Your data, your control.

Kurukoo is the controller.

Kurukoo decides why and how the personal data described here is used. You can reach the privacy contact at hello@kurukoo.ng with 'Privacy' in the subject.

For people in Nigeria, the Nigeria Data Protection Act 2023 applies. For people in Ireland or the European Union, the General Data Protection Regulation applies. Where the two overlap, we apply the stronger protection.

What you give us, and what the service needs.

• Account details: phone number, name, area, language and the channels you connect.
• Request details: what you ask for, the address or landmark, photos or files, quotes, completion proof and dispute evidence.
• Messages: chat text, voice transcripts, support messages and the ratings you send.
• Payment details: amounts, references and status. Full card details are handled by the payment provider, not stored by Kurukoo.
• Provider details: trade, area, verification records, payout details and the jobs you accept.
• Technical details: IP address, device type, pages visited, errors and cookies or local storage needed to keep you signed in.
• Approximate location: used to show nearby providers. We fuzz your position before another person sees it.

To do the job, and to keep it safe.

Under the NDPA and GDPR, we rely on one or more of these bases: your consent, performing our contract with you, a legal obligation, and our legitimate interest in running a safe service. Where we rely on consent, you can withdraw it at any time; that does not affect processing that already happened.

• Provide the service: understand the request, find a provider, show a quote and track the work.
• Process payments and keep the ledger accurate.
• Check providers and prevent fraud, abuse and impersonation.
• Resolve disputes and enforce the terms.
• Support you when something goes wrong.
• Improve the product and fix errors.
• Meet legal, tax and accounting obligations.

Only the people who need it.

We do not sell your personal data. We do not share it with advertising networks. Some providers may process data outside Nigeria; where that happens, we use contractual safeguards and only the data needed for the task.

• The provider: the details needed to do the job. We do not hand over your phone number or address outside the platform.
• Payment providers: to process the payment route you choose, verify provider responses and, where enabled, confirm refunds.
• Messaging and hosting providers: Telegram, WhatsApp, the web host and email, when you use those channels.
• AI model providers: only the text needed to answer or route a request, under contract.
• Security and file-scanning providers: to check files and keep the service safe.
• Authorities: when the law requires it, or when someone's safety is at risk.

As long as the job and the law need.

Account and profile data are kept while your account is active. Request and chat content is kept while the account is active and for the dispute window, then deleted or de-identified. Payment and ledger records are kept for the period required by tax and accounting law. Verification records are kept while a provider is active and for a reasonable period after. Support messages are kept until the issue is resolved and for a reasonable period after.

Cookies and local storage last until they expire or you clear them. Backups are kept for a limited period and then overwritten. If a legal hold or an open dispute applies, we keep only what is needed for that matter.

The data-retention page sets out the categories in more detail.

See it, fix it, delete it.

Use the privacy controls in My details, or email hello@kurukoo.ng with 'Privacy' in the subject. We may need to confirm it is you before we act. We will tell you what we did, or why we cannot do it, within the time the law allows.

• Ask for a copy of the personal data we hold about you.
• Correct something that is wrong.
• Delete your account and the data that is not needed for a legal or accounting record.
• Restrict or object to a use you did not expect.
• Ask for your data in a portable format.
• Withdraw consent where we relied on it.
• Complain to the Nigeria Data Protection Commission, or in Ireland to the Data Protection Commission.

Protected in transit and at rest.

Traffic travels over HTTPS. In production, the database is kept on an encrypted volume and access is limited to the people who run the service. Files are scanned before they count as proof. Card details are handled by the payment provider.

No system is perfect. Protect your phone and your handoff codes, and tell us at once if you think someone else has access to your account.

Kurukoo is for adults.

Kurukoo is not for anyone under 18. We do not knowingly collect data from a child. If you believe a child has given us personal data, email hello@kurukoo.ng and we will remove it.

A short list, not a tracker.

Kurukoo uses essential cookies and local storage to keep you signed in, remember your language and hold unsent messages. There are no advertising or analytics cookies. The cookies page lists the keys and how to clear them.

A new version gets a new date.

We may update this policy. The effective date at the top changes when we do. If the change is material, we will tell you in the app or by message before it applies.

Ask us directly.

Email hello@kurukoo.ng with 'Privacy' in the subject. Include the phone number on the account and what you want us to do. A person reads it.