Privacy Policy

• Account data — your name, email address, password (stored only as a strong one-way hash) and optional phone number.
• Transaction data — the services you buy, amounts, references, recipient numbers (such as a phone number or meter number) and timestamps.
• Verification data — when you use NIN or BVN services, the identification number you submit and the result returned by the licensed identity provider.
• Technical data — device type, browser, IP address and usage logs collected for security and fraud prevention.

• To operate your wallet and fulfil the purchases you make.
• To send transaction receipts, alerts and service messages.
• To prevent fraud, enforce rate limits and keep accounts secure.
• To comply with legal obligations, including financial-records and KYC requirements.
• To improve the product — always using aggregated or de-identified data where possible.

We do not sell your personal data. Ever.

NIN and BVN lookups are passed to licensed identity providers solely to perform the verification you request. Results are shown to the account that requested them and kept in that account's history. You must have the data subject's consent, or another lawful basis, before submitting someone else's details for verification.

• Payment processors — to fund your wallet and process card or bank-transfer payments.
• Service providers — mobile networks, utility companies, examination bodies and identity providers, only to the extent needed to fulfil your purchase.
• Infrastructure partners — hosting, database and email providers bound by data-processing agreements.
• Authorities — where disclosure is required by law or a valid legal process.

All traffic between your device and our servers is encrypted with TLS. Passwords are hashed with bcrypt and are never stored or transmitted in plain text. Password-reset links are single-use and expire after one hour. Access to production data is restricted and logged.

We keep account and transaction records for as long as your account is active and thereafter for the period required by Nigerian financial-records law. When you delete your account, your profile is removed and remaining records are retained only where the law requires it.

Under the NDPR you have the right to:

• access a copy of the personal data we hold about you;
• correct inaccurate data;
• delete your account and associated data (subject to legal retention duties);
• object to or restrict certain processing;
• lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, email contact@kinatrust.com. We respond within the timelines the NDPR prescribes.

We use strictly necessary cookies to keep you signed in and to protect your session. Optional analytics cookies (Google Analytics) are used to understand aggregate usage and do not identify you personally.

If we make material changes to this policy, we will notify you on the platform before the changes take effect. The effective date at the top of this page always reflects the latest version.

Privacy questions and data requests: contact@kinatrust.com.