← Back to the site

Privacy Policy

Last updated: October 4, 2026 — Data controller: AKORIT SARL

1. Data controller

AKORIT SARL, publisher of the Kapoopa platform (website and mobile app), is the controller of the personal data collected through the Service. For any question about your data: info@kapoopa.app (full details in our legal notice).

2. Data collected

CategoryDataSource
AccountName, username, email address, phone number, country, profile photo, bio, password (stored encrypted)You, when signing up or in your profile; Google or Apple if you log in with them
Identity verification (KYC)Document type (national ID card, passport or driving licence), photo of the front and, except for passports, the back, selfie, verification statusPhotos taken live with your device's camera
PaymentDeposits, withdrawals, winnings, commissions, referral bonuses, wallet balance, transaction references, withdrawal details (phone number or bank details)The Service and Flutterwave (your card or mobile money details are entered with Flutterwave, never with us)
ChallengesChallenges created or taken on, proofs (photos, videos, comments, location if you add it), starting proofs, decisions and disputesYou
MessagesConversations with other users, images sent in the chatYou
TechnicalIP address, login history, last activity date, device type, push notification identifiersYour device
ReviewsRatings (1 to 5) and comments you give or receive after a challengeYou and other users
ReferralsYour referral code, the referrer who invited you, the people you referred and bonuses paidYou, when signing up or in the Referrals screen
PreferencesFollowed categories, whether you receive news and announcements, language and currencyYou

3. Purposes and legal bases

  • Providing the Service (account, challenges, escrow, payments, messaging, notifications): performance of the contract between us (Terms of Use).
  • Verifying your identity before any withdrawal and fighting fraud, multiple accounts and money laundering: legal obligation and legitimate interest.
  • Settling disputes between creators and participants and moderating content: legitimate interest and performance of the contract.
  • Sending you emails and notifications about your account (proof received, winnings credited, verification approved…): performance of the contract.
  • Telling you about new challenges in the categories you follow, and reminding you that a reserved spot is about to expire: performance of the contract.
  • Sending you news and announcements (featured challenges, promotions, a reminder after a period of inactivity), targeted by your categories, country, language and activity on the Service: legitimate interest. You can object at any time in the app settings or your profile.
  • Running the referral programme (linking you to your referrer, paying bonuses, preventing fraud): performance of the contract and legitimate interest.
  • Securing and improving the Service, measuring its use (sign-ups, first deposits, challenges attempted) in aggregate: legitimate interest.
  • Showing amounts in your currency and the site in your language: your country is inferred from your IP address, on our servers and without being stored, and your language from your browser's; legitimate interest.

No decision about you is made in a fully automated way: identity verification and dispute arbitration are carried out by a person.

4. Identity verification (KYC)

  • The photos of your document and your selfie are used only to check that you are the account holder, by comparing your face with the photo on the document.
  • They are kept in private storage that cannot be reached from any public address. Only authorised Kapoopa administrators can view them.
  • They are never shown to other users or passed on to third parties, except where required by law (request from a competent authority).
  • If your verification is refused, you can submit new documents.

5. What other users see

  • Everyone, even without an account: your username, profile photo, bio, country, average rating, the reviews you have received (rating, comment and the author's username) and the challenges you have published.
  • The creator of a challenge you take on: your proofs (photos, videos, comment, location if you added it) and, if the challenge requires it, your starting proof with the date it was sent. A screenshot may contain other information (balance, name, notifications…): hide anything that isn't required before sending it.
  • The person you are talking to in a conversation: your messages and images.
  • Your real name, email, phone number, balance and identity documents are never shown to other users.

6. Messaging and moderation

Your conversations are stored so that they are available on all your devices. In case of a report, dispute or suspected fraud, Kapoopa administrators may read the messages concerned, solely to settle the dispute or enforce the Terms of Use.

7. Recipients and processors

Your data is never sold. It is shared only with the providers the Service needs, strictly to carry out their task:

  • Flutterwave: payment processing.
  • Google (Firebase): push notifications in the mobile app; Google login if you choose it.
  • Google (AdMob): ads in the mobile app (see "Advertising in the app").
  • Apple: Apple login if you choose it; notifications on iPhone.
  • Your browser's notification services (Google, Mozilla, Apple, Microsoft): delivering web notifications if you turn them on. Their content is end-to-end encrypted.
  • Our hosting provider (see the legal notice): data storage and server operation.
  • Competent authorities, upon legal request or in case of suspected fraud or money laundering.

8. Hosting and transfers

Data is hosted on servers located in the European Union. Some of the providers listed above may process data outside your country of residence; these transfers are limited to what is strictly necessary and covered by those providers' contractual safeguards.

9. Retention periods

DataPeriod
Account and profileAs long as your account is active. When the account is deleted, identifying data (name, username, email, phone, photo, identity documents, sign-in and notification tokens) is erased immediately and the account is anonymised, subject to the periods below
KYC documentsFor the life of the account, then for the period required by anti-money-laundering rules, before deletion
TransactionsThe period required by accounting and anti-money-laundering obligations
Proofs, messages, reviewsAs long as your account is active, then kept in anonymised form for as long as needed to settle disputes and meet legal obligations
Login history12 months

10. Your rights

You have the right to access, correct and erase your data, to object to and restrict its processing, and to obtain a copy of it. You can change some of your information from your profile, delete your account from the app, and exercise your other rights by writing to info@kapoopa.app. We reply within one month.

Some data cannot be erased immediately when the law requires us to keep it (transactions, KYC documents): it is then archived and used only for that obligation. If you believe your rights are not respected, you can contact the data protection authority of your country (in Côte d'Ivoire, the ARTCI).

11. Notifications

Push notifications (app and browser) keep you informed of your account's activity: messages, proofs, winnings, reviews, identity verification, new challenges in your categories. News and announcements can be turned off separately, in the app settings or your profile on the website, without turning off your account notifications. You can turn off all notifications at any time in your phone's or browser's settings. Emails related to the security and operation of your account cannot be turned off while the account is active.

12. Advertising in the app

The mobile app may show ads served by Google AdMob, only in the challenge list and on a challenge page, never in the wallet, payments, identity verification or messaging. To do so, Google may use your device's advertising ID, your IP address and technical information (model, OS, language) to serve, measure and cap ads. Depending on your country, your consent is requested on first launch; you can change it in the app settings. You can also reset or limit the advertising ID in your phone settings. Kapoopa never shares your name, email or payment data with Google. Learn more: policies.google.com/technologies/ads.

13. Security

AKORIT SARL takes technical and organisational measures to protect your data: encrypted connections (HTTPS), encrypted passwords, identity documents in private storage, administration access restricted to authorised people. As no system is infallible, use a strong password and never share it. If a data breach is likely to put you at risk, you will be informed.

14. Minors

The Service is reserved for people aged at least 18. We do not knowingly collect data about minors; if you believe a minor is using the Service, please let us know.

15. Cookies

The Service only uses cookies that are strictly necessary for it to work, which are exempt from consent under the applicable rules:

CookiePurposeDuration
kapoopa-sessionKeeping you logged in between pages2 hours
XSRF-TOKENProtection against cross-site request forgery (security)2 hours
kapoopa_refRemembering the referral code from an invitation link until you sign up (set only if you open such a link)30 days
kapoopa_localeRemembering the language you chose (set only if you choose one)1 year
kapoopa_currencyRemembering the display currency you chose (set only if you choose one)1 year

We use no advertising cookies and no third-party trackers for audience measurement or targeting. If this were to change, this policy would be updated and your consent requested beforehand.

16. Changes

This policy may be updated. Substantial changes will be notified to you through the Service or by email before they take effect.