Privacy notice

We collect information that you provide directly, that is collected automatically as you use the Zose platform, and that we receive from our partner financial institutions when you transact through an agent.

• Identification data — your full name, national ID number, date of birth, photograph, and biometric verification needed for KYC and AML compliance.
• Contact data — phone number, email address, postal address, and the district you are registered in.
• Account & transaction data — partner institution, account number, balances, deposits, withdrawals, transfers, bill payments, school fees, and the associated agents and timestamps.
• Device & usage data — IP address, device identifiers, browser type, operating system, and interactions with the Zose Web Agent and Play Store applications.
• Location data — approximate location of the agent terminal performing a transaction, used for fraud prevention and coverage analytics.

We use the data we hold about you to:

• Process the deposits, withdrawals, transfers, and bill payments you initiate through a Zose agent.
• Verify your identity, prevent fraud, and meet our obligations under Rwandan anti-money-laundering and counter-terrorism financing laws.
• Operate, secure, and improve the Zose Web Agent, mobile application, and supporting systems.
• Communicate with you about your transactions, account, or service updates, and to respond to your support requests.
• Generate aggregated, anonymized analytics to help our partner institutions understand demand and improve their offering.

We share the minimum information necessary with carefully selected parties to deliver the service you requested. These include:

• Partner financial institutions (banks, microfinances, and SACCOs) for whom Zose acts as an agency network.
• Regulators and authorities including the National Bank of Rwanda, tax authorities, and law enforcement when required by law or valid legal process.
• Service providers that help us operate the platform — for example, hosting, KYC and fraud-detection providers, communications and notifications, and analytics — all bound by strict confidentiality and data protection terms.

We do not sell your personal information, and we never share it with parties unrelated to the operation of the service.

We retain your information only for as long as needed to provide the service and to comply with legal, accounting, tax, regulatory, and recordkeeping obligations. Transaction and KYC records are retained for the period prescribed by Rwandan financial regulation, which is typically a minimum of ten (10) years from the closure of the account or the date of the last transaction.

When data is no longer required, it is securely deleted or irreversibly anonymized.

Subject to Rwandan data protection law (in particular Law nº 058/2021 relating to the protection of personal data and privacy), you have the right to:

• Access the personal information we hold about you.
• Request that inaccurate information be corrected or updated.
• Request deletion of your information when it is no longer required for the purposes it was collected, subject to our legal retention obligations.
• Restrict or object to certain uses of your information.
• Withdraw consent where processing is based on consent, without affecting prior lawful processing.
• Lodge a complaint with the competent data protection authority.

To exercise any of these rights, contact us using the details in the final section of this notice.

We apply administrative, technical, and physical safeguards designed to protect your information from unauthorized access, alteration, disclosure, and destruction. This includes encryption in transit, access controls, regular audits, and continuous monitoring. No method of transmission or storage is 100% secure, but we work to limit risk and respond promptly to any incident affecting your data.

Zose services are not directed to children under the age of 18, and we do not knowingly collect their personal information. If you believe a minor has provided us with information, please contact us and we will take appropriate action.

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

If you have questions about this notice or our handling of your information, please contact us at info@zose.rw or +250 791 956 636.

See also our Cookies policy and our Terms of use.