Privacy Policy

Noxilo Tech Limited ("we", "us", or "our") operates the KudiNow application and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

We collect only the information necessary to provide and improve our loan services. Your personal data is encrypted and stored securely. We do not sell your personal information to any third party.

By using KudiNow, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our services.

When you use KudiNow, we may request permission to access the following information:

• Mobile number — for account registration and communication
• Full name — for identification and account management
• National ID number — for KYC verification and compliance
• Education level — to improve credit scoring models
• Employment type — to assess loan application eligibility
• Marital status — for risk assessment and loan limit determination
• Income — for repayment capacity assessment and loan approval
• Account information — for loan disbursement and repayment processing

We use your personal information solely for the purposes outlined below. We collect only the minimum data necessary and process it in accordance with applicable privacy laws in Ghana.

We use your information for the following purposes:

• Account Registration and Management: To create and maintain your account, verify your identity, and manage your loan applications
• Identity Verification and KYC: To verify your identity using ID documents, facial recognition, and other verification methods to prevent identity theft and comply with regulatory requirements
• Credit Assessment: To evaluate your creditworthiness and determine loan eligibility, including analyzing financial behavior patterns from SMS and device data
• Risk Control and Fraud Prevention: To detect and prevent fraudulent activities, assess device security risks, and protect both you and our platform from malicious behavior
• Loan Disbursement and Repayment: To process loan disbursements to your account and manage repayment schedules
• Customer Support: To respond to your inquiries, resolve issues, and provide technical assistance
• Service Improvement: To analyze usage patterns and improve our services, including troubleshooting and enhancing user experience
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities

We may use automated decision-making processes, including algorithms and credit scoring models, to:

• Assess your creditworthiness for loan eligibility
• Determine loan amounts and terms
• Detect potentially fraudulent applications

These automated decisions help us process loan applications efficiently. If you disagree with an automated decision, you may request human review by contacting us through the details provided in the "Contact Us" section.

We adhere to the principle of data minimization. We only collect and process personal information that is:

• Necessary for the purposes described above
• Adequate but not excessive for those purposes
• Accurate and kept up to date

We will not use your personal information for any purpose other than those disclosed in this Privacy Policy without your consent, unless required by law.

Your personal information is stored on our secure servers. We will not share your personal information with any third party except in the following circumstances:

• Legal Requirements: When required by law, regulation, or government authority.
• Security Purposes: When necessary to prevent fraud, illegal activities, or to protect user safety.

We do not sell your personal information and there is no form of information trading.

KudiNow employs industry-standard security measures to protect your personal information:

• Transmission Encryption: All data is protected using encryption protocols during transmission to prevent interception or tampering.
• Storage Encryption: Your personal information is stored on controlled secure servers and secured using strong encryption algorithms.
• Access Control: Only authorised personnel with a legitimate need may access your data, and all access is logged.

We retain your personal information for the following periods:

• Active Accounts: While your account is active or as needed to provide services
• Closed Accounts: We will delete or anonymise your personal information within 30 days of account closure, unless required by law to retain it longer
• Legal Compliance: We may retain certain information for longer periods if required by applicable laws, regulations, or legal processes

After the retention period, we will securely delete or anonymise your information.

Under applicable privacy laws, you have the following rights regarding your personal information:

• Right of Access: To confirm whether we hold your personal information and to know the source, processing purpose, and recipients of the information.
• Right to Rectification: To request correction of inaccurate, incomplete, or outdated information.
• Right to Erasure: In certain circumstances (e.g., when the information is no longer necessary or exceeds the purpose of use), to request deletion of your personal information.
• Right to Object: To object to the processing of your personal information based on your particular situation.

Please note that limiting or withdrawing certain permissions may affect the normal functioning of KudiNow features, including the loan application process.

To exercise any of these rights, please submit a request using the contact details provided in the “Contact Us” section of this policy. We will respond within the timeframes prescribed by applicable law.

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the relevant data protection supervisory authority.

This Privacy Policy is publicly available and accessible to all users. You may review the current version at any time through the following methods:

Within the KudiNow application, you can access this Privacy Policy by navigating to the "Settings" icon and selecting "Privacy Policy".

The latest version of this Privacy Policy is available on our official website: https://www.noxilotechlimited.com/privacy.html

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Provide prominent notice within the KudiNow application, typically via an in-app notification or pop-up message
• Post the updated Privacy Policy on our website with the "Last Updated" date clearly indicated at the top

Your continued use of the KudiNow service after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

This Privacy Policy is effective as of 18 May 2026. Any updates will be effective immediately upon posting.

KudiNow is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

We use the following third-party services that may collect information about you:

• AppsFlyer: For mobile attribution, analytics, and fraud prevention

These third-party services have their own privacy policies and terms of service. We encourage you to review their policies before using our service.

If you have any questions, comments, or requests regarding this Privacy Policy or your personal information, please contact us using the details below: