Privacy policy

Last updated 28 October 2026

This policy explains what personal information KollectCash collects when you use KollectCash, why, who we share it with, and the rights you have under the Nigeria Data Protection Act 2023. If anything is unclear, write to us at support@toolinc.com.ng.

1. What we collect

• Account details: your name, email address, phone number, password (stored only in scrambled form) and profile photo. If you sign in with Google or Apple, we receive your name, email and photo from them.
• Identity check: your BVN or NIN, name and date of birth. We send them to our verification partner to confirm they match, and keep only the result and the last four digits of the number.
• Money: your wallet top-ups, contributions, payouts, withdrawals and the bank account you withdraw to. Your card details go straight to Paystack; we never see or store them.
• Groups and messages: the groups you create or join, your payment history in them, your trust score, group chat messages and problems you report to us.
• Device information: push notification addresses for your phone or browser, and basic logs such as when you sign in.

2. Why we use it

• To run your account, your groups and your wallet (our contract with you).
• To verify who you are and prevent fraud and money laundering (our legal obligations).
• To send you codes, reminders, payment updates and replies to your reports by email, SMS and push notification.
• To show other members of your groups your name, photo, payment status and trust score, so everyone can see who has paid.
• To keep KollectCash secure and to fix and improve it.

We do not sell your information, and we do not use it for advertising.

3. Who we share it with

• Other members of your groups, as described above. They never see your BVN, NIN, email or bank details.
• Service providers who work for us under contract: Paystack (payments and bank transfers), Dojah (identity checks and SMS), Resend (email), Google Firebase (push notifications and Google sign-in), Apple (Apple sign-in) and Render (hosting).
• Authorities, when the law requires it, for example a court order or a request from a regulator.

Some of these providers store information outside Nigeria. When they do, we rely on the safeguards the Nigeria Data Protection Act allows, such as contracts that protect your information.

4. How long we keep it

We keep your information while your account is open. After you close it, we keep financial and identity records for as long as Nigerian law requires (generally at least five years) and then delete them. Other information is deleted or anonymised sooner.

5. Keeping it safe

Connections to KollectCash are encrypted, passwords are hashed, and only authorised staff can see account details, with every change to money and roles recorded in an audit log.

6. Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct information that is wrong (you can change most of it in Settings);
• delete your information, unless the law requires us to keep it;
• stop or limit some uses of it, or move it to another service.

Write to support@toolinc.com.ng and we will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.

7. Children

KollectCash is only for people aged 18 and over.

8. Changes

If we change this policy in a way that matters, we will tell you in the app first. See also our Terms of use.