Your privacy.
Our responsibility.

Who We Are

yrkolo.NG is a financial savings platform operated in Nigeria. We provide tools to help individuals save, plan, and build financial discipline through our products: myKolo, KoloFocus, KoloPay, Kollabo, FoodBox, and The Wealth Blueprint.

This Privacy Policy applies to all users of our platform, website, and mobile applications. By using yrkolo, you agree to the practices described here.

Information We Collect

We collect only what we need to provide you with a safe, functional savings experience.

We do not collect sensitive data such as health information, political opinions, or biometric data beyond what is required for legally mandated identity verification.

How We Use Your Information

We use the information we collect to:

• Create and manage your yrkolo account
• Process and track your savings, deposits, and withdrawals
• Verify your identity and comply with Nigerian financial regulations (CBN, FCCPC, NDPR)
• Send you transaction alerts, account updates, and important notices
• Detect, prevent, and investigate fraud or suspicious activity
• Respond to your support requests and resolve complaints
• Improve our platform features, design, and overall experience
• Send you relevant product updates or promotional messages (you can opt out at any time)

Sharing Your Data

Your data stays with us. We only share it in limited, necessary situations:

• Payment processors: To facilitate deposits and withdrawals through licensed payment providers (for example, Paystack). They handle your transaction data under their own strict privacy policies.
• Identity verification partners: To confirm your BVN and satisfy KYC requirements as required by Nigerian law.
• Regulatory authorities: If required by law, a court order, or a legitimate request from a Nigerian regulatory body such as the CBN or FCCPC.
• Service providers: Trusted third parties who help us operate our platform (hosting, SMS, email delivery). They are contractually bound to keep your data confidential.
• Business transfers: If yrkolo is acquired or merged, your data may transfer as part of that transaction. We will notify you before this occurs.

We do not transfer your personal data outside Nigeria without ensuring an adequate level of protection is in place.

Data Security

We take the security of your financial information seriously. Our protections include:

• Encrypted data transmission using HTTPS/TLS on all connections
• Secure storage of sensitive credentials with hashing and salting
• Rate limiting and brute-force protection on login and OTP flows
• Access controls ensuring only authorised staff can access user records
• Regular security reviews of our codebase and infrastructure

Despite these measures, no system is completely immune to risk. If you suspect unauthorised access to your account, contact us immediately at email.yrkolo.ng@gmail.com or call +234 905 890 6168.

Data Retention

We keep your personal data for as long as your account is active and for a period afterward as required by Nigerian law. Specifically:

• Account and transaction records are retained for a minimum of 5 years after account closure, as required by Nigerian financial regulations.
• KYC documents are retained for the duration required by the CBN and FCCPC.
• Support communications are kept for up to 2 years.
• Marketing preferences and analytics data are retained for up to 12 months after last activity.

When retention periods expire, data is securely deleted or anonymised so it can no longer be linked to you.

Your Rights

Under the Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Ask us to correct inaccurate or incomplete information.
• Right to deletion: Request that we delete your data, subject to our legal retention obligations.
• Right to object: Object to us processing your data for marketing purposes.
• Right to portability: Request your data in a structured, machine-readable format.
• Right to withdraw consent: Where we rely on your consent to process data, you can withdraw it at any time.

To exercise any of these rights, contact us using the details in the Contact section below. We will respond within 30 days.

Cookies and Tracking

We use cookies and similar technologies on our website and app to:

• Keep you logged in between sessions
• Remember your preferences
• Understand how users navigate our platform so we can improve it
• Detect fraudulent or suspicious activity

You can disable cookies in your browser settings, but doing so may affect the functionality of certain features. We do not use third-party advertising cookies.

Children's Privacy

yrkolo is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account or shared data with us, contact us immediately and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or product features. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or an in-app notification
• Where required by law, seek your renewed consent

Continued use of yrkolo after a policy update means you accept the revised terms.

Contact Us

If you have any questions about this policy, want to exercise your data rights, or need to report a privacy concern, reach us through any of the channels below.