PRIVACY

Privacy Policy

How Fundsverse collects, uses, shares and protects your personal information.

Version 1.0Effective 29 August 2026

Relationship with our agreements

This Privacy Policy explains how Fundsverse collects, uses, stores, discloses and otherwise processes personal information. It should be read together with our Terms of Service and, where applicable, our End-User Agreement.

The Terms of Service govern your general use of Fundsverse, while the End-User Agreement contains additional terms applicable to financial services made available through Fundsverse.

This Privacy Policy describes our data-processing practices and does not replace those agreements.

1. About this Privacy Policy

This Privacy Policy explains how Kyvaro Limited ("Kyvaro", "Fundsverse", "we", "us", or "our") collects, uses, stores, shares, and protects personal information when you use the Fundsverse website, application, and related services.

Fundsverse is a financial clarity and money-management platform operated by Kyvaro Limited. Certain financial services available through Fundsverse are provided using financial infrastructure supplied by Anchor Software Ltd and relevant banking and financial institution partners.

This Privacy Policy applies to information processed through Fundsverse, including information provided when you create an account, request access, use the application, complete identity verification, or use financial services made available through the platform.

2. Who is responsible for your information?

Kyvaro Limited is responsible for the Fundsverse product and determines the purposes for which personal information is processed in connection with the Fundsverse service.

For certain financial-service activities, Anchor Software Ltd and relevant banking or financial institution partners may independently or jointly process information in connection with providing the underlying financial infrastructure, performing their own compliance obligations, and providing the financial services requested through Fundsverse.

The responsibilities of Kyvaro, Anchor, and relevant financial institution partners may therefore differ depending on the particular processing activity.

3. Information we collect

3.1 Account and profile information

Depending on how you use Fundsverse, we may collect information such as your name, email address, username, country, account information, and other information you provide when creating or managing your account.

3.2 Financial information you provide

Fundsverse may process financial information that you choose to enter or maintain within the application. This may include information about accounts, balances, savings, investments, financial goals, transactions, income, expenses, and other information used to build your financial picture.

Fundsverse currently relies on manually entered financial-account information for these features. We do not currently provide external bank-account linking or automatic bank-account synchronisation.

3.3 Identity verification and KYC information

Nigerian users who seek access to Fundsverse financial services may be required to provide information necessary for identity verification and customer due diligence.

This may include your Bank Verification Number (BVN), name, date of birth, and other identifying or verification information required for onboarding.

We process this information to verify identity, conduct customer due diligence, prevent fraud and misuse, and comply with applicable financial-services, anti-money laundering, counter-terrorist financing, sanctions, and other legal or regulatory requirements.

3.4 Transaction and financial-service information

If you use financial services through Fundsverse, we may process information relating to wallets, deposits, withdrawals, transfers, payments, transaction amounts, transaction status, beneficiaries, financial-service activity, and related records.

3.5 Device and technical information

We may collect technical information associated with your use of Fundsverse, including device information, application information, authentication information, IP address, security signals, and other technical information needed to operate and secure the service.

3.6 Usage and analytics information

We use Firebase services to help us understand how Fundsverse is used, measure product performance, identify technical issues, and improve the application.

4. Why we use your information

Depending on the circumstances, we may process personal information to:

  • create and manage your Fundsverse account;
  • authenticate and secure your account;
  • provide and improve the Fundsverse product;
  • maintain your financial picture and related records;
  • provide financial insights and related functionality;
  • perform identity verification and customer due diligence;
  • provide or facilitate eligible financial services;
  • process transactions and maintain financial records;
  • prevent fraud, abuse, unauthorised activity and security threats;
  • conduct sanctions, AML/CFT and related compliance checks;
  • meet legal, regulatory and compliance obligations;
  • respond to support requests and communicate with you;
  • understand product usage and improve our services;
  • enforce our Terms of Service and End-User Agreement; and
  • protect our rights, users, systems, and services.

5. Lawful bases for processing

We do not rely on a single lawful basis for all processing. Depending on the purpose and circumstances, we may rely on one or more lawful bases recognised under applicable data-protection law.

5.1 Contract

We may process information where it is necessary to create, maintain, or perform our agreement with you, including providing your Fundsverse account and requested services.

5.2 Legal and regulatory obligations

We may process information where necessary to comply with legal, regulatory, financial-services, AML/CFT, KYC, sanctions, record-keeping, reporting, fraud-prevention, or other applicable obligations.

5.3 Legitimate interests

Where permitted by applicable law, we may process information where it is necessary for legitimate interests such as securing our systems, preventing fraud and abuse, improving our services, maintaining service reliability, and protecting our legal rights, provided those interests are not overridden by applicable rights and interests of data subjects.

5.4 Consent

Where consent is the appropriate lawful basis, we will request it in a clear manner and will explain the relevant processing. Where applicable, you may withdraw consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and may not stop processing where another lawful basis applies.

6. Financial services and Anchor

Eligible Nigerian users may access certain financial services through Fundsverse using financial infrastructure supplied by Anchor Software Ltd and relevant banking or financial institution partners.

Depending on the services available to you, these may include an in-app wallet, deposits, withdrawals to your bank account, transfers, bill payments, bulk transfers, and other financial services that we may make available through our infrastructure partners.

Before access to the in-app wallet is provided, we may need to collect and verify information required for customer onboarding and KYC/CDD. Relevant information may be securely transmitted to Anchor and processed by Anchor and applicable financial institution partners for the purposes of providing the requested services and satisfying applicable legal and regulatory requirements.

Anchor and its relevant partners may also process information under their own legal, regulatory, contractual, security, and compliance obligations.

7. When we share information

We do not sell your personal information.

We may share personal information where reasonably necessary with:

  • Anchor Software Ltd;
  • relevant banking and financial institution partners;
  • technology and infrastructure service providers;
  • security, fraud-prevention, and compliance service providers;
  • professional advisers and service providers acting on our behalf;
  • regulators and government authorities where required or permitted;
  • law-enforcement authorities where legally required or permitted; and
  • other parties where you have directed us to share the information.

We limit sharing to information reasonably necessary for the relevant purpose and, where applicable, require appropriate contractual or other safeguards.

8. International data transfers

Some of the technology, infrastructure, or service providers used by Fundsverse may process personal information outside Nigeria.

Where personal information is transferred outside Nigeria, we take reasonable steps to ensure that the transfer is carried out in accordance with applicable Nigerian data-protection requirements, including using an applicable adequacy mechanism, approved transfer instrument, contractual or other recognised safeguard, or another lawful basis where permitted.

Where required, we will provide information about relevant international transfers and the safeguards used to protect personal information.

9. Data security

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, destruction, or other unlawful processing.

Depending on the system and type of information involved, these measures may include encryption in transit and at rest, access controls, authentication controls, environment-level protection of credentials, application security controls, monitoring, fraud controls, and other safeguards appropriate to the risks involved.

No internet-based service can guarantee absolute security. If we become aware of a personal-data breach that requires notification under applicable law, we will take the required steps to investigate, remediate, and notify relevant parties.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Information may need to be retained after account closure for purposes including financial records, KYC/CDD, AML/CFT, fraud prevention, regulatory reporting, dispute resolution, legal claims, security, and other legal or compliance requirements.

Deleting your Fundsverse account therefore does not necessarily mean that all information is immediately deleted.

11. Your rights

Subject to applicable law and relevant exceptions, you may have rights concerning your personal information, including:

  • the right to be informed about processing;
  • the right to request access to your personal information;
  • the right to request correction of inaccurate information;
  • the right to request erasure where applicable;
  • the right to object to certain processing;
  • the right to request restriction of processing where applicable;
  • the right to data portability where applicable;
  • the right to withdraw consent where consent is the lawful basis;
  • rights relating to decisions based solely on automated processing where applicable; and
  • the right to lodge a complaint with the Nigeria Data Protection Commission.

These rights are subject to applicable legal limitations. For example, we may be unable to delete or stop processing certain information where retention or processing is required by law or necessary for legitimate legal or regulatory purposes.

12. How to exercise your rights

You may contact Fundsverse through the official contact channels provided on our website to make a privacy request or ask questions about how your personal information is processed.

We may need to verify your identity before responding to a request, particularly where the request involves access to personal information or sensitive account information.

We will handle valid requests within the periods required by applicable law and may explain where a request cannot be fully satisfied because of a legal, regulatory, security, or other permitted restriction.

13. International users and financial-service availability

Fundsverse permits account registration from certain countries outside Nigeria.

However, the financial services and KYC functionality described in this Privacy Policy are currently available only to eligible users in Nigeria.

Registering for Fundsverse from another supported country does not mean that the Nigerian financial-services layer is available to you.

14. Children

Fundsverse is not intended for individuals under 18 years of age, and we do not knowingly provide accounts or financial services to persons under that age.

If we become aware that we have collected personal information from a person who is not eligible to use Fundsverse, we may take appropriate steps to restrict the account and address the information in accordance with applicable law.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Fundsverse, our services, our data-processing practices, our service providers, or applicable legal and regulatory requirements.

Each version of this Privacy Policy will have an effective date and version identifier. Where we make material changes, we may provide an appropriate notice and, where required, obtain a new acknowledgement or consent.

16. Contact us

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, or have concerns about how your personal information is handled, please contact Fundsverse through the official contact channels provided on our website.