Privacy notice

This notice explains what personal data Kobotap collects, why, who we share it with and the rights you have under the Nigeria Data Protection Act 2023. Kobotap is currently a demo and pilot: no real money moves through it.

Who we are

Kobotap is the data controller for the personal data described here. Contact us about anything in this notice at hello@kobotap.app.

What we collect

• Account details: your name, email address, password (stored only as a secure hash) and your Kobotap tag.
• Business details, if you open a business account: business name, type, city and CAC registration number.
• Verification (KYC) details, such as a director’s BVN. These go straight to our licensed payments provider for checks. We do not store BVNs.
• Bank account details you add for payouts: bank, account number and account name.
• Transaction records: payments, top-ups, transfers, payouts, wallet addresses you send to, and notes you add.
• Pilot sign-ups: your name, business name and type, city, WhatsApp number, and optionally your email and a note.
• Technical data: a login cookie that keeps you signed in. We don’t use advertising or tracking cookies.

Why we use it

• To create and run your account, and to show you your balances and history (to perform our contract with you).
• To verify businesses and prevent fraud and money laundering, through our payments provider (legal obligation).
• To contact pilot venues about the pilot (your consent, which you can withdraw at any time).
• To keep the service secure and fix problems (our legitimate interests).

Who we share it with

• Our licensed payments provider, which moves money and carries out verification. Kobotap never holds your funds itself.
• Service providers that host the app and its database, which may store data outside Nigeria. Where they do, we rely on the safeguards the Nigeria Data Protection Act requires.
• Authorities, where the law requires it.

We don’t sell your personal data.

How long we keep it

We keep account and transaction records for as long as your account is open and then for as long as financial record-keeping rules require. Pilot sign-ups are deleted when the pilot ends unless you become a customer, or sooner if you ask.

Your rights

You can ask us to:

• give you a copy of your personal data, or send it to another service;
• correct data that’s wrong, or delete data we no longer need;
• stop or limit how we use it, or withdraw your consent;
• explain any automated decision that affects you.

Email hello@kobotap.app and we’ll respond within 30 days. You can also complain to the Nigeria Data Protection Commission.

Security

Passwords are hashed, connections are encrypted (HTTPS), and access to the database is restricted. No system is perfectly secure, so tell us straight away if you think your account has been accessed by someone else.

Changes

We’ll update this notice as Kobotap moves from demo to launch, and change the date at the top when we do.