Privacy Policy


We're Kilofe Nigeria Limited ('we', 'our', 'us') and operating as BAFF. We’re registered with the Corporate Affairs Commission.

This policy describes:

You don’t have to share any information with us, but to use our services, we’ll need some information from you. This policy also contains information about when we share your personal information with third parties (such as our service providers and credit bureaus).

What information do we collect?

Information you give us on BAFF Applications

We collect and use any information you supply when you interact with any of our touch points. When you open an account with us, you share details like your names, Bank Verification Number (BVN), identification documents, address and pictures. By using our card or any BAFF Application to transact, you also share details of your transactions with us. Additionally, we may request explicit permission to see other information like your address book, location, photos and data from your phone camera. Other details we collect and what we do with them include;

Information you give us through the in-app chat so we can help you.

True Depth API Usage

How do we use your information?

The Nigerian Data Protection Regulations 2019 (NDPR) requires that we have a lawful basis for processing your personal information. At least one of the following lawful basis must apply before we process your personal information: contractual or legal obligations, legitimate interest of the data controller, public interest, vital interest of the data subject or consent.

Who do we share your information with?

In some instances, we will share the information provided with some third parties that we do business with, like card producers and credit bureaus, or with law enforcement agencies when required. Sharing of confidential customer information with these related third parties would be done in a secure manner.

How long do we keep your data?

We keep your information as long as you are a BAFF customer and for any additional period as required under applicable law or regulations.

What are your rights?

You have the right to access and request the information that we have on you in our records. You may also ask us to delete your information on our record, restrict the way in which we use your personal information, ask that we update the personal information we hold about you or correct such personal information which you think is incorrect or incomplete, and we will grant this request as long as we’re legally allowed to. You also have the right to object to us using your information for our marketing purposes or any additional services we may be offering you. Lastly, you may also withdraw any consent you’ve previously given us.

How to make a complaint

If you have any worries, reservations or complaints about your personal information, please contact our Data Protection Officer by:

Changes to this document

This document will be reviewed on a yearly basis, or more frequently if occasioned by changes or amendment to applicable data protection regulations. If we make any changes, we’ll add a note to this page and if there are significant changes we’ll let you know by email.

This policy was last updated on 2 March 2024.