This policy explains what Kampe collects, why, and the choices you have. We've written it in plain language. It is aligned to the Nigeria Data Protection Act / NDPR.
1. Who we are
Kampe ("Kampe", "we", "us") is a multi-currency personal-finance app launched through the Uphiva community in Nigeria. Kampe is operated by its registered company in Nigeria, which is the data controller responsible for your personal data. For any privacy question, or to reach our Data Protection Officer, email hello@kampe.app.
2. What we collect
You give us
- Account details — your name and email address when you create a Kampe account.
- Things you add — manual balances, goals, subscriptions, notes, and statements you choose to upload.
- Consents — a record each time you connect an account or agree to a data use.
When you connect an account
- Read-only financial data — balances and transaction history from accounts you link through Mono (Nigerian banks and domiciliary accounts), from the Kampe browser extension reading your own signed-in session on a provider's dashboard (for example Grey), or from statements you import.
- We receive a read-only access token from the provider. We never see or store your bank login or card numbers, and we can never initiate a payment.
Automatically
- Device & usage data — basic information such as device type, and logs needed to run the service securely and prevent abuse.
3. How we use it
- To show your one honest number — net worth, safe-to-spend, goals and subscriptions across currencies.
- To send you reminders you ask for (renewals, bills, tax dates) and important service notices.
- To categorise transactions and generate optional insights. For this, some transaction text may be sent to our AI provider (Anthropic) — used only to understand language, never to decide any amount, and the app works fully without it.
- To keep the service secure, detect abuse, and meet our legal obligations.
We do not sell your data, share it with advertisers, or use it to make automated decisions with legal effects about you.
4. Consent & legal basis
We process your data on the basis of your consent (for connecting accounts and optional features), to perform our contract with you (running your account), and our legitimate interest in keeping the service secure. You can withdraw consent at any time — see Your rights. Withdrawing consent doesn't affect processing already carried out.
5. Account connections (Mono, Grey, imports)
Connections are read-only and made only when you authorise them. Access tokens from providers are held in an encrypted secrets vault, separate from your other data. You can disconnect a source at any time from within the app; we stop syncing it and delete its stored tokens. Each provider also has its own privacy terms, which apply to their handling of your data.
6. Who we share with
We use a small set of vetted service providers (processors) to run Kampe. They act only on our instructions under contract. We never sell your data, and we never store your card number. Our processors are:
- Neon — secure database hosting (where your data is stored).
- Vercel — application hosting and delivery.
- Anthropic (Claude) — to categorise transactions and generate insights; used for language, never to decide any amount. AI features are optional.
- Resend — to send account and reminder emails.
- Paystack and Stripe — to process Kampe Pro payments. Your card details go directly to them; Kampe never sees or stores your card number.
- Termii — to send WhatsApp/SMS reminders, when you enable them.
- Mono — to securely read your bank/telco data, only if you choose to link an account.
- Uphiva — to let you sign in with your Uphiva account.
Grey: Kampe reads your Grey data through a browser extension that runs in your own browser session — our servers only receive the transactions your own session retrieves, so Grey is not one of our processors.
We also share data for legal & safety reasons where required by law, or to protect the rights and safety of users and the public. We use exchange-rate services to fetch currency rates, but we send them no personal data. We never sell personal data, and we do not share it for advertising.
7. How we protect it
Data is encrypted in transit and at rest. Provider tokens live in a dedicated encrypted vault. We apply least-privilege access, keep tamper-evident audit logs, and review our security posture. No system is perfectly secure, but protecting your data is central to how Kampe is built.
8. How long we keep it
We keep your data while your account is active. If you close your account or ask us to erase your data, we permanently delete your financial data, credentials and sessions. We keep a minimal, anonymised account record only where we must — for example to preserve our tamper-evident security audit trail, and to meet tax or other legal obligations. If you send feedback with a screenshot, we drop the screenshot within 30 days of closing the report. You can export or delete your data at any time from Settings → Privacy.
9. Your rights (NDPR)
You have the right to:
- Access a copy of the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Erase your data ("right to be forgotten").
- Port your data — receive it in a portable format.
- Object to or restrict certain processing, and withdraw consent.
- Complain to the Nigeria Data Protection Commission (NDPC) if you believe your rights have been breached.
To exercise any of these, email hello@kampe.app. We'll respond within the timeframe the law requires.
10. Cookies
This marketing site and the app use only the cookies and local storage needed to work (for example, to keep you signed in). We don't use advertising or cross-site tracking cookies.
11. Transfers, children & changes
Some of our processors — including Neon, Vercel, Anthropic, Resend and Stripe — store or process data outside Nigeria (for example in the United States). Where data leaves Nigeria, we rely on appropriate safeguards under the Nigeria Data Protection Act 2023, such as the provider's data-processing agreement. Kampe is not intended for anyone under 18. We may update this policy; we'll change the "last updated" date above and, for material changes, tell you in the app or by email.
12. Contact
Questions, requests, or concerns about your data? Email hello@kampe.app and we'll help.