How we handle your money data.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Kobolytics. By using the service, you agree to the collection and use of information as described here.

We collect three categories of data, and nothing else.

Personal information.

• Full name
• Email address
• Phone number, if you give it to us

Financial data, via Mono. When you connect your bank, Mono shares the following with us on your authorisation:

• Bank account identifiers (non-sensitive — never your password)
• Transaction history
• Account balances
• Income and expense records derived from the above

Device & usage data.

• IP address
• Device type and browser
• App usage patterns
• Log data

Three channels:

• Direct input from you — when you register or update your account
• Secure connections via Mono — only when you authorise the link
• Automated technologies — cookies and server logs

We never collect your banking login credentials. That authentication happens inside Mono and never reaches our systems.

We use your data to:

• Provide the financial analytics and insights you signed up for
• Categorise your transactions
• Improve the product and the experience
• Detect fraud or misuse
• Communicate with you about your account

We process your data only for these specified purposes. We do not sell it, and we do not use it to train third-party models.

Under the NDPR, we process your data on one of three grounds:

• User consent — when you connect your financial accounts
• Contractual necessity — to provide the services you signed up for
• Legitimate interest — to improve and secure the platform

By using Kobolytics, you:

• Explicitly consent to us accessing your financial data through Mono
• Authorise us to process that data for analytics purposes

You can withdraw consent at any time by disconnecting your bank in settings, or by contacting us at info@zodostechnology.com. Withdrawal will not affect anything we did before you withdrew.

We do not sell your personal data. Ever.

We share data with a small number of parties, and only where we have to:

• Mono — to access your financial data securely
• Service providers — hosting, analytics, and infrastructure providers, contractually obligated to protect your data
• Regulatory authorities — when we are legally required to disclose

We keep your data only for as long as we need it to:

• Provide the service
• Comply with legal obligations
• Resolve any disputes

You can request deletion of your account and data at any time. We will action it within 30 days, except where we are legally required to retain certain records.

We implement, at a minimum:

• Encryption in transit (TLS/HTTPS) and at rest (AES-256)
• Secure storage with hardened cloud infrastructure
• Access controls and authentication on every internal system
• Monitoring and logging across the stack

We work hard to keep your data safe. We will also be honest with you: no system is completely secure, and we cannot guarantee absolute protection. If something happens, you will hear from us promptly.

Under the NDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — ask us to fix inaccurate or incomplete data
• Delete — request erasure of your data
• Withdraw consent — at any time, without giving a reason
• Object — to specific kinds of processing
• Port — receive your data in a machine-readable format

To exercise any of these rights, email info@zodostechnology.com and we will respond within 30 days.

We use cookies and similar technologies to:

• Improve the experience
• Analyse usage patterns
• Maintain session security

You can control cookies through your browser settings. Disabling essential cookies may affect parts of the service.

The service may contain links to third-party websites. We are not responsible for their privacy practices — please read their policies before sharing anything.

Kobolytics is for adults — 18 years of age and older. We do not knowingly collect data from children. If you believe a child has provided us with information, contact us and we will delete it.

Your data may be processed outside Nigeria by our trusted service providers. Where this happens, we make sure the transfer complies with applicable data protection laws — including the safeguards required by the NDPR.

We may update this policy from time to time. When we make significant changes, we will notify you by email or in the app — and we will update the "Last updated" date at the top of this page.

If you have questions or requests about this policy:

• Company: Zodos Technology
• Email: info@zodostechnology.com

Zodos Technology is committed to full compliance with the Nigeria Data Protection Regulation (NDPR) and industry best practices for data protection. By using Kobolytics, you acknowledge that you have read and understood this Privacy Policy.