Security & Privacy — Capital Moni

Capital Moni — face verification and data protection

Bank-grade protection

Security at every step

Capital Moni treats your data as a responsibility, not a resource. We collect only what is necessary, use it only for the purposes you have agreed to, and protect it with modern safeguards.

✓128-bit SSL encryption for all data in transit
✓Strict, role-based access for our employees
✓OTP verification to protect your account
✓Full transparency on what we collect and why

Read the privacy policy →

Our safeguards

How we keep your information safe

🔐

Encryption in transit

All data uploaded and stored through our platform is protected by 128-bit SSL encryption over secure HTTPS connections.

👤

Restricted access

Only employees who need your data to process your loan can access it, under strict confidentiality obligations.

📲

OTP verification

One-time passcodes help confirm your identity for registration, login and account actions.

📉

Minimal data

We collect and retain customer data to the minimum needed to provide our services, and nothing more.

🛡️

Fraud monitoring

We apply risk-based checks to detect unusual behaviour and protect your account and funds.

⚖️

Legal compliance

We process personal data in line with Ghana's Data Protection Act, 2012 (Act 843) and applicable regulations.

Transparency

What we may ask to access

Capital Moni only requests the permissions needed to assess, disburse and service your loan — and each one is explained. You can control permissions from your device settings at any time.

SMS

Used to assess your credit risk and creditworthiness. We read only SMS related to financial transactions (such as banking and payment notifications); unrelated messages are filtered out and deleted. SMS data is transmitted securely to our servers via HTTPS (https://www.kittywavenova.com); it is never shared with unrelated third parties.

Approximate location

We collect only approximate location information to reduce risks associated with your account and increase data security. We do not request precise location.

Camera

Required so you can photograph your ID and face and upload them to complete the necessary KYC verification. We never access photos or videos stored on your device.

Emergency contacts

We collect information for up to two emergency contacts (relationship, name and phone number), used solely to verify your identity, assess eligibility and prevent fraud. You can enter details manually or select contacts you explicitly choose — we never read your entire contact list.

Installed applications

We obtain the names, installation times and versions of apps installed on your device, to assess your credit risk and creditworthiness. This data is transmitted securely to our servers via HTTPS (https://www.kittywavenova.com); no other device content is uploaded.

Notifications

Used to send you important updates and reminders about your application and repayment. If you decline, the app still works normally — you simply won't receive push notifications.

Full privacy policy →

Your data is protected, by design