is deleted, anonymized or securely isolated.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability, withdraw consent and complain to the Nigeria Data Protection Commission. We may verify your identity and retain records where law requires.

7. Changes to this policy

We may update this policy as Kashtok develops or legal requirements change. The current version and effective date will remain available here.

8. Contact us