Privacy Policy

This Privacy Policy explains how Kivu Money Services LLC ("Kivu," "we," "us") collects, uses, and protects your personal information when you use kivumoney.com and, once launched, the Kivu money transfer service.

1. Information we collect

• Waitlist and contact data: your email address and any information you send us.
• Account and identity data (at launch): name, date of birth, residential address, phone, email, government identification details, and a photo identification document used for verification.
• Transaction data: transfer amounts, recipients, delivery method, and transfer history.
• Technical data: device and browser information needed to deliver and secure the site and app. We do not currently run third-party analytics.

2. How we use it

• To provide the Service: verifying identity, processing transfers, delivering funds, and providing support.
• To meet legal obligations: anti-money laundering and sanctions compliance, recordkeeping, fraud prevention, and reporting required by law.
• To improve the Service: aggregate, non-identifying information about how the product is used.
• To communicate with you about your transfers, your account, and (if you opt in) product updates.

We do not sell your personal information.

3. Who we share it with

We share personal information only as needed to operate and comply: with our payment, foreign-exchange, identity-verification, and disbursement partners, each a regulated financial institution or licensed provider, currently including Stripe (payment processing) and Currencycloud, a Visa solution (foreign exchange and cross-border settlement); with service providers who process data on our behalf under contractual safeguards; with regulators and law enforcement where required by law; and in connection with a corporate transaction, subject to this Policy.

Public transfer verification. Every completed transfer carries a reference number and QR code. Anyone holding that reference can view, at kivumoney.com/verify without logging in, the recipient's first name, the amount received, the delivery date, and the transfer status. No other information about the sender or recipient is shown. By sending a transfer you agree to this limited disclosure, which exists so recipients and their families can confirm what arrived.

4. Data minimization and security

• Identification documents are used for verification and are not retained by Kivu after successful verification.
• Traffic between you and Kivu is encrypted in transit.
• Sensitive personal data retained by Kivu, including date of birth and street address, is encrypted at rest.
• Compliance and transaction records are kept in an append-only audit system that prevents alteration or deletion.
• Access to personal data inside Kivu is restricted by role, individually credentialed, and logged with the named identity of the person accessing it.

5. Retention

We retain transaction and verification records for at least five years after the relevant transaction or the end of the customer relationship, as required by U.S. Bank Secrecy Act recordkeeping rules, and otherwise retain personal data only as long as needed for the purposes described here.

6. International transfers of data

Because Kivu delivers money to Rwanda, information necessary to complete a transfer (such as recipient name and delivery details) is shared with our Rwanda-side banking and mobile-money partners, who are regulated by the National Bank of Rwanda (BNR). Data handling in each jurisdiction follows the laws applicable there, including Rwanda's data protection law for Rwanda-side processing. Our Rwanda-side partners retain transfer records for the periods required of them by the National Bank of Rwanda and by Rwanda's Law No. 058/2021 on the protection of personal data and privacy; the retention periods in Section 5 describe Kivu's own records.

7. Your choices and rights

• You may unsubscribe from marketing communications at any time.
• You may request access to, or correction of, your personal information by contacting us. Note that we cannot delete records we are legally required to retain (such as transaction and compliance records) until their retention periods expire.
• Depending on where you live, you may have additional rights under applicable privacy law; we will honor valid requests.

8. Children

The Service is for adults 18 and over. We do not knowingly collect information from children.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with an updated date and, where required, notified to you directly.

10. Contact

Privacy questions: privacy@kivumoney.com · Kivu Money Services LLC · 7901 4th St. N, Ste 300, St. Petersburg, FL 33702