Privacy policy

KURA Mobility (“KURA”, “we”) runs a battery-swap network for electric motorcycles, tricycles and boats in Nigeria. We are the data controller for the personal data described here, and we process it in line with the Nigeria Data Protection Act 2023 (NDPA). You can reach us about privacy at support@kuramobility.com.

• Account details: your phone number, name, a PIN (stored only as a secure hash) and, if you add one, your email address.
• Identity verification: the ID you choose to verify with (for example NIN, BVN, voter’s card, passport or driver’s licence), its number and photos. Staff see only the last four digits.
• Vehicles: registration, model and the battery pack currently fitted.
• Swaps and bookings: which hub, when, which packs went in and out, charge levels and the agent who served you.
• Payments: amounts, method and references. Card and bank details are handled by Paystack. We never see or store your full card number.
• Location: only if you allow it, to show hubs near you. For vehicles fitted with a tracker, location and battery readings from the vehicle.
• Device and usage: a device identifier and basic technical data used to keep your account secure and spot fraud.
• Support: messages you send us and the case history.

• To provide the service (contract): your account, bookings, swaps, plans, receipts and refunds.
• To keep packs and accounts safe (legitimate interests and legal obligation): identity checks, tracking where each pack is, unusual-activity checks, and pausing bookings when a pack isn’t returned.
• To meet the law (legal obligation): tax, accounting and lawful requests from authorities.
• To tell you about your service (contract): booking, payment and refund updates in the app.
• Optional data sharing (consent): anything you opt into in the app’s consent settings. You can withdraw consent at any time.

We do not sell your personal data.

• Paystack, to take payments and send refunds.
• Service providers who host our systems, store images and send email, under contracts that limit their use of your data.
• Your fleet owner, if you drive a vehicle on a fleet account: they see that vehicle’s swaps and your limits.
• Your cooperative, if you belong to one: it may be told when a pack on your vehicle is overdue, and sees totals for its members.
• Authorities, when the law requires it.

We keep your data while your account is open and for as long as needed afterwards to meet legal, tax and accounting duties and to resolve disputes. Swap, battery and payment records are kept as part of our financial and safety records. When data is no longer needed, we delete or anonymise it.

Under the NDPA you can ask us to:

• give you a copy of your personal data;
• correct anything that’s wrong;
• delete your data, where we don’t need to keep it;
• restrict or object to some uses, and withdraw consent;
• move your data to another provider.

Write to support@kuramobility.com from the phone number or email on your account. You can also complain to the Nigeria Data Protection Commission (NDPC).

We protect your data with encrypted connections (HTTPS), access controls by role, an audit trail of changes to accounts and money, and a certified payment partner. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the NDPC as the law requires.

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.