Who operates KRI and what this Policy covers
KRI is building a marketplace that helps shoppers discover and arrange services with local market Guides. In this Policy, “KRI,” “we,” “us,” and “our” refer to the operator of KRI's website, mobile applications, marketplace, support processes, and related services.
This Policy applies when you browse the KRI website, join a waitlist, create or use an account, apply to become a Guide, submit verification information, request or provide a service, make or receive a supported payment, communicate through KRI, contact support, submit a review or report, or otherwise interact with the service.
An independent market seller, payment provider, verification provider, app store, website, or other third party may have its own privacy policy. KRI's Policy does not replace the information those organisations are required to provide about their separate processing.
Information you provide
We collect information you choose to provide when you join a waitlist, create an account, complete a profile, apply as a Guide, publish a service, send a request, communicate, submit a review or report, contact support, or exercise a privacy right.
This may include your name, email address, phone number, profile photo, preferred language, market interests, account settings, Guide biography, services, specialties, availability, identity or verification information, receiving-account details, and the content of requests, reviews, reports, and support messages.
Please provide only information that is accurate and reasonably necessary. Do not place passwords, one-time codes, full payment-card numbers, another person's confidential information, or unrelated identity documents in free-text fields or ordinary support messages.
Information generated through use
KRI may create records when you use the service. These can include account activity, waitlist status, Guide application progress, verification status, requests, accepted bookings, cancellations, service completion, wallet or fee activity, payment references, reviews, reports, moderation decisions, and communications associated with marketplace activity.
We may also receive technical information such as device and browser type, operating system, app version, language, network information, IP address, approximate location derived from network information, crash data, diagnostics, timestamps, and security events. Precise device location is collected only when the feature requires it and the appropriate permission or legal basis applies.
Usage events may show screens viewed, searches performed, buttons selected, feature progress, referral source, and similar interactions. We use these signals to understand whether the product works, protect accounts, and improve important journeys.
Information from service providers
KRI may receive limited information from providers that support identity checks, payment or receiving accounts, hosting, communications, analytics, fraud prevention, app distribution, and reliability. For example, a provider may return a verification result, account status, transaction reference, delivery status, or security signal.
We do not need every piece of information held by a provider. We seek to receive only what is reasonably necessary to operate the relevant feature, understand an error, investigate misuse, or meet legal obligations.
Information may also be provided by another user through a booking, review, support request, or report. We assess such information in context; an allegation is not automatically treated as a proven fact.
How KRI uses information
We use information to create and secure accounts; manage waitlists; review Guide applications; display appropriate profiles and services; support requests, bookings, communications, and payments; provide customer care; and send service-related notices.
We also use information to verify required details, prevent fraud and account abuse, investigate reports, enforce policies, protect people and the service, maintain records, diagnose failures, measure product performance, improve features, and comply with lawful obligations.
Where permitted, KRI may use contact details to share launch, product, or promotional information. You can use available controls or the instructions in a message to manage optional marketing, while important account, safety, legal, or transaction communications may still be sent when necessary.
Legal bases for processing
Where data-protection law requires a legal basis, KRI may process information because it is necessary to perform a contract or take requested steps before a contract, comply with a legal obligation, protect vital interests, pursue legitimate interests that are not overridden by your rights, or act on consent.
Legitimate interests may include securing accounts, preventing fraud, improving service reliability, understanding product use, supporting users, establishing or defending legal claims, and operating a responsible marketplace.
When processing depends on consent, you may withdraw consent through the available control or by contacting KRI. Withdrawal does not make earlier lawful processing invalid and may affect a feature that cannot operate without the relevant information.
Analytics and product measurement
KRI may use limited analytics to understand whether pages load, which features are used, where users leave a journey, whether a launch campaign is effective, and where crashes or errors occur. Admin and marketing teams may use aggregated trends to make product and communication decisions.
Analytics events are designed to describe product activity rather than the private content of a user relationship. They must not contain passwords, full payment-card numbers, private message content, contact lists, recovery codes, or precise location.
Analytics controls may differ between the website, app, browser, device, and service provider. Where consent is required, KRI will seek it before using the relevant non-essential technology.
KRI does not sell personal information
KRI does not sell personal information. We do not provide private account, booking, message, or payment information to another company in exchange for money so that the company can use it for unrelated purposes.
Using a service provider to host the app, deliver a notification, perform a permitted verification, process a supported payment, or measure product reliability is not treated by KRI as selling information. Those providers are limited to their legitimate role and applicable terms.
If KRI introduces a materially different advertising or data-sharing practice, this Policy and any required choices will be updated before the practice applies.
International processing
KRI is focused on services in Nigeria, but some technology and professional service providers may store or process information in another country. Privacy and government-access rules can differ between countries.
When an international transfer requires safeguards, KRI will use measures appropriate to the information and applicable law, which may include contractual protections, provider assessments, access controls, encryption, and limits on the data transferred.
You can contact KRI if you have a question about international processing relevant to your information.
How long information is kept
KRI keeps information only as long as reasonably necessary for the purpose for which it was collected and for legitimate follow-on needs. The appropriate period depends on the type of record, account status, marketplace activity, safety and fraud risk, dispute needs, and legal, tax, accounting, or regulatory requirements.
Some information may be deleted or anonymised after an account is closed, while limited records may be retained to complete a transaction, prevent repeated abuse, respond to a complaint, enforce an agreement, establish legal rights, or comply with law.
Backups and technical logs may take additional time to cycle out through secure retention processes. KRI does not keep identifiable information indefinitely merely because storage is available.
How KRI protects information
KRI uses reasonable administrative, technical, and organisational measures designed for the nature of the service and information. These may include access controls, authentication, encryption in transit where appropriate, provider review, logging, monitoring, backups, staff restrictions, and incident-response processes.
No website, mobile app, database, or transmission method can guarantee absolute security. You also play an important role: use a strong unique password, protect your email and phone accounts, keep your device updated, review unexpected activity, and never share a one-time code.
If you believe KRI information or an account has been compromised, secure connected accounts and contact official KRI support promptly. Do not send the exposed password or code in the report.
Your privacy rights
Depending on the law that applies, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction, objection, portability, withdrawal of consent, or a review of certain decisions.
A right may be subject to conditions or lawful exceptions. For example, KRI may need to keep information required to complete a transaction, protect another person's rights, prevent fraud, respond to a dispute, or comply with law.
KRI may need to verify your identity and connection to the account before completing a request. This protects users from someone else obtaining or changing their information. We will explain when more information or a lawful limitation applies.
Account controls, permissions, and notifications
Use available profile and account controls to update information, manage a service, review activity, or request account deletion. Some marketplace records cannot be changed after the event because an accurate history is necessary for payments, reviews, reports, and disputes.
Device settings can control permissions such as notifications, camera, photos, or location. Disabling a permission may limit the feature that relies on it, but KRI should continue to provide unrelated features where reasonably possible.
You can manage optional marketing communications through the method provided. KRI may still send necessary messages about account security, verification, bookings, payments, safety, policies, or requested support.
Website storage and third-party links
The KRI website may use cookies, local storage, or similar technologies that are necessary for security, preferences, sessions, performance, or permitted analytics. Browser and device controls can remove or block some storage, although parts of the service may then work differently.
KRI pages may link to an app store, payment provider, map, social platform, market resource, or another third-party service. A link does not make KRI responsible for that service's privacy practices, content, availability, or security.
Review the destination and its privacy information before providing personal or financial information. Report a KRI link that appears misleading, broken, or unsafe.
Children's privacy
KRI accounts and Guide services are intended for adults aged 18 and over. KRI does not knowingly invite children to create marketplace accounts or provide identity and booking information.
If you believe a child has provided personal information to KRI contrary to these requirements, contact official support with enough information to identify the issue. Do not publish the child's information or send more sensitive data than is necessary.
KRI will review the report and take reasonable steps consistent with applicable law, including deletion or account restriction where appropriate.
Changes, questions, and complaints
KRI may update this Policy as the marketplace, technology, providers, legal obligations, or privacy practices change. The current version will be published here with an updated date. A material change may also be communicated through the app, website, or an account contact where appropriate.
Continued use after a change does not remove any consent requirement or privacy right that applies under law. Review the current Policy when an important feature or data practice changes.
If you have a question or complaint, contact KRI first so the issue can be understood. You may also have the right to complain to an appropriate data-protection authority, and using KRI support does not remove that right.
Contact KRI
For a privacy question, rights request, complaint, or concern about this Policy, contact KRI at cierdesantus@gmail.com.
Explain the type of request and identify the account using only the information reasonably necessary. Do not send a password, PIN, one-time code, full card number, or unnecessary identity document in an ordinary message.
KRI may ask for additional information through an appropriate process to verify identity, protect another person's rights, or understand the request before responding.