Privacy Policy

1. Who we are

Klemfy Recovery Solutions LTD (“Klemfy Recovery,” “we,” “us”) operates Klems AI and klemfy.app. This policy explains how we collect, use, and share personal data when you use the website, the app, or join the waitlist.

We handle personal data under the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation. By using the Service you acknowledge this policy. If you do not agree, do not use the Service.

2. Data we collect

2.1 You give us

• Account: name, email, phone, the password you type (we store only a hash), and Apple or Google account identifiers if you sign in that way.
• Claim file: your story, claim type, amount, when it happened, states, the other party’s name and how to reach them (email, phone, or WhatsApp), and notes about evidence.
• Chat: the messages you send Klems AI and the replies we store on the claim.
• Files: photos, PDFs, or documents you attach.
• Payout account: bank name, account name, and 10-digit NUBAN so we can pay you after a recovery. That NUBAN is not printed on the demand letter.
• Payments: that you paid the ₦5,000 operations fee, the Paystack reference, and the time it settled. We do not store your full card number.
• Mandate: the frozen recovery wording you accepted, with the time and version.
• Waitlist: name and email if you join from the site, and optional where it happened, an amount band, and whether money or goods already changed hands.
• Support: messages you send to collection@klemfy.app.

2.2 We collect automatically

• On the website: standard server logs (IP address, browser, pages opened) needed to run and secure the site.

2.3 We do not collect

• Precise GPS location.
• Your contacts list, call log, or SMS inbox.
• Photos from your library except files you choose to attach.

3. How we use data

• Create and secure your account.
• Guide the claim, score Lagos Small Claims eligibility, and build drafts.
• Show you the recovery mandate and store the words you accepted.
• Take the operations fee on Paystack, or record it as paid by staff if checkout is down.
• Let the desk send a demand, record service and recovery, and pay you by hand.
• Tell waitlist sign-ups when they can use Klems AI.
• Prevent fraud, abuse, and unauthorised access.
• Improve the product using aggregated, de-identified patterns.

Legal bases include performing our contract with you, our legitimate interests in running a recovery desk, and consent where you attach files or join the waitlist. If you give us the other party’s name or how to reach them, you must be allowed to share that. We use it only to assess the claim and, if the desk sends a demand, to write and send that letter.

4. AI processing

Chat and some drafts are sent to our model provider so Klems AI can reply and polish particulars. We send the claim facts needed for that turn. We ask the provider not to use that content to train public models where the product settings allow. Do not put secrets you are not willing to share with the desk and our processors.

5. Who we share with

We do not sell your personal data.

• Our desk and counsel: staff and instructed counsel see the file so they can write and send the letter and chase recovery.
• The other party: a demand letter includes your name as claimant and the debt facts. It does not include your payout NUBAN.
• Paystack: email and amount for the ₦5,000 operations fee only.
• Apple and Google: if you use their sign-in.
• Hosting and email: our cloud host and, when we send mail, our email provider.
• Model provider: as described in section 4.
• The law: if a court or regulator requires it, or to protect people from serious harm.

Klemfy Recovery is in the same group as other products we operate. We do not mix your Klems claim file into those products for marketing.

6. Storage and security

Data is stored on our servers and transmitted over HTTPS. Passwords are stored as hashes. Access to the desk is limited to staff accounts. No system is perfectly secure. Use a strong password and tell us if you see something wrong.

7. How long we keep it

• Account and claim files stay while the account is open and as long as we need them to finish recovery, show you the file, or meet a legal duty (for example, tax or a dispute).
• Waitlist contacts stay until we have invited you or you ask us to delete the row.
• If you ask us to close the account we delete or anonymise personal data after that request, except records we must keep (paid fees, sent letters, recovery stamps). Closing is by email; there is no in-app delete button yet.

8. Your rights

Under Nigerian data protection law you may ask to access, correct, delete, or restrict your data, or to object to some processing, and to receive a copy in a common format where that applies. You may withdraw waitlist consent by emailing us.

Write to collection@klemfy.app. We aim to reply within 30 days. You may also complain to the Nigeria Data Protection Commission.

9. Children

The Service is not for anyone under 18. We do not knowingly collect data from children. If we learn that we have, we will delete the account.

10. International processing

Some processors (for example Paystack, Apple, Google, or a model host) may handle data outside Nigeria. We use them only as needed to run the Service and expect them to protect the data they receive.

11. Cookies and the website

The marketing site uses what the browser needs to show pages and submit the waitlist form. We do not run advertising cookies on klemfy.app.

12. Changes

We may update this policy. The date at the top will change. For a material change we will try to tell you in the app or by email.

13. Contact

Klemfy Recovery Solutions LTD
Email: collection@klemfy.app
Website: klemfy.app
Related: Terms of Service