Legal

Privacy policy

Last updated 7 October 2026 · Applies to kioskmarketplace.app and the Kiosk apps for iPhone and Android.

Who we are

Kiosk is a marketplace operated by Prime Horizon Tech, a technology company registered in Nigeria, serving buyers and sellers in Nigeria, Ghana and Côte d'Ivoire. This policy explains what we collect about you, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it.

Written requests about your personal data should be sent to michaeloni.dba@gmail.com. We answer within 30 days.

What we collect

Account details — your name, email address, phone number and country, plus the sign-in record for your account.
Buying and selling records — the items you list, the orders you place or fulfil, quantities, prices, delivery notes, messages tied to an order, and disputes.
Payment records — amount, currency, status and our payment partner's reference for each payment, refund and payout. Card details are never sent to Kiosk; they are handled by our payment partner.
Bank details, if you sell — the account name, account number and bank you give us so we can pay you out. We use them only for payouts to you.
Identity and business checks, if you sell — your business name, registration number and contact email, and where required an identity document, so we can verify who we are paying and who is trading on the platform.
Wallet records — money added to or taken from your Kiosk wallet, and the status of each movement.
Technical records — the app version and platform you use, and the country your connection appears to come from, which we use to show approximate prices in your local currency. We also keep a record of actions that change orders, permissions or compliance controls.

Why we collect it

To run the transaction: list, buy, hold payment, fulfil, confirm, settle.
To hold a buyer's payment until the buyer confirms the outcome, which is the protection Kiosk is built on.
To pay sellers into their bank account and to keep a wallet balance accurate.
To check who is trading and receiving money, and to spot and stop fraud.
To meet legal duties, including anti-money-laundering, tax and record-keeping rules.
To keep the service secure and to tell you what is happening with your orders and payouts.

How long we keep it

Personal records are kept while your account is open and for as long as a legal or accounting duty needs them. Order, payment and payout records are kept after an account is deleted, because transaction evidence must remain for disputes, refunds, audits and financial reporting. Once your account is deleted, those records are no longer linked to your name, email, phone number, bank details or identity documents — they are detached from you and kept as a transaction reference only.

Your rights

Ask for a copy of the data we hold about you — you can download it yourself from your account page.
Ask us to correct anything inaccurate.
Delete your account from inside the app or website, at any time.
Ask us to stop contacting you for product updates.
Complain to your national data protection authority: in Nigeria the Nigeria Data Protection Commission, in Ghana the Data Protection Commission, in Côte d'Ivoire the ARTT.

Deleting your account

You can delete your Kiosk account yourself — there is no need to write to anyone first. Open Delete account while signed in, confirm the wording, and your account, profile, bank details, wallet history, business and identity records are removed.

We will ask you to settle a few things first, and we tell you exactly what: orders that are still open, money still in your wallet, a payout on its way, an unresolved dispute, or a compliance record that has to name the person who signed it. After deletion you can still sign up again with the same email address.

Children

Kiosk is for adults. Someone under 18 should not create an account or trade on the platform. If you believe a child has given us personal data, write to us and we will remove it.

How we protect it

Access to data is limited by role, so a buyer's records are readable only by that buyer and by staff who need them. Every order change, permission change and admin action is written to an audit log. Traffic is encrypted in transit, backups are taken and restore-tested, and our security controls are reviewed against SOC 2 and ISO 27001 — the live status of those controls is published on our buyer protection page.

Changes to this policy

When we change this policy we update the date below and, for material changes, tell you in the app or by email.

Questions about your data

Write to michaeloni.dba@gmail.com and tell us what you would like — a copy, a correction, or deletion. You can also delete your account yourself without writing to anyone.