This policy explains what Kampe collects, why, and the choices you have. We've written it in plain language. It is aligned to the Nigeria Data Protection Act / NDPR and, for people using Kampe in the European Economic Area or the United Kingdom, to the EU GDPR and the UK GDPR.
1. Who we are
Kampe ("Kampe", "we", "us") is a multi-currency personal-finance app launched through the Uphiva community in Nigeria. Kampe is operated by its registered company in Nigeria, which is the data controller responsible for your personal data. For any privacy question, or to reach our Data Protection Officer, email hello@kampe.app.
If you are in the EEA or the UK. Kampe is offered to you from Nigeria, which brings us within the EU GDPR and the UK GDPR under Article 3(2) of each. We are the controller for your data. Write to us in English at hello@kampe.app and we will handle your request ourselves.
2. What we collect
You give us
- Account details — your name and email address when you create a Kampe account.
- Things you add — manual balances, goals, subscriptions, notes, and statements you choose to upload.
- Consents — a record each time you connect an account or agree to a data use.
When you connect an account
- Read-only financial data — balances and transaction history from accounts you link through Mono (Nigerian banks and domiciliary accounts), from the Kampe browser extension reading your own signed-in session on a provider's dashboard (for example Grey), or from statements you import.
- We receive a read-only access token from the provider. We never see or store your bank login or card numbers, and we can never initiate a payment.
Automatically
- Device & usage data — basic information such as device type, and logs needed to run the service securely and prevent abuse.
- Referral and fraud-prevention signals — for every account, so the referral programme cannot be farmed: your network address and its range, a browser identifier (the
kampe_bidcookie), a short description of your device (screen size, time zone, language and similar), your browser's connection fingerprint, the approximate place you signed up from, and a normalised form of your email address. We store these as keyed hashes, never the raw values, so they can be compared between accounts but not read back. If you arrive through someone's referral link or code, we also record which code and when you followed it. In the Android app, what Google Play reports about how the app was installed (the referral code on the link, the campaign source, and when the link was clicked and the install began) and Google Play's integrity verdict for the app and device at sign-up (whether it is the genuine Kampe app on a certified device). The verdict is Google's assessment, not a device identifier: it can also say whether an app able to capture or control the screen was running, but never which apps you have. We never read your contacts, your list of apps or your advertising ID.
3. How we use it
- To show your one honest number — net worth, safe-to-spend, goals and subscriptions across currencies.
- To send you reminders you ask for (renewals, bills, tax dates) and important service notices.
- To categorise transactions and generate optional insights. For this, some transaction text may be sent to our AI provider (Anthropic) — used only to understand language, never to decide any amount, and the app works fully without it.
- To keep the service secure, detect abuse, and meet our legal obligations.
- To run the referral programme fairly: crediting the person who referred you, and stopping one person from rewarding themselves through extra accounts, emulators or fake installs. To do that we give each referral a score from the signals above and group accounts that share them, so a person can look at the ones that look like one person behind many accounts.
We do not sell your data, share it with advertisers, or use it to make automated decisions with legal effects about you.
4. Our legal basis for each use
We need a lawful reason for every use of your data. Here is ours, use by use:
- Running your account and showing your position — performing our contract with you. Kampe cannot exist without this.
- Connecting a bank, wallet or statement source — your consent, given per source and withdrawable in the app at any time.
- AI categorisation, insights and answers — your consent. AI is optional and every figure is identical with it switched off.
- Reminders you switch on — your consent, withdrawable per channel.
- Security, abuse detection and the audit trail — our legitimate interests in keeping the service and its users safe, weighed against your rights and recorded.
- Referral credit and referral-fraud prevention — our legitimate interests in a referral programme that rewards real referrals, weighed against your rights and recorded.
- Counting how the site and app are used — our legitimate interests in knowing what works, done without cookies or any identifier stored on your device. See Cookies & analytics.
- Service notices, tax records and answering regulators — our legal obligations.
Where we rely on consent you can withdraw it at any time, and withdrawing it doesn't affect processing already carried out. Where we rely on legitimate interests you can object, and we stop unless we have compelling grounds not to. Both are covered in Your rights.
5. Account connections (Mono, Grey, imports)
Connections are read-only and made only when you authorise them. Access tokens from providers are held in an encrypted secrets vault, separate from your other data. You can disconnect a source at any time from within the app; we stop syncing it and delete its stored tokens. Each provider also has its own privacy terms, which apply to their handling of your data.
6. Who we share with
We use a small set of vetted service providers (processors) to run Kampe. They act only on our instructions under contract. We never sell your data, and we never store your card number. Our processors are:
- Neon — secure database hosting (where your data is stored).
- Vercel — application hosting and delivery.
- Anthropic (Claude) — to categorise transactions and generate insights; used for language, never to decide any amount. AI features are optional.
- Resend — to send account and reminder emails.
- Paystack and Stripe — to process Kampe Pro payments. Your card details go directly to them; Kampe never sees or stores your card number.
- Termii — to send WhatsApp/SMS reminders, when you enable them.
- Mono — to securely read your bank/telco data, only if you choose to link an account.
- Uphiva — to let you sign in with your Uphiva account.
Grey: Kampe reads your Grey data through a browser extension that runs in your own browser session — our servers only receive the transactions your own session retrieves, so Grey is not one of our processors.
We also share data for legal & safety reasons where required by law, or to protect the rights and safety of users and the public. We use exchange-rate services to fetch currency rates, but we send them no personal data. We never sell personal data, and we do not share it for advertising.
7. How we protect it
Data is encrypted in transit and at rest. Provider tokens live in a dedicated encrypted vault. We apply least-privilege access, keep tamper-evident audit logs, and review our security posture. No system is perfectly secure, but protecting your data is central to how Kampe is built.
8. How long we keep it
We keep your data while your account is active. If you close your account or ask us to erase your data, we permanently delete your financial data, credentials and sessions. We keep a minimal, anonymised account record only where we must — for example to preserve our tamper-evident security audit trail, and to meet tax or other legal obligations. If you send feedback with a screenshot, we drop the screenshot within 30 days of closing the report. You can export or delete your data at any time from Settings → Privacy.
In more detail:
- Account, balances, transactions, goals, plans — while your account is open; erased when you delete it.
- Statement files you import — never stored. The file is read in memory to build your preview and dropped; only the transactions you confirm are saved.
- Feedback screenshots — dropped within 30 days of the report being closed.
- Sessions and signed-in devices — until they expire or you revoke them.
- Consent records and the security audit trail — kept in anonymised form after deletion, because the trail is hash-chained and pulling one entry out would break the evidence for every other user.
- Traffic counts — held against a key that changes daily and cannot be joined across days, then rolled up into totals.
- Referral and fraud-prevention evidence — 90 days, then deleted automatically. This is the one record that outlives an account deletion within that window, because deleting an account is exactly how someone farming referrals would try to erase the trail.
- Payment and tax records — for as long as tax law requires us to keep them.
9. Your rights
Wherever you are, you have the right to:
- Access a copy of the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Erase your data ("right to be forgotten").
- Port your data — receive it in a portable format.
- Object to or restrict certain processing, and withdraw consent.
- Complain to a data protection regulator if you think we have got it wrong.
You don't have to ask us for the first four. Sign in and open Settings → Privacy. Export downloads everything we hold about you as a JSON file you can take anywhere, and Delete account erases it. For the rest, email hello@kampe.app. We answer within 30 days and tell you if a request is complex enough to need longer.
Who to complain to. In Nigeria, the Nigeria Data Protection Commission (NDPC). In the EEA, the supervisory authority for the country where you live or work, or where the problem happened. In the UK, the Information Commissioner's Office at ico.org.uk. You can go to them without coming to us first, though we would rather have the chance to fix it.
10. Automated decisions and profiling
Kampe calculates. Your safe-to-spend figure, your Kampe Score, goal projections and money suggestions are all produced by code from the data you gave it, and every one of them shows its workings so you can check, override or ignore it.
None of it decides anything about you. We do not lend, we do not score you for credit, and we never pass any assessment of you to a lender, insurer, landlord or employer.
The one exception is the referral programme, and it decides only whether a referral reward (free Pro days) is given. Two rules apply automatically: a referral is not credited when the person referred is the same person as the referrer (including through variations of one email address, such as dots or a "+tag" in a Gmail address), and a referrer's reward is given only for a real paid purchase — not a free trial, a test or promotional purchase, or one discounted below the programme's threshold. A pass shorter than a month (a day or week pass) is a trial of Pro, not a purchase for this purpose. When a referral's score is high, the free Pro days it would earn can also be held for a few days while a person checks it; a hold is temporary, is released automatically once the account shows ordinary use, and never touches Pro you paid for. You will see a held reward on your Refer a friend screen with a button to ask for a review. These rules have no legal or similarly significant effect on you, and nothing about your money, your data or your account depends on them. If you think one was applied to you wrongly, email hello@kampe.app and a person will look at it — which is also what the Nigeria Data Protection Act 2023 (section 37) and Article 22 of the GDPR would give you.
AI reads language only — naming a transaction, drafting a goal, answering a question. It never computes a monetary amount. Switch it off and every number stays exactly the same.
11. Cookies & analytics
The app uses only what it needs to work: a cookie to keep you signed in, and local storage for things like your theme. If you follow someone's referral link, two more cookies — kampe_ref (the code) and kampe_ref_at (when you followed it) — remember it for up to 30 days so the right person is credited when you sign up, and are cleared once used. Once you are signed in, a third cookie, kampe_bid, holds a random browser identifier for up to 90 days so that many accounts opened from one browser to farm referral rewards can be recognised; it is removed when you delete your account. There is no advertising cookie, no cross-site tracking, and no third-party analytics script anywhere on kampe.app or in the app.
We count traffic ourselves, and it is cookieless. The beacon stores nothing on your device and sets no identifier. Our server turns your IP address and browser string into a salted hash that changes every day, counts the visit against that hash, and discards the IP without writing it down. Nothing joins one day to the next and nothing points back to you. Because the counting neither stores nor reads anything on your device, and the only cookies are the ones the service needs (signing in, a referral link you chose to follow, and the fraud-prevention browser identifier), there is no cookie banner to click, and you won't see one.
12. Transfers, children & changes
Where your data goes. Some of our processors — including Neon, Vercel, Anthropic, Resend and Stripe — store or process data outside Nigeria (for example in the United States and the EU). Where data leaves Nigeria, we rely on appropriate safeguards under the Nigeria Data Protection Act 2023, such as the provider's data-processing agreement.
If you are in the EEA or the UK. You give your data to us directly, and we are in Nigeria. Neither the European Commission nor the UK Government has made an adequacy decision for Nigeria, so where we pass your data on to a processor we rely on that processor's data-processing agreement, which incorporates the European Commission's Standard Contractual Clauses and, for the UK, the ICO's International Data Transfer Addendum. Ask us which safeguard covers a particular processor and we will tell you.
Children. Kampe is for adults. It is not intended for anyone under 18, we do not knowingly collect data from anyone under 18, and if you believe a child has an account, email us and we will remove it.
Changes. We may update this policy. We'll change the "last updated" date above and, for material changes, tell you in the app or by email.
13. Contact
Questions, requests, or concerns about your data? Email hello@kampe.app and we'll help.