Legal

Privacy Policy

Last updated 12 September 2026 · Applies to the Kepper mobile app and kepperhq.com

Kepper is a wallet with an insight and budgeting layer on top. That means we hold two kinds of things for you: the money in your wallet, and the record of how it moved. This policy explains what we collect, why, and what you can ask us to do with it.

What we collect

  • —Identity details. Your name, phone number, email, date of birth and the identification required to open and keep a wallet under Nigerian regulation.
  • —Wallet activity. Transfers in and out, virtual card charges, categories, budgets and spend limits you set.
  • —Your money profile. The answers you give during onboarding, used to shape budgets, insights and goals.
  • —Device and usage data. Device model, app version, crash logs and the events we need to keep the app working and secure.

We never ask for your bank login. Kepper does not hold credentials for accounts at other institutions and cannot sign in to them on your behalf.

How we use it

To run your wallet and process your transfers; to produce the insights, budgets, spend limits and PAYE estimates you asked for; to verify your identity and prevent fraud; to support you when something goes wrong; and to meet our legal and regulatory obligations.

We do not sell your data, and we do not use your transaction history to target you with third-party advertising.

Who we share with

Only the parties needed to deliver the service: our licensed banking and payment partners, our card issuing partner, identity-verification providers, cloud hosting and customer-support tooling, and regulators or law enforcement where we are legally required to respond.

Every processor is bound by contract to use your data only for the service they provide to us.

Storage & security

Your data is encrypted in transit and at rest using bank-grade standards. Access inside Kepper is limited to the people who need it, logged, and reviewed. On your device, access is protected by Face ID, biometrics or your passcode.

Your rights

Under the Nigeria Data Protection Act you can ask for a copy of your data, correct anything inaccurate, object to certain processing, withdraw consent where processing relies on it, and request deletion. Write to us and we will respond within 30 days.

Retention & deletion

We keep your data while your wallet is open. After closure we retain the records financial regulation requires us to keep, and delete the rest. You can start that process yourself at any time.

Contact

Questions about this policy, or a request about your data: contact@kepperhq.com.