Privacy Policy
How Nkora collects, uses and protects personal information when you use our website and products.
Who we are and scope
In this policy, "Nkora", "we", "us" and "our" refer to [REGISTERED COMPANY NAME], a company established in Kigali, Rwanda, registered under number [REGISTRATION NUMBER], with its registered address at [REGISTERED BUSINESS ADDRESS].
This Privacy Policy explains how Nkora collects, uses and protects personal information when you visit nkora.app or use Nkora products, including Facturee, Maison Pro, MyNkap and MyNjangi (together, the "Services").
Some products may provide additional privacy information within the product. Where they do, that information applies together with this policy.
Information you provide
We collect information you give us directly, for example when you:
- contact us through our website, by email or through a messaging channel;
- create an account or complete your profile;
- enter business, property, financial or group information into a product;
- request support or submit a request about your data.
This may include your name, email address, phone number, company or organization name, country, and the content of your messages.
Account information
When you create an account, we process the information needed to identify you and secure your access, such as your name, email address or phone number, login credentials and account settings. We do not store passwords in readable form.
Transaction-related information
Depending on the product you use, the Services process records you create or manage, such as customers, quotations, invoices, receipts, payments, rent and booking records, expenses, budgets, loans, debts, group contributions and payouts.
When a payment is processed through a third-party payment provider, that provider handles the payment details under its own terms and privacy policy. We receive only the information needed to record the transaction, such as the amount, date, reference and status.
Technical and device information
When you use our website or products, we may automatically receive technical information such as your IP address, browser or app version, device type, operating system, language settings, pages or screens viewed, and the date and time of access. This information helps us keep the Services secure and working correctly.
Why we process information
We process personal information for the following purposes:
Service delivery
To create and manage your account, provide product features, store the records you create, and process your requests.
Security
To protect accounts, detect and prevent fraud or misuse, and maintain the integrity of the Services.
Customer support
To answer your questions, respond to your requests and communicate with you about the Services.
Product improvement
To understand how the Services are used, fix problems and develop improvements. Where practical, we use aggregated or de-identified information for this purpose.
Legal obligations
To comply with applicable laws, regulations, accounting and tax requirements, and lawful requests from competent authorities.
The legal basis for each type of processing depends on the laws that apply to you and to the relevant Service. [LEGAL BASES UNDER APPLICABLE LAW, IF REQUIRED]
Third-party services
We work with carefully selected service providers who help us operate the Services, such as hosting and cloud infrastructure, communication services, messaging platforms, and payment providers. These providers may process personal information on our behalf and only as needed to provide their services to us.
Current categories of providers: [LIST OF PROVIDER CATEGORIES, e.g. cloud hosting, payment providers, messaging services]
We do not sell your personal information. We may disclose information where required by law, to protect the rights and safety of users or Nkora, or as part of a business reorganization, subject to appropriate safeguards.
Some providers may process information outside your country. Where this happens, we take steps to ensure that the information remains protected.
Data retention
We keep personal information only for as long as needed for the purposes described in this policy, including to provide the Services, resolve disputes, and meet legal, accounting or tax obligations. When information is no longer needed, we delete or anonymize it.
Retention periods: [RETENTION PERIODS BY DATA TYPE]
Your rights
Depending on the laws that apply to you, you may have the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information;
- object to or request restriction of certain processing;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent data protection authority.
To exercise these rights, contact us at contact@nkora.app. We may need to verify your identity before responding.
Data deletion
You can request deletion of personal information associated with a Nkora service at any time. Instructions are on our Data Deletion page.
Children
The Services are not directed at children. We do not knowingly collect personal information from children without appropriate consent. [MINIMUM AGE, IF APPLICABLE]
Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where the changes are significant, inform users through the Services or by other appropriate means.
Contact information
For questions about this policy or your personal information, contact:
[REGISTERED COMPANY NAME]
[REGISTERED BUSINESS ADDRESS]
Kigali, Rwanda
Email: contact@nkora.app