Privacy in plain language.

The basics: your name, your contact details (email and/or phone), and the credentials you use to sign in. If you choose Google sign-in, we receive what Google sends us, typically your name and email.

Identity verification: for transactional use, your BVN or NIN, with a brief selfie at verification time. This sits with our banking partner and with us, nowhere else.

The records you create: the agreements you make, the payments you log, the messages exchanged through the platform.

Technical metadata: device and connection information, app interactions, and information needed to keep the system secure.

Website chat:if you talk to Berit, our website assistant, we keep the conversation, and any contact details you choose to share are saved so the team can follow up — about early access, or a question that needs a person. That's all they're used for. Sharing them is optional; the chat works fine without.

Kehbar is for adults. We don't knowingly collect data from anyone under 18. If we learn we have, we delete it.

Your bank balance. Your wider transaction history outside of Kehbar. Your phone contacts. Your camera roll. Your location, beyond what's needed for security and identity verification.

We don't connect to your social media accounts. We don't read your messages with other apps. We have no business model that depends on knowing more about you than the product needs.

To run the product. Agreements, payments, and conversations between two parties: these are the records the product exists to keep.

To verify identity. Money moves between named people. We need to know who's on each side.

To keep the platform secure. Detecting compromised accounts and fraudulent activity requires looking at how the system is used.

To comply with the law. Banking and anti-money-laundering regulations require certain record-keeping and reporting.

Banking partners. They need transaction data to actually move money. They see what they need to see, no more.

Authorities, when legally required. A court order, a regulator with proper authority, or specific legal obligations may compel disclosure. We comply with the law. We don't share records voluntarily, and we'll notify you where we're permitted to.

A small number of trusted service providers, for infrastructure, customer support tooling, fraud screening. These providers see only what they need to perform their service, and they're bound by contract to use it only for that purpose.

Never anyone else. We don't sell data. We don't license it. We don't run advertising.

See what we hold. You can request an export of your data at any time, via the app or by emailing help@kehbar.com.

Correct what's wrong. If something we hold about you is inaccurate, tell us and we'll fix it.

Delete your account. You can close your account, and the data we hold is deleted (actually deleted, not soft-archived). We retain what we're legally required to keep, for as long as we're legally required to keep it; the rest goes.

Move your records. Data portability: you can take your records with you in a standard format.

While your account is active: as long as you keep using Kehbar.

After you delete: a short retention window for legal and regulatory reasons (banking records, anti-fraud requirements, the kinds of obligations banks face). After that window, deletion.

Anonymous aggregate analytics may persist, but they can't be tied back to you.

Necessary cookies (session tokens, security cookies) are always on, because the product needs them.

Analytics cookies we may use to understand how people use the product. You can decline these without losing functionality.

Advertising cookies we don't use. We don't track you across other sites, and we don't sell your behaviour to anyone who does.

When our practices change, we update this page. For material changes, we notify you in-app or by email before they take effect.

Older versions are kept on file. If you'd like to see what changed and when, write to help@kehbar.com.

For privacy questions, help@kehbar.com reaches us. We aim to respond within a few working days.

You also have the right to complain to the Nigerian data-protection regulator if you believe we're not handling your data properly. They can be reached through their official channels.

For the operational side of how your data is protected, see Security. For the legal terms of using Kehbar, see Terms.