Privacy Policy

How Kolo collects, uses, and protects your information.

This is the same document shown inside the Kolo app.

Privacy Policy

How Kolo collects, uses, and protects your information.

v1.2 Republic of Liberia

Effective date: June 22, 2026. Last updated: August 10, 2026.

Kolo Group of Companies ("Kolo," "we," "us") respects your privacy. This policy explains what we collect when you use kolo1847.com and our mobile apps (the "Service"), why we collect it, how we use and share it, and the rights you have over your information.

1. Who we are

Kolo Group of Companies is a business corporation organized under the laws of the Republic of Liberia (Business Registration No. 054281714, TIN 502485526), with its registered address at GSA Road, opposite Estella Guest House, Paynesville City, Montserrado, Liberia. The data controller for the Service is Kolo Group of Companies. You can reach our privacy team at privacy@kolo1847.com.

2. Information we collect

2.1 Information you give us

Account information: your name, phone number, email address, date of birth, county, and password.

Profile information: profile photo, bio, username, and any content you upload.

Verification information: government issued identification, selfies, and other documents you submit for KYC ("Know Your Customer") and Verified Artist review.

Payment information: mobile money account details, bank or card details, payout preferences, and transaction history.

Support and communications: messages you send us through support channels, surveys, or community moderation.

2.2 Information we collect automatically

Device information: device model, operating system, app version, language, time zone, and a unique device identifier.

Network information: IP address, mobile network operator, and approximate location derived from your IP or mobile-money number prefix.

Usage information: what you play, watch, buy, tip, post, like, follow, and how long you spend on each screen. We use this to personalize your home feed.

Cookies and similar technologies: small data files used to keep you logged in and to measure how the Service performs.

2.3 Information we receive from others

Payment processors: confirmation of mobile-money top-ups, card payments, and payout settlement status.

Fraud prevention services: signals about suspicious activity tied to your account or device.

Collaborators: information another user provides about you (for example, when an artist invites you to a collab).

3. How we use your information

To provide the Service, create your account, deliver content, process payments, pay artists, run live experiences, and personalize your home feed.

To Verify identity by confirming you are who you say you are, especially for artist verification and high value transactions.

Protect the platform which prevent fraud, money laundering, content piracy, and abuse. Enforce our Terms of Service and Community Guidelines.

Communicate with you by sending transactional messages (purchase receipts, payout notifications), service updates, and, where you have opted in, marketing.

Comply with the law in meeting our obligations under Liberian law, including tax, KYC, and lawful requests from competent authorities.

Measure and improve understanding on how the Service is used so we can make it better.

4. Legal basis for processing

We process your information when (a) it is necessary to provide the Service you have asked for, (b) we have a legitimate interest that is not overridden by your rights (for example, fraud prevention), (c) we are required to do so by law, or (d) you have given us your consent. Where we rely on consent, you can withdraw it at any time.

5. Sharing your information

We do not sell your personal information. We share it only in the following circumstances:

Service providers: cloud hosting, payment processing, phone number verification, media delivery, customer support, and analytics partners who handle only the information needed to provide those services under contracts and applicable data-protection terms. Our current phone-verification integration sends Didit a phone number and verification metadata; it does not send Didit government-issued identity documents.

Artists you transact with limited information needed for them to fulfill a purchase, deliver a ticket, or run a fan club (your username, the item you bought, and where appropriate your county).

Legal and safety: when required by law, court order, or to protect the safety of users, the public, or Kolo.

Corporate transactions: if Kolo is involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this policy.

6. Where we store and process your information

Kolo's primary systems of record are stored in South Africa. Account profiles, wallet balances, transaction ledgers, KYC records, identity documents submitted directly to Kolo, and backups are held in Google Cloud's Johannesburg region.

Some processing and storage takes place elsewhere:

• Scheduled background work, including payout batches, payment reconciliation, backups, and trending calculations, runs in Belgium.
• Requests your app makes directly, such as buying, topping up, gifting, booking and submitting verification documents, are currently processed in the United States while Kolo completes its regional migration.
• Free public media is stored and delivered through Cloudflare R2 and its global network. Kolo does not place KYC documents, financial records, or MTN Mobile Money data in R2.
• Phone-verification, payment, and other service providers may process the limited information they receive in other countries.

Where information is transferred outside Liberia, we use contractual and technical safeguards appropriate to the information and take reasonable steps to confirm that it remains protected to the standard described in this policy.

You can ask where a specific category of your information is held by writing to privacy@kolo1847.com.

7. How long we keep your information

We keep your information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute resolution obligations. KYC and transaction records are retained for at least seven (7) years, or longer where Liberian law requires.

8. Your rights

Access requests a copy of the personal information we hold about you.

Correct update inaccurate or incomplete information.

Delete request that we delete your account and information (subject to records we must retain by law).

Object or restrict ask us to stop or limit certain processing.

Withdraw consent for processing that depends on your consent.

Complain lodge a complaint with the relevant Liberian data protection authority.

To exercise any of these rights, write to privacy@kolo1847.com. We will respond within thirty (30) days.

9. Children and young users

The Service is not designed for children under thirteen (13). Accounts for users under eighteen (18) ship with safety defaults on: restricted content rating, no autoplay, daily screen time summary, and a "Take a break" nudge after forty-five (45) minutes of continuous use. If we learn we have collected information from a child under thirteen without parental consent, we will delete it.

10. Security

We protect your account, your money, and artists' earnings with layered safeguards:

Encryption. All traffic between your device and Kolo is encrypted in transit (TLS), and your data is encrypted at rest.

App attestation. Kolo uses app-integrity checks (app attestation) so that only the genuine, untampered Kolo app can reach our servers. Requests from cloned, modified, or automated clients are rejected.

Sign-in protection. You sign in with your phone number and a one-time code, or with a trusted provider (Google, Facebook, or Apple). All Kolo staff must additionally pass a second factor (an authenticator-app code) on every sign-in, and staff access is limited to Kolo Group of Companies accounts only.

Money never moves on your device. Wallet balances, purchases, tips, and payouts are calculated and recorded only on our servers, on an append-only ledger that cannot be altered after the fact. The app can request a transaction but can never write a balance.

Protected media. Paid content is delivered through short-lived, per-user signed links rather than public URLs, so a link cannot be shared or reused to bypass payment to the artist.

Least privilege and audit. Staff can only access what their role requires, and every privileged action is written to a tamper-evident audit log.

No system is perfectly secure; if a breach occurs that affects you, we will notify you and the appropriate authority as required by Liberian law.

11. Changes to this policy

We will post any changes to this policy on this page and, where the change is material, notify you in the app or by email at least fourteen (14) days before it takes effect.

12. Contact us

Kolo Group of Companies

Attn: Privacy

GSA Road, opposite Estella Guest House, Paynesville City, Montserrado, Liberia

Email: kologroup@kolo1847.com