The short version

Kandrit holds what it needs to run a quiz, pay a prize and keep an account safe, and nothing it has no use for. We do not sell your personal information. The parts of your activity that are public are public on purpose and are listed below, so there are no surprises. This policy covers kandrit.com and applies to everyone who uses it, whether you signed up or played as a guest. Last updated 13 October 2026.

What we collect

• Your account. A username, an email address and a password. A phone number if you give us one. An avatar if you pick one. A display name if you set one.
• Playing as a guest. A guest account is a nickname and two values that identify the browser you played in, so that returning to the same browser gives you your games back and so one person cannot create an endless supply of accounts. There is no email, no password and no wallet on a guest account.
• Signing in with Google. If you use the Google button, Google tells us your email address and an identifier for your Google account, and we store those to recognise you next time. We never receive your Google password.
• How you play. The campaigns you join, the answers you give, your scores, the time you take, your replays, your games with friends and any message you send in a campaign chat.
• Your device, once per campaign. The first time you are served a question in a campaign we record the IP address, browser, operating system and device type you played from. This exists to make prizes fair: it is how we tell one person playing from one person playing on six accounts.
• Money, if you move any. Your bank name, account number and account name when you add them for a withdrawal, the transactions on your wallet, and the bills you pay through the app. Your transaction PIN is stored hashed, which means we hold a fingerprint of it and never the PIN itself.
• Anything you choose to add. Social handles on your profile are optional and public.

What we use it for

• Running campaigns, scoring them and working out winners.
• Paying prizes, processing withdrawals and completing bill payments.
• Telling you what happened: a campaign starting, a prize landing, a withdrawal moving, something about your account.
• Keeping the game honest. Duplicate accounts, one person entering a campaign several times and anything that looks like an attempt to break scoring are all things we look at, and the device record is the main thing we look at them with.
• Understanding what the site is used for, in aggregate, so we know what to build next.

We do not sell your personal information to anybody, and we do not hand advertisers a list of our players.

What is public on Kandrit

Some of what you do is visible to other people by design. It is worth knowing which parts before you play.

• Your username and avatar appear on the leaderboard of any campaign you play, and on the platform leaderboard, which anybody can open whether or not they have an account.
• Your score and the time you took appear beside your name on those boards.
• Messages you send in a campaign chat are visible to anybody viewing that campaign.
• Your email address, phone number and bank details are never shown to other users.

Advertising and cookies

Kandrit carries advertising, and advertising is how a free quiz with a prize on it pays for itself. Two kinds appear on the site. Some placements are sold by us directly and are simply an image we were given. Others are served by an advertising network.

• Third party vendors, including Google, use cookies to serve ads based on your previous visits to this and other websites.
• Google's use of advertising cookies lets it and its partners serve ads to you based on your visit to Kandrit or other sites. You can turn personalised advertising off at Google Ads Settings, and you can opt out of a wider list of vendors at aboutads.info.
• We also use Google Analytics to count visits and see which pages are used, which sets its own cookies.
• Kandrit itself sets a small number of cookies that are not about advertising at all: they keep you signed in and remember your session. Blocking those will sign you out.
• Your browser can block or clear any of these, and the site will still work apart from staying signed in.

We do not pass your name, email address or phone number to any advertiser or advertising network.

Who else handles your data

Only the companies we need to run the service, and only for that:

• Paystack, for payments, withdrawals and the dedicated account numbers the app can issue.
• Amazon Web Services, where the images and files on the site are stored.
• Google, for sign in, analytics and advertising.
• Our advertising networks, which serve the ad slots described above.
• Our email provider, which delivers the messages we send you.

We will also hand over data where the law requires it, for example a court order or a lawful request from a Nigerian regulator.

Where your data is held

Our servers are hosted outside Nigeria, and the files on the site are stored on Amazon servers in the United States. Using Kandrit means your information is transferred and held outside Nigeria. We pick providers that are expected to protect it to the standard the Nigeria Data Protection Act requires.

Keeping it safe

Traffic between your browser and Kandrit runs over HTTPS. Passwords and transaction PINs are stored hashed, so nobody at Kandrit can read them, including us. Access to the database is restricted to the people who run the platform.

No system is perfectly safe, and the honest version is that the most likely way an account is lost is not a breach of ours. We will never ask you for your PIN or your password, by email, on WhatsApp, in a chat or anywhere else. Anyone who does is not us. If something looks wrong on your account, write to [email protected] straight away.

How long we keep it

• Your account and your play history stay while the account exists.
• Records of money moving, which means withdrawals, prizes and bill payments, are kept for seven years, because tax and financial rules require it. These survive the deletion of an account.
• Device records attached to a campaign are kept while the campaign and its result stand.
• Guest accounts that are never claimed are kept so that the browser they belong to can return to them.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to show you what we hold about you, correct it, delete it, or stop using it in a particular way. You can also complain to the Nigeria Data Protection Commission.

Some of this you can do yourself. Your display name, avatar and social handles are in Settings, and your bank details can be changed when you withdraw. There is no delete button for an account yet, so deletion is a request: email [email protected] from the address on the account and we will remove it within 30 days. We will keep the financial records described above, and a deleted account cannot be recovered.

Children

Kandrit is not for children. You must be at least 18 to hold an account, as the terms of service say. If we learn that an account belongs to a child we will close it and delete what is attached to it.

Changes to this policy

When this changes, the date at the top changes with it. If a change affects what we collect or who sees it, we will say so in the app rather than quietly editing the page.

Contact

• Email: [email protected]
• Phone: +234 813 1841 729
• Everything else: the contact page, which has the WhatsApp number and the social accounts we answer on.