Terms of Use

Last Updated: September 1, 2026

WELCOME TO KORA

This Terms of Use Agreement (this “Agreement” or “Terms of Use”) sets forth the terms and conditions that apply to your access to and use of the online functions, products, services, websites, applications, platforms, data products, and technologies made available to you by Kora Financial Inc. (“Kora,” “we,” “us,” or “our”) and any of its subsidiaries and affiliates.

You can access Kora products and services through the Kora website, mobile applications, KoraConnect, and other websites, applications, portals, communications channels, and technologies that Kora may make available from time to time. These channels are collectively referred to as the “Kora Services” or “Services.”

These Terms of Use govern your access to and use of the Kora Services, including all content, functionality, products, services, data, technologies, and features offered through or in connection with the Services.

PLEASE READ THESE TERMS OF USE CAREFULLY. BY ACCESSING OR USING THE KORA SERVICES, REGISTERING FOR AN ACCOUNT, CONNECTING AN ACCOUNT, SUBMITTING AN APPLICATION OR REQUEST, OR OTHERWISE USING ANY KORA PRODUCT OR SERVICE, YOU AGREE TO BE BOUND BY THESE TERMS OF USE. IF YOU DO NOT AGREE TO THESE TERMS, DO NOT ACCESS OR USE THE SERVICES.

Certain Kora products and services may also be governed by additional agreements, disclosures, notices, authorizations, or terms. Those additional agreements are incorporated into and form part of your relationship with Kora.

1. ELIGIBILITY AND ACCEPTANCE

The Kora Services are generally intended for individuals who are at least 18 years old.

By accessing or using the Services, you represent and warrant that:

you are at least 18 years old;
you are legally capable of entering into a binding agreement;
you are not prohibited by law from accessing or using the Services;
you have not previously been banned, terminated, or denied access to the Services by Kora;
you are not acting on behalf of a person whose access to the Services has previously been terminated or denied; and
all information you provide to Kora is accurate, current, complete, and not misleading.

If you do not satisfy these requirements, you may not use the Services.

2. MODIFICATION OF THESE TERMS

Kora may modify these Terms of Use from time to time.

When Kora makes changes, Kora may provide notice through the Services, by email, through your account, or by other means required by applicable law.

The most current version of these Terms of Use will be available through the Kora website or applicable Service.

Unless otherwise required by applicable law, your continued access to or use of the Services after updated Terms of Use become effective constitutes your acceptance of the revised Terms.

Kora may modify, suspend, restrict, discontinue, or terminate any Service, feature, functionality, or portion of the Services at any time, subject to applicable law and any separate contractual obligations applicable to you.

3. ADDITIONAL PRODUCT AND ACCOUNT AGREEMENTS

Certain Kora products and services may require additional agreements.

For example, a loan product may require a separate loan agreement, promissory note, retail installment contract, security agreement, authorization, or other account documentation.

If you use a product or service that is subject to additional terms, you are bound by:

these Terms of Use;
the applicable product or account agreement;
applicable disclosures;
applicable authorizations;
Kora's Privacy Policy;
applicable GLBA Privacy Notice;
applicable consumer-reporting disclosures; and
any other applicable terms or notices.

If there is a conflict between these Terms and a separate product or account agreement concerning a specific product, the more specific agreement will control to the extent of the conflict.

4. KORACONNECT

KoraConnect is a Kora product that may provide consumer reporting, financial-data, analytics, verification, and related services.

Depending on the Service and the information involved, KoraConnect may:

collect information about consumers;
receive information from consumers and third parties;
obtain financial-account and transaction information;
receive information from data providers and furnishers;
maintain consumer information;
analyze consumer information;
create analytical and statistical information;
maintain information that may constitute a consumer report;
furnish consumer reports to authorized subscribers;
receive and investigate consumer disputes;
provide consumer disclosures;
support subscriber compliance;
provide data and analytical services; and
provide other services permitted by applicable law.

KoraConnect may operate as a Consumer Reporting Agency (“CRA”) under the Fair Credit Reporting Act (“FCRA”) and applicable state law.

Where KoraConnect performs consumer-reporting activities, those activities are subject to the FCRA and other applicable consumer-reporting laws.

5. CONSUMER REPORTING AGENCY REQUIREMENTS

When Kora acts as a CRA, Kora maintains procedures designed to comply with applicable FCRA requirements.

These requirements may include obligations relating to:

permissible purposes;
consumer-report privacy;
accuracy;
file disclosure;
consumer disputes;
reinvestigation;
identity theft;
security freezes and fraud alerts;
adverse actions;
furnishers;
subscriber certifications;
permissible-purpose representations;
access controls;
data retention;
data security;
disposal; and
recordkeeping.

Kora will furnish consumer reports only for purposes permitted by applicable law.

A subscriber or other user of a KoraConnect consumer report must independently satisfy applicable FCRA requirements.

Access to KoraConnect does not itself establish a permissible purpose to obtain a consumer report.

The FCRA's permissible purposes are consumer-specific, and a general contractual provision, disclaimer, or authorization does not create a permissible purpose where one otherwise does not exist.

6. PERMISSIBLE PURPOSES

Consumer reports may be obtained, used, or furnished only for purposes permitted by applicable law.

Depending on the circumstances, permissible purposes under the FCRA may include:

credit transactions;
account review;
collection of an obligation;
insurance underwriting;
employment purposes where applicable requirements are satisfied;
legitimate business transactions initiated by the consumer;
certain governmental purposes;
certain business transactions specifically authorized by the FCRA; and
other purposes expressly permitted by law.

Nothing in these Terms authorizes any person to obtain or use a consumer report without a permissible purpose.

A KoraConnect subscriber must provide representations and certifications concerning its permissible purpose as required by Kora and applicable law.

Kora may suspend or terminate access where Kora believes a subscriber or other user has violated, or may violate, applicable consumer-reporting requirements.

7. CONSUMER REPORTING INFORMATION AND CONSUMER RIGHTS

If Kora maintains a consumer report concerning you, you may have rights under the FCRA and applicable state law.

Depending on the circumstances, those rights may include:

requesting disclosure of your consumer file;
receiving information concerning the nature and substance of information maintained about you;
disputing inaccurate or incomplete information;
having qualifying inaccurate, incomplete, or unverifiable information corrected or deleted;
exercising rights relating to identity theft;
exercising applicable rights concerning security freezes or fraud alerts; and
receiving certain notices concerning adverse actions.

Kora maintains procedures designed to investigate qualifying disputes and address inaccurate, incomplete, or unverifiable information as required by applicable law. The FCRA's dispute framework applies to CRAs and, where applicable, furnishers.

For information concerning KoraConnect consumer-reporting rights or to request a consumer file or submit a dispute:

Kora Financial Inc.
Attn: Consumer Reporting / Privacy
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Email: privacy@koramoney.com
Telephone: 800-840-6604

8. PRIVACY

If you use or obtain a Kora product or service, Kora may collect, use, maintain, disclose, and otherwise process information about you.

Kora's collection, use, disclosure, retention, and protection of information are described in the Kora Privacy Policy and applicable GLBA Privacy Notice.

The Privacy Policy is incorporated into these Terms by reference with respect to privacy and data practices.

These Terms do not limit the application of the Kora Privacy Policy or GLBA Privacy Notice.

You should review those documents carefully.

If you wish to submit a privacy request, you may contact:

privacy@koramoney.com
800-840-6604

Privacy rights may be subject to applicable legal exceptions, including exceptions applicable to information governed by the FCRA, GLBA, or other federal laws.

9. AGGREGATED, DE-IDENTIFIED, AND ANONYMIZED INFORMATION

Kora may create, derive, collect, use, retain, disclose, and share information that has been aggregated, de-identified, or anonymized.

You authorize Kora to use Aggregated Data, De-Identified Data, and Anonymized Data for any purpose permitted under applicable law.

This authorization is intentionally broad and includes, without limitation, the right to use such information to:

develop new products and services;
develop new features and technologies;
improve existing products and services;
conduct research;
conduct statistical analysis;
conduct benchmarking;
develop analytics;
develop models;
develop algorithms;
develop scores;
improve data quality;
conduct fraud detection and prevention;
conduct cybersecurity activities;
develop risk-management capabilities;
conduct product testing;
conduct quality assurance;
develop data products;
create analytical products;
develop, train, test, validate, evaluate, improve, and deploy artificial intelligence systems;
develop, train, test, validate, evaluate, improve, and deploy machine-learning systems;
create and use synthetic data;
conduct experimentation;
conduct research and development;
improve operational processes;
evaluate and develop business opportunities;
create new commercial offerings; and
otherwise conduct lawful business, technological, analytical, research, or commercial activities.

Kora may combine information from:

multiple consumers;
multiple accounts;
multiple products;
multiple services;
multiple data sources;
multiple periods of time; and
other datasets.

Kora may retain Aggregated Data, De-Identified Data, and Anonymized Data after an account is closed, a Service is terminated, or your relationship with Kora ends, including indefinitely, to the extent permitted by applicable law.

Kora may disclose, license, transfer, provide, or otherwise make Aggregated Data, De-Identified Data, and Anonymized Data available to:

affiliates;
service providers;
technology providers;
data providers;
business partners;
customers;
KoraConnect subscribers;
researchers;
analytics providers; and
other third parties,

for any purpose permitted by applicable law.

Kora may incorporate such information into products, services, datasets, analytical tools, models, algorithms, AI systems, machine-learning systems, and other technologies.

Where Kora represents information as de-identified or anonymized, Kora will maintain reasonable safeguards designed to prevent unauthorized re-identification.

Kora will not knowingly attempt to re-identify such information except where reasonably necessary and permitted by applicable law, including for data-quality, security, fraud-prevention, compliance, dispute-resolution, legal, or regulatory purposes.

10. ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING

Kora may use artificial intelligence (“AI”), machine learning, statistical modeling, automation, algorithms, and related technologies.

You expressly acknowledge and agree that Kora may use Aggregated Data, De-Identified Data, and Anonymized Data to:

develop AI systems;
train AI systems;
test AI systems;
validate AI systems;
evaluate AI systems;
improve AI systems;
deploy AI systems;
develop machine-learning models;
train machine-learning models;
test machine-learning models;
validate machine-learning models;
evaluate machine-learning models;
improve machine-learning models;
develop algorithms;
develop automated systems;
create synthetic data;
conduct research;
conduct experimentation;
develop new products and services; and
improve existing products and services.

Kora may use such information to develop technologies and offerings that do not currently exist and that may be developed or offered in the future.

Kora may provide Aggregated Data, De-Identified Data, and Anonymized Data to third parties for these purposes.

Kora's use of identifiable consumer-report information remains subject to the FCRA and other applicable law.

Nothing in these Terms creates a permissible purpose for obtaining, using, or furnishing an identifiable consumer report.

11. REGISTRATION INFORMATION

You may be required to register for certain Services.

When registering, you agree to provide accurate, current, complete, and truthful information.

You may not:

impersonate another person;
provide false information;
use another person's credentials;
create an account for an unauthorized purpose;
create multiple accounts to evade restrictions; or
otherwise misrepresent your identity or affiliation.

Kora may create a profile based on registration information and other information collected or received in connection with the Services.

12. ACCOUNT SECURITY

When you create an account, you agree to:

use a secure password;
keep your credentials confidential;
not share your credentials;
promptly report unauthorized access;
maintain current contact information; and
take reasonable precautions to protect your account.

If you believe your account has been compromised, contact Kora immediately at:

support@koramoney.com
800-840-6604

Kora uses reasonable information-security measures, but no system is completely secure.

You acknowledge the risk of unauthorized access resulting from compromised credentials, technical failures, attacks, or other circumstances beyond Kora's reasonable control.

13. MOBILE VERIFICATION AND SECURITY

You authorize your wireless carrier to use or disclose information concerning your wireless account and device, where available, to Kora or its service providers for purposes including:

identity verification;
device verification;
fraud prevention;
account security; and
protection of the Services.

Such information may include, where available:

mobile telephone number;
name;
address;
email address;
network status;
customer type;
customer role;
billing type;
device identifiers;
subscriber status; and
other information made available by your wireless provider.

Kora may compare information you provide with information associated with your wireless account for verification and fraud-prevention purposes.

14. CONNECTED ACCOUNTS

Kora may offer Services that permit you to connect or link an external financial account to Kora.

A connected external account is referred to as a “Connected Account.”

If you elect to connect an account, you authorize Kora to obtain information from that account as permitted by the connection and applicable law.

The information available may vary by institution and account type.

You should assume that Kora may receive information available through the Connected Account, which may include:

account balances;
transaction history;
deposits;
withdrawals;
transfers;
payment activity;
loan balances;
interest rates;
payment history;
account ownership information; and
other financial information made available through the connection.

15. USE OF CONNECTED ACCOUNT INFORMATION

Kora may use information obtained from Connected Accounts for purposes permitted by Kora's Privacy Policy and applicable law.

Such purposes may include:

providing requested Services;
facilitating transactions;
account servicing;
verification;
fraud prevention;
financial analysis;
product development;
improving and expanding Services;
identifying products or services that may be relevant to you;
evaluating eligibility for products or services;
pre-screening where legally permitted;
risk management; and
other purposes permitted by applicable law.

If Connected Account information is used in connection with KoraConnect consumer-reporting activities, applicable FCRA requirements will apply.

16. USE OF PLAID SERVICES

Kora may use Plaid Inc. (“Plaid”) and other third-party providers to facilitate Connected Accounts.

When you use a Plaid-powered connection, Plaid may access and transmit information as reasonably necessary to provide its services.

Plaid's use of information is governed by Plaid's applicable privacy policy and terms.

You acknowledge that third-party providers may have privacy practices separate from Kora's.

Kora does not control third-party privacy policies.

17. LOAN INQUIRIES AND APPLICATIONS

Whenever you submit a loan inquiry, loan request, application, or other request for a Kora financial product, you authorize Kora, its affiliates, servicers, agents, and authorized service providers to obtain and use information necessary to process, evaluate, verify, service, administer, or otherwise perform the requested Service.

This may include obtaining information from:

consumer reporting agencies;
financial institutions;
data providers;
identity-verification providers;
fraud-prevention providers;
government sources; and
other sources permitted by applicable law.

Where a consumer report is obtained, the use of that report must comply with the FCRA and applicable law.

Your consent to a particular acquisition or use of a consumer report may also be provided through a separate authorization, application, disclosure, or agreement.

18. APPLICATION VERIFICATION

You authorize Kora, its servicers, agents, and authorized service providers to verify information you provide in connection with a Kora product or Service.

Kora may use third-party sources to verify:

identity;
address;
income;
employment;
financial accounts;
financial information;
loan information;
application information; and
other information relevant to the requested Service.

Kora may decline, suspend, or terminate an application or Service if required information cannot be verified or if Kora determines that the information provided is inaccurate, incomplete, misleading, or fraudulent.

19. ACCURACY OF INFORMATION

You agree to provide accurate, current, and complete information.

You are responsible for promptly updating information that becomes inaccurate or incomplete.

Kora maintains procedures designed to maintain accurate information.

If you believe information maintained by Kora is inaccurate or incomplete, you may contact:

support@koramoney.com
800-840-6604

If the information is subject to FCRA requirements, Kora will process qualifying disputes pursuant to applicable FCRA procedures.

20. COMMUNICATIONS

You expressly authorize Kora, its affiliates, agents, service providers, and representatives to communicate with you concerning:

registration;
account activity;
applications;
transactions;
payments;
servicing;
security;
fraud;
legal matters;
regulatory matters;
products and services;
customer support; and
other matters relating to your relationship with Kora.

Communications may be made by:

email;
telephone;
postal mail;
SMS/text message;
push notification;
automated communications;
prerecorded messages;
artificial voice;
automated telephone dialing systems; and
other lawful communication methods.

Kora will comply with applicable law concerning communications and consent.

21. MARKETING COMMUNICATIONS

Kora may contact you concerning products and services that Kora believes may be of interest to you, subject to applicable law.

Promotional communications will include applicable opt-out mechanisms.

You may opt out of promotional email communications by using the unsubscribe mechanism provided in the communication.

You generally may not opt out of communications necessary to:

service an account;
complete a transaction;
provide security notices;
respond to requests;
comply with law; or
provide other necessary Service communications.

22. TELEPHONE, SMS, AND AUTODIALER TERMS

Where permitted by applicable law, you authorize Kora and its agents, representatives, and service providers to contact you using:

telephone calls;
SMS/text messages;
prerecorded messages;
artificial voice;
automatic telephone dialing systems;
automatic texting systems; and
other electronic communication systems.

You understand that message and data rates may apply.

You are responsible for charges imposed by your wireless carrier.

You represent that telephone numbers you provide to Kora are numbers at which you may be contacted and that you have authority to provide those numbers.

You agree to promptly notify Kora if a telephone number is no longer associated with you.

You may opt out of SMS communications by following the instructions provided in the applicable message, including texting “STOP” where available.

23. KORA SMS SHORT CODE TERMS

If you opt in to Kora's SMS program, Kora may send messages concerning:

Services;
loan applications;
account activity;
security;
transactions;
promotions;
marketing; and
affiliate or non-affiliate partner offerings, where permitted by law.

You may cancel the SMS service by texting STOP to the applicable short code.

For assistance, contact:

800-840-6604

Message and data rates may apply.

Carriers are not responsible for delayed or undelivered messages.

Additional SMS terms may apply to specific programs.

24. SERVICE-RELATED COMMUNICATIONS

Kora may send service-related communications, including:

account verification;
security alerts;
transaction confirmations;
changes to Services;
technical notices;
legal notices;
regulatory notices;
payment reminders;
fraud alerts; and
other necessary communications.

You may not opt out of communications that Kora reasonably determines are necessary to provide Services, protect your account, comply with law, or satisfy regulatory requirements.

25. FINANCIAL DECISIONS

You are responsible for financial decisions you make based upon information obtained through the Kora Services.

Kora Services may provide estimates, analyses, recommendations, data, or other information.

You are responsible for evaluating your own financial circumstances and determining whether a product or Service is appropriate for you.

Nothing in the Services constitutes individualized financial, legal, tax, investment, or other professional advice unless expressly stated otherwise.

26. LOAN SERVICING

In connection with the servicing or repayment of a Kora loan, you authorize Kora, its servicers, agents, and representatives to contact you using contact information you provide or that Kora obtains lawfully.

Communications may concern:

payments;
account status;
delinquency;
servicing;
account information;
legal notices;
security; and
other matters relating to the loan.

Where permitted by law, Kora may contact persons you identify in connection with an account for purposes permitted by applicable law.

27. ELECTRONIC RECORDS AND SIGNATURES

By using the Services, you agree that electronic records, disclosures, notices, authorizations, acknowledgments, and signatures may be used where permitted by law.

Your electronic acceptance may have the same legal effect as a written signature where permitted by applicable law.

You are responsible for maintaining access to electronic communications and records provided to you.

28. SITE AND SERVICE RISKS

Online services involve inherent risks.

You acknowledge that:

information transmission may be interrupted;
Services may experience technical difficulties;
transactions may be delayed;
third-party services may become unavailable;
internet connectivity may fail;
information may be intercepted despite reasonable safeguards;
transactions may not be completed as expected; and
Services may be temporarily unavailable.

You should confirm the status of any transaction before relying upon it.

29. THIRD-PARTY WEBSITES AND SERVICES

The Kora Services may contain links to websites, applications, products, or services operated by third parties.

Kora does not control third-party websites or services.

Kora is not responsible for:

third-party content;
third-party privacy practices;
third-party security;
third-party products;
third-party services; or
third-party terms.

Your use of a third-party service is governed by that third party's applicable terms and privacy policies.

30. TRACKING TECHNOLOGIES

Kora and third-party service providers may use:

cookies;
pixels;
web beacons;
scripts;
device identifiers;
analytics technologies;
location-identifying technologies; and
similar technologies.

These technologies may collect information concerning:

pages viewed;
links clicked;
browser type;
IP address;
device type;
operating system;
referring and exit URLs;
email interactions;
usage patterns;
approximate location;
application activity; and
other technical information.

Kora may use such information to:

operate Services;
maintain security;
remember preferences;
analyze usage;
improve Services;
measure performance;
conduct analytics;
support marketing;
provide personalized content; and
develop and improve Services.

Where required by applicable law, Kora will provide applicable notice and choices regarding tracking technologies.

31. INTEREST-BASED ADVERTISING

Kora may participate in interest-based advertising.

Kora and third-party advertising companies may use information concerning interactions with Kora websites, applications, or Services to provide advertisements or measure advertising performance.

Third parties may use cookies and similar technologies to recognize devices and collect information concerning browsing activity.

Where required by applicable law, Kora will provide appropriate opt-out mechanisms.

Nothing in this Section authorizes the use of identifiable consumer-report information for advertising purposes in violation of the FCRA or other applicable law.

32. GOOGLE ANALYTICS AND OTHER ANALYTICS

Kora may use Google Analytics and other analytics technologies.

Analytics services may collect information concerning how visitors interact with Kora websites and Services.

Kora may use analytics information to:

evaluate website activity;
measure performance;
understand usage;
improve Services;
conduct research; and
evaluate advertising effectiveness.

Third-party analytics providers maintain their own privacy policies.

33. INFORMATION AND FEEDBACK YOU PROVIDE

By submitting information, materials, suggestions, comments, ideas, recommendations, or other content to Kora, you represent that you have the right to provide such information.

You grant Kora a perpetual, worldwide, royalty-free, irrevocable, non-exclusive, transferable, and sublicensable right to use, reproduce, modify, adapt, publish, display, transmit, distribute, and create derivative works from materials you voluntarily provide to Kora to the extent necessary to operate, improve, and provide the Services and carry out the purposes contemplated by these Terms.

This provision does not override:

applicable privacy laws;
the FCRA;
GLBA requirements;
applicable consumer rights;
contractual restrictions; or
other non-waivable legal requirements.

34. FEEDBACK

You may provide suggestions, comments, ideas, recommendations, or feedback concerning the Services (“Feedback”).

Feedback is provided voluntarily.

Kora may use Feedback without restriction or compensation to you, including to:

develop products;
develop features;
improve Services;
create derivative works;
develop technologies;
market products; and
otherwise operate its business.

You grant Kora a royalty-free, fully paid, worldwide, transferable, sublicensable, irrevocable, perpetual license to use Feedback and any ideas embodied in Feedback.

35. INTELLECTUAL PROPERTY

Kora owns or licenses the intellectual property contained in the Services, including:

text;
graphics;
images;
logos;
trademarks;
software;
source code;
object code;
interfaces;
databases;
content;
designs;
workflows;
technology; and
other materials.

The Services are protected by applicable intellectual-property laws.

Except as expressly permitted by Kora, you may not:

reproduce;
duplicate;
copy;
modify;
reverse engineer;
distribute;
sell;
resell;
license;
lease;
exploit commercially; or
create derivative works from

the Services or Kora intellectual property.

36. MOBILE APPLICATION LICENSE

If Kora provides a mobile application, Kora grants you a personal, revocable, non-exclusive, non-transferable, limited license to install and use the application on an authorized device for your personal use of the Services.

You may not:

decompile;
reverse engineer;
disassemble;
decrypt;
derive source code;
modify;
adapt;
create derivative works;
remove proprietary notices;
create bots;
interfere with the application; or
use the application in violation of applicable law.

37. PROHIBITED USES

You agree not to use the Services to:

violate applicable law;
commit fraud;
impersonate another person;
misrepresent information;
obtain unauthorized information;
access another person's account;
interfere with Services;
introduce malicious code;
circumvent security;
scrape or harvest data without authorization;
reverse engineer the Services;
misuse consumer-report information;
obtain or use a consumer report without a permissible purpose;
violate the rights of another person;
transmit unlawful material; or
engage in activity that Kora reasonably determines may harm Kora, consumers, customers, or the Services.

38. CONSUMER-REPORT INFORMATION — USER OBLIGATIONS

If you receive or access consumer-report information through KoraConnect, you agree that you will:

obtain consumer reports only for permissible purposes;
use consumer reports only for the purpose for which they were obtained;
maintain appropriate controls over consumer-report information;
prevent unauthorized access;
prevent unauthorized disclosure;
comply with applicable FCRA requirements;
comply with applicable state consumer-reporting requirements;
maintain required certifications and representations;
promptly notify Kora of suspected misuse or unauthorized access;
cooperate with Kora's compliance monitoring;
cooperate with consumer disputes and investigations where required; and
securely dispose of consumer-report information as required by law.

Violation of these obligations may result in immediate suspension or termination of access.

39. SUBSCRIBER MONITORING AND AUDIT RIGHTS

Kora may monitor subscriber access to KoraConnect.

Kora may conduct audits, reviews, or other compliance activities concerning:

permissible purpose;
consumer-report access;
report usage;
adverse-action usage;
data security;
subscriber certifications;
data retention;
dispute handling;
compliance with contractual restrictions; and
compliance with applicable law.

Kora may request information reasonably necessary to verify compliance.

Failure to cooperate may result in suspension or termination of access.

40. ACCURACY AND CONSUMER DISPUTES

Kora maintains procedures designed to support the accuracy of information used in consumer reports.

If Kora receives a qualifying dispute concerning information in a consumer report, Kora may investigate the dispute and take action required by applicable law.

Kora may communicate with furnishers and other information sources in connection with a dispute.

Users and furnishers may have independent legal obligations under the FCRA concerning disputed information.

41. SECURITY

Kora maintains a security program incorporating administrative, technical, and physical safeguards.

Safeguards may include:

access controls;
authentication;
encryption;
network security;
monitoring;
logging;
vulnerability management;
employee training;
background screening;
incident response;
vendor management;
data classification;
security testing;
session time-outs; and
other security controls.

No security program can guarantee absolute protection.

If Kora determines that information under its control has been compromised, Kora will take reasonable steps to investigate and provide notice where required by applicable law.

42. CHILDREN'S PRIVACY

The Services are not directed to children under 13.

Kora does not knowingly collect personal information from children under 13 except where permitted by law.

If Kora learns that it has collected information from a child under 13 in circumstances where collection was not permitted, Kora will take appropriate steps to delete the information.

Questions concerning children's privacy may be directed to:

privacy@koramoney.com

43. STATE AND FEDERAL PRIVACY RIGHTS

Your privacy rights may vary depending upon where you reside and the product or Service you use.

Depending on applicable law, you may have rights concerning:

access;
correction;
deletion;
portability;
disclosure of categories of information;
disclosure of sources;
disclosure of purposes;
disclosure of categories of recipients;
opting out of certain sales or sharing;
targeted advertising;
certain profiling;
sensitive personal information; and
other privacy rights.

These rights may be subject to statutory exemptions.

In particular, certain information may be subject to exemptions, exclusions, or different requirements under:

the FCRA;
GLBA;
Regulation P;
other federal financial-services laws; and
applicable state law.

A general privacy request does not necessarily require Kora to delete information that Kora is required or permitted to maintain for legal, regulatory, consumer-reporting, security, fraud-prevention, dispute-resolution, or other lawful purposes.

44. CALIFORNIA

California residents may have rights under applicable California privacy laws, including the California Consumer Privacy Act, as amended.

Subject to applicable exemptions, California residents may have rights concerning:

access;
correction;
deletion;
disclosure of categories of personal information;
disclosure of sources;
disclosure of purposes;
disclosure of recipients;
opting out of certain sales or sharing;
limiting certain uses of sensitive personal information; and
other rights provided by applicable California law.

Certain information maintained by Kora may be exempt or subject to separate requirements under federal law, including the FCRA and GLBA.

Requests may be submitted to:

privacy@koramoney.com

or:

Kora Financial Inc.
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Kora may require reasonable information to verify your identity.

45. VERMONT

For Vermont residents, Kora will comply with applicable Vermont privacy and financial-information requirements.

Kora will not share information except as permitted by applicable law.

Kora will comply with applicable restrictions concerning information about creditworthiness.

46. NEVADA

Nevada residents may request to be placed on Kora's internal Do-Not-Call list by contacting:

privacy@koramoney.com

or:

800-840-6604

Kora will process applicable Nevada privacy requests as required by law.

47. OTHER STATE-SPECIFIC PRIVACY REQUIREMENTS

Kora will comply with applicable state privacy, data-security, consumer-reporting, financial-privacy, telecommunications, and consumer-protection requirements.

Where state law provides rights or restrictions applicable to your relationship with Kora, those requirements will apply notwithstanding anything in these Terms to the contrary.

48. FINANCIAL PRIVACY AND GLBA

To the extent Kora is subject to the Gramm-Leach-Bliley Act and Regulation P, Kora will provide applicable privacy disclosures and comply with applicable requirements concerning nonpublic personal information.

A separate GLBA Privacy Notice may apply to particular Kora products or relationships.

The GLBA Privacy Notice supplements these Terms and the Kora Privacy Policy.

49. INTERNATIONAL DATA AND GDPR

Kora's Services are primarily intended for users in the United States.

To the extent Kora processes personal information subject to the European Union or European Economic Area General Data Protection Regulation (“GDPR”), Kora will comply with applicable GDPR requirements.

Depending upon the circumstances, applicable rights may include:

access;
rectification;
deletion;
restriction;
objection;
portability; and
withdrawal of consent.

Requests may be directed to:

privacy@koramoney.com

50. DISCLAIMERS OF WARRANTIES

Because of the possibility of human, technical, and mechanical error and other factors, the Services and information provided through the Services are provided “AS IS” and “AS AVAILABLE,” except to the extent expressly required otherwise by applicable law.

Kora and third-party data providers do not warrant that:

the Services will be uninterrupted;
the Services will be error-free;
information will always be accurate;
information will always be complete;
information will always be current;
defects will be corrected;
the Services will be compatible with every device;
the Services will be free of viruses or malicious code; or
the Services will satisfy every particular purpose.

Nothing in this Section limits Kora's responsibilities under applicable law, including applicable FCRA obligations.

51. CALCULATORS AND ESTIMATES

Calculators, tools, estimates, projections, scores, and other informational features provided through the Services may differ from actual results.

Such information is provided for informational purposes and should not be relied upon as a guarantee of a particular result.

52. LIMITATION OF LIABILITY

To the maximum extent permitted by applicable law, Kora and its affiliates, officers, directors, employees, agents, service providers, licensors, and representatives will not be liable for indirect, incidental, special, consequential, punitive, exemplary, or similar damages arising from or relating to your access to or use of the Services.

Kora will not be responsible for losses resulting from:

service interruptions;
technical failures;
internet failures;
third-party failures;
unauthorized access;
malicious code;
transmission failures;
device incompatibility;
delays;
errors beyond Kora's reasonable control; or
other circumstances outside Kora's reasonable control.

Nothing in these Terms limits liability or obligations that cannot lawfully be limited or waived.

Nothing in this Section limits Kora's obligations under the FCRA or other applicable consumer-protection law.

53. INDEMNIFICATION

To the extent permitted by applicable law, you agree to indemnify and hold harmless Kora and its affiliates, officers, directors, employees, agents, service providers, and representatives from claims, liabilities, damages, losses, and expenses arising from:

your violation of these Terms;
your misuse of the Services;
your violation of applicable law;
your unauthorized use of another person's information;
your violation of third-party rights; or
your fraudulent or intentional misconduct.

This provision does not apply to the extent prohibited by applicable law.

54. SUSPENSION OR TERMINATION

Kora may suspend, restrict, or terminate your access to the Services if:

you violate these Terms;
you provide inaccurate or fraudulent information;
you engage in unauthorized activity;
you misuse the Services;
you present a security risk;
you violate applicable law;
Kora is required to do so by law;
your account presents a material compliance risk; or
Kora otherwise determines that suspension or termination is necessary to protect Kora, consumers, customers, or the Services.

Kora may terminate access immediately where permitted by law.

Termination does not eliminate obligations that by their nature survive termination.

55. ACCOUNT CLOSURE

If you wish to close an account, contact:

support@koramoney.com
800-840-6604

Certain accounts may not be eligible for closure while an obligation remains outstanding, delinquent, or subject to collection or servicing.

Even after termination, Kora may retain information as required or permitted by law.

Termination of an account does not necessarily result in deletion of information.

56. SURVIVAL

The following provisions survive termination:

intellectual property;
confidentiality;
information and data rights;
aggregated/de-identified/anonymized data rights;
AI and machine-learning rights;
disclaimers;
limitations of liability;
indemnification;
dispute provisions;
governing law;
arbitration provisions, if applicable;
and other provisions that by their nature should survive termination.

57. GOVERNING LAW

These Terms are governed by applicable federal law and the laws applicable to the State of Illinois, without regard to conflict-of-law principles, except to the extent federal law or mandatory law of another jurisdiction applies.

Nothing in this Section limits rights that cannot lawfully be waived.

58. DISPUTE RESOLUTION

Before commencing formal proceedings concerning a dispute relating to the Services, you agree to contact Kora and provide a reasonable opportunity to investigate and resolve the issue.

This provision does not prevent you from exercising rights under applicable consumer-protection or consumer-reporting laws, including applicable FCRA dispute rights.

Any arbitration provision or class-action waiver applicable to a particular Kora product will be governed by the separate agreement applicable to that product.

59. SEVERABILITY

If any provision of these Terms is determined to be invalid, illegal, or unenforceable, that provision will be enforced to the maximum extent permitted by law, and the remaining provisions will remain in effect.

60. NO WAIVER

Kora's failure to enforce any provision of these Terms does not constitute a waiver of Kora's right to enforce that provision in the future.

61. ENTIRE AGREEMENT

These Terms, together with:

applicable product agreements;
account agreements;
loan documents;
authorizations;
disclosures;
the Kora Privacy Policy;
applicable GLBA Privacy Notice;
KoraConnect consumer-reporting disclosures; and
other agreements expressly incorporated by reference,

constitute the agreement governing your use of the applicable Services.

62. ELECTRONIC ACCEPTANCE

By clicking “Accept,” creating an account, submitting an application, connecting an account, accessing KoraConnect, using a Kora Service, or otherwise using the Services, you acknowledge that you have read, understood, and agreed to these Terms of Use.

Your electronic acceptance constitutes your agreement to these Terms to the same extent as a written signature, where permitted by applicable law.

63. CONTACT INFORMATION

Questions concerning these Terms may be directed to:

Kora Financial Inc.
Attn: Compliance Department
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Email: support@koramoney.com
Privacy: privacy@koramoney.com
Telephone: 800-840-6604

For KoraConnect consumer-reporting matters, including consumer-file requests and disputes:

Kora Financial Inc.
Attn: Consumer Reporting / Privacy
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Email: privacy@koramoney.com
Telephone: 800-840-6604

64. IMPORTANT KORACONNECT CONSUMER-REPORTING NOTICE

KoraConnect may operate as a Consumer Reporting Agency under the FCRA.

If you access or use KoraConnect consumer reports, you acknowledge that:

consumer reports may be obtained only for permissible purposes;
permissible purposes are consumer-specific;
a general contractual authorization does not create a permissible purpose;
consumer reports may not be used for an unauthorized purpose;
consumer-report information must be protected against unauthorized access and disclosure;
Kora may monitor subscriber access and usage;
Kora may require certifications and representations concerning permissible purpose;
Kora may investigate consumer disputes;
Kora may suspend or terminate access for violations of applicable law or these Terms; and
users of consumer reports remain independently responsible for complying with applicable FCRA requirements.

The FCRA protects the privacy and accuracy of consumer-report information and imposes obligations on CRAs, furnishers, and users of consumer reports.

65. IMPORTANT DATA AND AI AUTHORIZATION

By using the Kora Services, you acknowledge and agree that Kora may create and use Aggregated Data, De-Identified Data, and Anonymized Data for any purpose permitted under applicable law, including to:

develop new products and services;
improve existing products and services;
conduct research and analytics;
create data products;
develop models and algorithms;
develop, train, test, validate, evaluate, improve, and deploy AI systems;
develop, train, test, validate, evaluate, improve, and deploy machine-learning systems;
create synthetic data;
develop new technologies;
conduct fraud prevention and cybersecurity activities;
conduct product testing;
perform benchmarking;
conduct statistical analysis;
support commercial activities; and
otherwise conduct lawful business, technological, research, analytical, or commercial activities.

Kora may retain, disclose, share, license, transfer, commercialize, and otherwise use such Aggregated Data, De-Identified Data, and Anonymized Data for any purpose permitted by applicable law.

This authorization is intended to survive account closure or termination to the extent permitted by applicable law.

Nothing in this authorization:

creates a permissible purpose under the FCRA;
authorizes the unauthorized use of an identifiable consumer report;
waives a consumer's non-waivable rights;
limits Kora's obligations as a CRA; or
permits Kora to disregard applicable privacy, consumer-reporting, data-security, or other legal requirements.

66. ORDER OF PRECEDENCE FOR CONSUMER-REPORTING MATTERS

For matters involving identifiable consumer-report information, the following order will generally apply to the extent of any conflict:

applicable federal law, including the FCRA;
applicable state law;
applicable regulatory requirements;
applicable consumer-reporting disclosures and authorizations;
applicable product or account agreement;
these Terms of Use; and
other general Kora policies.

Nothing in these Terms is intended to reduce or waive a right or obligation imposed by applicable law.

67. EFFECTIVE DATE

These Terms of Use are effective September 1, 2026.

By accessing or using the Kora Services after the effective date, you acknowledge that you have reviewed and agree to these Terms of Use.

Kora Financial Inc.

Terms of Use

Last Updated: September 1, 2026

WELCOME TO KORA

1. ELIGIBILITY AND ACCEPTANCE

The Kora Services are generally intended for individuals who are at least 18 years old.

By accessing or using the Services, you represent and warrant that:

you are at least 18 years old;
you are legally capable of entering into a binding agreement;
you are not prohibited by law from accessing or using the Services;
you have not previously been banned, terminated, or denied access to the Services by Kora;
you are not acting on behalf of a person whose access to the Services has previously been terminated or denied; and
all information you provide to Kora is accurate, current, complete, and not misleading.

If you do not satisfy these requirements, you may not use the Services.

2. MODIFICATION OF THESE TERMS

Kora may modify these Terms of Use from time to time.

When Kora makes changes, Kora may provide notice through the Services, by email, through your account, or by other means required by applicable law.

The most current version of these Terms of Use will be available through the Kora website or applicable Service.

Unless otherwise required by applicable law, your continued access to or use of the Services after updated Terms of Use become effective constitutes your acceptance of the revised Terms.

3. ADDITIONAL PRODUCT AND ACCOUNT AGREEMENTS

Certain Kora products and services may require additional agreements.

For example, a loan product may require a separate loan agreement, promissory note, retail installment contract, security agreement, authorization, or other account documentation.

If you use a product or service that is subject to additional terms, you are bound by:

these Terms of Use;
the applicable product or account agreement;
applicable disclosures;
applicable authorizations;
Kora's Privacy Policy;
applicable GLBA Privacy Notice;
applicable consumer-reporting disclosures; and
any other applicable terms or notices.

If there is a conflict between these Terms and a separate product or account agreement concerning a specific product, the more specific agreement will control to the extent of the conflict.

4. KORACONNECT

KoraConnect is a Kora product that may provide consumer reporting, financial-data, analytics, verification, and related services.

Depending on the Service and the information involved, KoraConnect may:

collect information about consumers;
receive information from consumers and third parties;
obtain financial-account and transaction information;
receive information from data providers and furnishers;
maintain consumer information;
analyze consumer information;
create analytical and statistical information;
maintain information that may constitute a consumer report;
furnish consumer reports to authorized subscribers;
receive and investigate consumer disputes;
provide consumer disclosures;
support subscriber compliance;
provide data and analytical services; and
provide other services permitted by applicable law.

KoraConnect may operate as a Consumer Reporting Agency (“CRA”) under the Fair Credit Reporting Act (“FCRA”) and applicable state law.

Where KoraConnect performs consumer-reporting activities, those activities are subject to the FCRA and other applicable consumer-reporting laws.

5. CONSUMER REPORTING AGENCY REQUIREMENTS

When Kora acts as a CRA, Kora maintains procedures designed to comply with applicable FCRA requirements.

These requirements may include obligations relating to:

permissible purposes;
consumer-report privacy;
accuracy;
file disclosure;
consumer disputes;
reinvestigation;
identity theft;
security freezes and fraud alerts;
adverse actions;
furnishers;
subscriber certifications;
permissible-purpose representations;
access controls;
data retention;
data security;
disposal; and
recordkeeping.

Kora will furnish consumer reports only for purposes permitted by applicable law.

A subscriber or other user of a KoraConnect consumer report must independently satisfy applicable FCRA requirements.

Access to KoraConnect does not itself establish a permissible purpose to obtain a consumer report.

The FCRA's permissible purposes are consumer-specific, and a general contractual provision, disclaimer, or authorization does not create a permissible purpose where one otherwise does not exist.

6. PERMISSIBLE PURPOSES

Consumer reports may be obtained, used, or furnished only for purposes permitted by applicable law.

Depending on the circumstances, permissible purposes under the FCRA may include:

credit transactions;
account review;
collection of an obligation;
insurance underwriting;
employment purposes where applicable requirements are satisfied;
legitimate business transactions initiated by the consumer;
certain governmental purposes;
certain business transactions specifically authorized by the FCRA; and
other purposes expressly permitted by law.

Nothing in these Terms authorizes any person to obtain or use a consumer report without a permissible purpose.

A KoraConnect subscriber must provide representations and certifications concerning its permissible purpose as required by Kora and applicable law.

Kora may suspend or terminate access where Kora believes a subscriber or other user has violated, or may violate, applicable consumer-reporting requirements.

7. CONSUMER REPORTING INFORMATION AND CONSUMER RIGHTS

If Kora maintains a consumer report concerning you, you may have rights under the FCRA and applicable state law.

Depending on the circumstances, those rights may include:

requesting disclosure of your consumer file;
receiving information concerning the nature and substance of information maintained about you;
disputing inaccurate or incomplete information;
having qualifying inaccurate, incomplete, or unverifiable information corrected or deleted;
exercising rights relating to identity theft;
exercising applicable rights concerning security freezes or fraud alerts; and
receiving certain notices concerning adverse actions.

For information concerning KoraConnect consumer-reporting rights or to request a consumer file or submit a dispute:

Kora Financial Inc.
Attn: Consumer Reporting / Privacy
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Email: privacy@koramoney.com
Telephone: 800-840-6604

8. PRIVACY

If you use or obtain a Kora product or service, Kora may collect, use, maintain, disclose, and otherwise process information about you.

Kora's collection, use, disclosure, retention, and protection of information are described in the Kora Privacy Policy and applicable GLBA Privacy Notice.

The Privacy Policy is incorporated into these Terms by reference with respect to privacy and data practices.

These Terms do not limit the application of the Kora Privacy Policy or GLBA Privacy Notice.

You should review those documents carefully.

If you wish to submit a privacy request, you may contact:

privacy@koramoney.com
800-840-6604

Privacy rights may be subject to applicable legal exceptions, including exceptions applicable to information governed by the FCRA, GLBA, or other federal laws.

9. AGGREGATED, DE-IDENTIFIED, AND ANONYMIZED INFORMATION

Kora may create, derive, collect, use, retain, disclose, and share information that has been aggregated, de-identified, or anonymized.

You authorize Kora to use Aggregated Data, De-Identified Data, and Anonymized Data for any purpose permitted under applicable law.

This authorization is intentionally broad and includes, without limitation, the right to use such information to:

develop new products and services;
develop new features and technologies;
improve existing products and services;
conduct research;
conduct statistical analysis;
conduct benchmarking;
develop analytics;
develop models;
develop algorithms;
develop scores;
improve data quality;
conduct fraud detection and prevention;
conduct cybersecurity activities;
develop risk-management capabilities;
conduct product testing;
conduct quality assurance;
develop data products;
create analytical products;
develop, train, test, validate, evaluate, improve, and deploy artificial intelligence systems;
develop, train, test, validate, evaluate, improve, and deploy machine-learning systems;
create and use synthetic data;
conduct experimentation;
conduct research and development;
improve operational processes;
evaluate and develop business opportunities;
create new commercial offerings; and
otherwise conduct lawful business, technological, analytical, research, or commercial activities.

Kora may combine information from:

multiple consumers;
multiple accounts;
multiple products;
multiple services;
multiple data sources;
multiple periods of time; and
other datasets.

Kora may disclose, license, transfer, provide, or otherwise make Aggregated Data, De-Identified Data, and Anonymized Data available to:

affiliates;
service providers;
technology providers;
data providers;
business partners;
customers;
KoraConnect subscribers;
researchers;
analytics providers; and
other third parties,

for any purpose permitted by applicable law.

Kora may incorporate such information into products, services, datasets, analytical tools, models, algorithms, AI systems, machine-learning systems, and other technologies.

Where Kora represents information as de-identified or anonymized, Kora will maintain reasonable safeguards designed to prevent unauthorized re-identification.

10. ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING

Kora may use artificial intelligence (“AI”), machine learning, statistical modeling, automation, algorithms, and related technologies.

You expressly acknowledge and agree that Kora may use Aggregated Data, De-Identified Data, and Anonymized Data to:

develop AI systems;
train AI systems;
test AI systems;
validate AI systems;
evaluate AI systems;
improve AI systems;
deploy AI systems;
develop machine-learning models;
train machine-learning models;
test machine-learning models;
validate machine-learning models;
evaluate machine-learning models;
improve machine-learning models;
develop algorithms;
develop automated systems;
create synthetic data;
conduct research;
conduct experimentation;
develop new products and services; and
improve existing products and services.

Kora may use such information to develop technologies and offerings that do not currently exist and that may be developed or offered in the future.

Kora may provide Aggregated Data, De-Identified Data, and Anonymized Data to third parties for these purposes.

Kora's use of identifiable consumer-report information remains subject to the FCRA and other applicable law.

Nothing in these Terms creates a permissible purpose for obtaining, using, or furnishing an identifiable consumer report.

11. REGISTRATION INFORMATION

You may be required to register for certain Services.

When registering, you agree to provide accurate, current, complete, and truthful information.

You may not:

impersonate another person;
provide false information;
use another person's credentials;
create an account for an unauthorized purpose;
create multiple accounts to evade restrictions; or
otherwise misrepresent your identity or affiliation.

Kora may create a profile based on registration information and other information collected or received in connection with the Services.

12. ACCOUNT SECURITY

When you create an account, you agree to:

use a secure password;
keep your credentials confidential;
not share your credentials;
promptly report unauthorized access;
maintain current contact information; and
take reasonable precautions to protect your account.

If you believe your account has been compromised, contact Kora immediately at:

support@koramoney.com
800-840-6604

Kora uses reasonable information-security measures, but no system is completely secure.

You acknowledge the risk of unauthorized access resulting from compromised credentials, technical failures, attacks, or other circumstances beyond Kora's reasonable control.

13. MOBILE VERIFICATION AND SECURITY

You authorize your wireless carrier to use or disclose information concerning your wireless account and device, where available, to Kora or its service providers for purposes including:

identity verification;
device verification;
fraud prevention;
account security; and
protection of the Services.

Such information may include, where available:

mobile telephone number;
name;
address;
email address;
network status;
customer type;
customer role;
billing type;
device identifiers;
subscriber status; and
other information made available by your wireless provider.

Kora may compare information you provide with information associated with your wireless account for verification and fraud-prevention purposes.

14. CONNECTED ACCOUNTS

Kora may offer Services that permit you to connect or link an external financial account to Kora.

A connected external account is referred to as a “Connected Account.”

If you elect to connect an account, you authorize Kora to obtain information from that account as permitted by the connection and applicable law.

The information available may vary by institution and account type.

You should assume that Kora may receive information available through the Connected Account, which may include:

account balances;
transaction history;
deposits;
withdrawals;
transfers;
payment activity;
loan balances;
interest rates;
payment history;
account ownership information; and
other financial information made available through the connection.

15. USE OF CONNECTED ACCOUNT INFORMATION

Kora may use information obtained from Connected Accounts for purposes permitted by Kora's Privacy Policy and applicable law.

Such purposes may include:

providing requested Services;
facilitating transactions;
account servicing;
verification;
fraud prevention;
financial analysis;
product development;
improving and expanding Services;
identifying products or services that may be relevant to you;
evaluating eligibility for products or services;
pre-screening where legally permitted;
risk management; and
other purposes permitted by applicable law.

If Connected Account information is used in connection with KoraConnect consumer-reporting activities, applicable FCRA requirements will apply.

16. USE OF PLAID SERVICES

Kora may use Plaid Inc. (“Plaid”) and other third-party providers to facilitate Connected Accounts.

When you use a Plaid-powered connection, Plaid may access and transmit information as reasonably necessary to provide its services.

Plaid's use of information is governed by Plaid's applicable privacy policy and terms.

You acknowledge that third-party providers may have privacy practices separate from Kora's.

Kora does not control third-party privacy policies.

17. LOAN INQUIRIES AND APPLICATIONS

This may include obtaining information from:

consumer reporting agencies;
financial institutions;
data providers;
identity-verification providers;
fraud-prevention providers;
government sources; and
other sources permitted by applicable law.

Where a consumer report is obtained, the use of that report must comply with the FCRA and applicable law.

Your consent to a particular acquisition or use of a consumer report may also be provided through a separate authorization, application, disclosure, or agreement.

18. APPLICATION VERIFICATION

You authorize Kora, its servicers, agents, and authorized service providers to verify information you provide in connection with a Kora product or Service.

Kora may use third-party sources to verify:

identity;
address;
income;
employment;
financial accounts;
financial information;
loan information;
application information; and
other information relevant to the requested Service.

19. ACCURACY OF INFORMATION

You agree to provide accurate, current, and complete information.

You are responsible for promptly updating information that becomes inaccurate or incomplete.

Kora maintains procedures designed to maintain accurate information.

If you believe information maintained by Kora is inaccurate or incomplete, you may contact:

support@koramoney.com
800-840-6604

If the information is subject to FCRA requirements, Kora will process qualifying disputes pursuant to applicable FCRA procedures.

20. COMMUNICATIONS

You expressly authorize Kora, its affiliates, agents, service providers, and representatives to communicate with you concerning:

registration;
account activity;
applications;
transactions;
payments;
servicing;
security;
fraud;
legal matters;
regulatory matters;
products and services;
customer support; and
other matters relating to your relationship with Kora.

Communications may be made by:

email;
telephone;
postal mail;
SMS/text message;
push notification;
automated communications;
prerecorded messages;
artificial voice;
automated telephone dialing systems; and
other lawful communication methods.

Kora will comply with applicable law concerning communications and consent.

21. MARKETING COMMUNICATIONS

Kora may contact you concerning products and services that Kora believes may be of interest to you, subject to applicable law.

Promotional communications will include applicable opt-out mechanisms.

You may opt out of promotional email communications by using the unsubscribe mechanism provided in the communication.

You generally may not opt out of communications necessary to:

service an account;
complete a transaction;
provide security notices;
respond to requests;
comply with law; or
provide other necessary Service communications.

22. TELEPHONE, SMS, AND AUTODIALER TERMS

Where permitted by applicable law, you authorize Kora and its agents, representatives, and service providers to contact you using:

telephone calls;
SMS/text messages;
prerecorded messages;
artificial voice;
automatic telephone dialing systems;
automatic texting systems; and
other electronic communication systems.

You understand that message and data rates may apply.

You are responsible for charges imposed by your wireless carrier.

You represent that telephone numbers you provide to Kora are numbers at which you may be contacted and that you have authority to provide those numbers.

You agree to promptly notify Kora if a telephone number is no longer associated with you.

You may opt out of SMS communications by following the instructions provided in the applicable message, including texting “STOP” where available.

23. KORA SMS SHORT CODE TERMS

If you opt in to Kora's SMS program, Kora may send messages concerning:

Services;
loan applications;
account activity;
security;
transactions;
promotions;
marketing; and
affiliate or non-affiliate partner offerings, where permitted by law.

You may cancel the SMS service by texting STOP to the applicable short code.

For assistance, contact:

800-840-6604

Message and data rates may apply.

Carriers are not responsible for delayed or undelivered messages.

Additional SMS terms may apply to specific programs.

24. SERVICE-RELATED COMMUNICATIONS

Kora may send service-related communications, including:

account verification;
security alerts;
transaction confirmations;
changes to Services;
technical notices;
legal notices;
regulatory notices;
payment reminders;
fraud alerts; and
other necessary communications.

You may not opt out of communications that Kora reasonably determines are necessary to provide Services, protect your account, comply with law, or satisfy regulatory requirements.

25. FINANCIAL DECISIONS

You are responsible for financial decisions you make based upon information obtained through the Kora Services.

Kora Services may provide estimates, analyses, recommendations, data, or other information.

You are responsible for evaluating your own financial circumstances and determining whether a product or Service is appropriate for you.

Nothing in the Services constitutes individualized financial, legal, tax, investment, or other professional advice unless expressly stated otherwise.

26. LOAN SERVICING

Communications may concern:

payments;
account status;
delinquency;
servicing;
account information;
legal notices;
security; and
other matters relating to the loan.

Where permitted by law, Kora may contact persons you identify in connection with an account for purposes permitted by applicable law.

27. ELECTRONIC RECORDS AND SIGNATURES

By using the Services, you agree that electronic records, disclosures, notices, authorizations, acknowledgments, and signatures may be used where permitted by law.

Your electronic acceptance may have the same legal effect as a written signature where permitted by applicable law.

You are responsible for maintaining access to electronic communications and records provided to you.

28. SITE AND SERVICE RISKS

Online services involve inherent risks.

You acknowledge that:

information transmission may be interrupted;
Services may experience technical difficulties;
transactions may be delayed;
third-party services may become unavailable;
internet connectivity may fail;
information may be intercepted despite reasonable safeguards;
transactions may not be completed as expected; and
Services may be temporarily unavailable.

You should confirm the status of any transaction before relying upon it.

29. THIRD-PARTY WEBSITES AND SERVICES

The Kora Services may contain links to websites, applications, products, or services operated by third parties.

Kora does not control third-party websites or services.

Kora is not responsible for:

third-party content;
third-party privacy practices;
third-party security;
third-party products;
third-party services; or
third-party terms.

Your use of a third-party service is governed by that third party's applicable terms and privacy policies.

30. TRACKING TECHNOLOGIES

Kora and third-party service providers may use:

cookies;
pixels;
web beacons;
scripts;
device identifiers;
analytics technologies;
location-identifying technologies; and
similar technologies.

These technologies may collect information concerning:

pages viewed;
links clicked;
browser type;
IP address;
device type;
operating system;
referring and exit URLs;
email interactions;
usage patterns;
approximate location;
application activity; and
other technical information.

Kora may use such information to:

operate Services;
maintain security;
remember preferences;
analyze usage;
improve Services;
measure performance;
conduct analytics;
support marketing;
provide personalized content; and
develop and improve Services.

Where required by applicable law, Kora will provide applicable notice and choices regarding tracking technologies.

31. INTEREST-BASED ADVERTISING

Kora may participate in interest-based advertising.

Kora and third-party advertising companies may use information concerning interactions with Kora websites, applications, or Services to provide advertisements or measure advertising performance.

Third parties may use cookies and similar technologies to recognize devices and collect information concerning browsing activity.

Where required by applicable law, Kora will provide appropriate opt-out mechanisms.

Nothing in this Section authorizes the use of identifiable consumer-report information for advertising purposes in violation of the FCRA or other applicable law.

32. GOOGLE ANALYTICS AND OTHER ANALYTICS

Kora may use Google Analytics and other analytics technologies.

Analytics services may collect information concerning how visitors interact with Kora websites and Services.

Kora may use analytics information to:

evaluate website activity;
measure performance;
understand usage;
improve Services;
conduct research; and
evaluate advertising effectiveness.

Third-party analytics providers maintain their own privacy policies.

33. INFORMATION AND FEEDBACK YOU PROVIDE

By submitting information, materials, suggestions, comments, ideas, recommendations, or other content to Kora, you represent that you have the right to provide such information.

This provision does not override:

applicable privacy laws;
the FCRA;
GLBA requirements;
applicable consumer rights;
contractual restrictions; or
other non-waivable legal requirements.

34. FEEDBACK

You may provide suggestions, comments, ideas, recommendations, or feedback concerning the Services (“Feedback”).

Feedback is provided voluntarily.

Kora may use Feedback without restriction or compensation to you, including to:

develop products;
develop features;
improve Services;
create derivative works;
develop technologies;
market products; and
otherwise operate its business.

You grant Kora a royalty-free, fully paid, worldwide, transferable, sublicensable, irrevocable, perpetual license to use Feedback and any ideas embodied in Feedback.

35. INTELLECTUAL PROPERTY

Kora owns or licenses the intellectual property contained in the Services, including:

text;
graphics;
images;
logos;
trademarks;
software;
source code;
object code;
interfaces;
databases;
content;
designs;
workflows;
technology; and
other materials.

The Services are protected by applicable intellectual-property laws.

Except as expressly permitted by Kora, you may not:

reproduce;
duplicate;
copy;
modify;
reverse engineer;
distribute;
sell;
resell;
license;
lease;
exploit commercially; or
create derivative works from

the Services or Kora intellectual property.

36. MOBILE APPLICATION LICENSE

You may not:

decompile;
reverse engineer;
disassemble;
decrypt;
derive source code;
modify;
adapt;
create derivative works;
remove proprietary notices;
create bots;
interfere with the application; or
use the application in violation of applicable law.

37. PROHIBITED USES

You agree not to use the Services to:

violate applicable law;
commit fraud;
impersonate another person;
misrepresent information;
obtain unauthorized information;
access another person's account;
interfere with Services;
introduce malicious code;
circumvent security;
scrape or harvest data without authorization;
reverse engineer the Services;
misuse consumer-report information;
obtain or use a consumer report without a permissible purpose;
violate the rights of another person;
transmit unlawful material; or
engage in activity that Kora reasonably determines may harm Kora, consumers, customers, or the Services.

38. CONSUMER-REPORT INFORMATION — USER OBLIGATIONS

If you receive or access consumer-report information through KoraConnect, you agree that you will:

obtain consumer reports only for permissible purposes;
use consumer reports only for the purpose for which they were obtained;
maintain appropriate controls over consumer-report information;
prevent unauthorized access;
prevent unauthorized disclosure;
comply with applicable FCRA requirements;
comply with applicable state consumer-reporting requirements;
maintain required certifications and representations;
promptly notify Kora of suspected misuse or unauthorized access;
cooperate with Kora's compliance monitoring;
cooperate with consumer disputes and investigations where required; and
securely dispose of consumer-report information as required by law.

Violation of these obligations may result in immediate suspension or termination of access.

39. SUBSCRIBER MONITORING AND AUDIT RIGHTS

Kora may monitor subscriber access to KoraConnect.

Kora may conduct audits, reviews, or other compliance activities concerning:

permissible purpose;
consumer-report access;
report usage;
adverse-action usage;
data security;
subscriber certifications;
data retention;
dispute handling;
compliance with contractual restrictions; and
compliance with applicable law.

Kora may request information reasonably necessary to verify compliance.

Failure to cooperate may result in suspension or termination of access.

40. ACCURACY AND CONSUMER DISPUTES

Kora maintains procedures designed to support the accuracy of information used in consumer reports.

If Kora receives a qualifying dispute concerning information in a consumer report, Kora may investigate the dispute and take action required by applicable law.

Kora may communicate with furnishers and other information sources in connection with a dispute.

Users and furnishers may have independent legal obligations under the FCRA concerning disputed information.

41. SECURITY

Kora maintains a security program incorporating administrative, technical, and physical safeguards.

Safeguards may include:

access controls;
authentication;
encryption;
network security;
monitoring;
logging;
vulnerability management;
employee training;
background screening;
incident response;
vendor management;
data classification;
security testing;
session time-outs; and
other security controls.

No security program can guarantee absolute protection.

If Kora determines that information under its control has been compromised, Kora will take reasonable steps to investigate and provide notice where required by applicable law.

42. CHILDREN'S PRIVACY

The Services are not directed to children under 13.

Kora does not knowingly collect personal information from children under 13 except where permitted by law.

If Kora learns that it has collected information from a child under 13 in circumstances where collection was not permitted, Kora will take appropriate steps to delete the information.

Questions concerning children's privacy may be directed to:

privacy@koramoney.com

43. STATE AND FEDERAL PRIVACY RIGHTS

Your privacy rights may vary depending upon where you reside and the product or Service you use.

Depending on applicable law, you may have rights concerning:

access;
correction;
deletion;
portability;
disclosure of categories of information;
disclosure of sources;
disclosure of purposes;
disclosure of categories of recipients;
opting out of certain sales or sharing;
targeted advertising;
certain profiling;
sensitive personal information; and
other privacy rights.

These rights may be subject to statutory exemptions.

In particular, certain information may be subject to exemptions, exclusions, or different requirements under:

the FCRA;
GLBA;
Regulation P;
other federal financial-services laws; and
applicable state law.

44. CALIFORNIA

California residents may have rights under applicable California privacy laws, including the California Consumer Privacy Act, as amended.

Subject to applicable exemptions, California residents may have rights concerning:

access;
correction;
deletion;
disclosure of categories of personal information;
disclosure of sources;
disclosure of purposes;
disclosure of recipients;
opting out of certain sales or sharing;
limiting certain uses of sensitive personal information; and
other rights provided by applicable California law.

Certain information maintained by Kora may be exempt or subject to separate requirements under federal law, including the FCRA and GLBA.

Requests may be submitted to:

privacy@koramoney.com

or:

Kora Financial Inc.
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Kora may require reasonable information to verify your identity.

45. VERMONT

For Vermont residents, Kora will comply with applicable Vermont privacy and financial-information requirements.

Kora will not share information except as permitted by applicable law.

Kora will comply with applicable restrictions concerning information about creditworthiness.

46. NEVADA

Nevada residents may request to be placed on Kora's internal Do-Not-Call list by contacting:

privacy@koramoney.com

or:

800-840-6604

Kora will process applicable Nevada privacy requests as required by law.

47. OTHER STATE-SPECIFIC PRIVACY REQUIREMENTS

Kora will comply with applicable state privacy, data-security, consumer-reporting, financial-privacy, telecommunications, and consumer-protection requirements.

Where state law provides rights or restrictions applicable to your relationship with Kora, those requirements will apply notwithstanding anything in these Terms to the contrary.

48. FINANCIAL PRIVACY AND GLBA

A separate GLBA Privacy Notice may apply to particular Kora products or relationships.

The GLBA Privacy Notice supplements these Terms and the Kora Privacy Policy.

49. INTERNATIONAL DATA AND GDPR

Kora's Services are primarily intended for users in the United States.

Depending upon the circumstances, applicable rights may include:

access;
rectification;
deletion;
restriction;
objection;
portability; and
withdrawal of consent.

Requests may be directed to:

privacy@koramoney.com

50. DISCLAIMERS OF WARRANTIES

Kora and third-party data providers do not warrant that:

the Services will be uninterrupted;
the Services will be error-free;
information will always be accurate;
information will always be complete;
information will always be current;
defects will be corrected;
the Services will be compatible with every device;
the Services will be free of viruses or malicious code; or
the Services will satisfy every particular purpose.

Nothing in this Section limits Kora's responsibilities under applicable law, including applicable FCRA obligations.

51. CALCULATORS AND ESTIMATES

Calculators, tools, estimates, projections, scores, and other informational features provided through the Services may differ from actual results.

Such information is provided for informational purposes and should not be relied upon as a guarantee of a particular result.

52. LIMITATION OF LIABILITY

Kora will not be responsible for losses resulting from:

service interruptions;
technical failures;
internet failures;
third-party failures;
unauthorized access;
malicious code;
transmission failures;
device incompatibility;
delays;
errors beyond Kora's reasonable control; or
other circumstances outside Kora's reasonable control.

Nothing in these Terms limits liability or obligations that cannot lawfully be limited or waived.

Nothing in this Section limits Kora's obligations under the FCRA or other applicable consumer-protection law.

53. INDEMNIFICATION

your violation of these Terms;
your misuse of the Services;
your violation of applicable law;
your unauthorized use of another person's information;
your violation of third-party rights; or
your fraudulent or intentional misconduct.

This provision does not apply to the extent prohibited by applicable law.

54. SUSPENSION OR TERMINATION

Kora may suspend, restrict, or terminate your access to the Services if:

you violate these Terms;
you provide inaccurate or fraudulent information;
you engage in unauthorized activity;
you misuse the Services;
you present a security risk;
you violate applicable law;
Kora is required to do so by law;
your account presents a material compliance risk; or
Kora otherwise determines that suspension or termination is necessary to protect Kora, consumers, customers, or the Services.

Kora may terminate access immediately where permitted by law.

Termination does not eliminate obligations that by their nature survive termination.

55. ACCOUNT CLOSURE

If you wish to close an account, contact:

support@koramoney.com
800-840-6604

Certain accounts may not be eligible for closure while an obligation remains outstanding, delinquent, or subject to collection or servicing.

Even after termination, Kora may retain information as required or permitted by law.

Termination of an account does not necessarily result in deletion of information.

56. SURVIVAL

The following provisions survive termination:

intellectual property;
confidentiality;
information and data rights;
aggregated/de-identified/anonymized data rights;
AI and machine-learning rights;
disclaimers;
limitations of liability;
indemnification;
dispute provisions;
governing law;
arbitration provisions, if applicable;
and other provisions that by their nature should survive termination.

57. GOVERNING LAW

Nothing in this Section limits rights that cannot lawfully be waived.

58. DISPUTE RESOLUTION

Before commencing formal proceedings concerning a dispute relating to the Services, you agree to contact Kora and provide a reasonable opportunity to investigate and resolve the issue.

This provision does not prevent you from exercising rights under applicable consumer-protection or consumer-reporting laws, including applicable FCRA dispute rights.

Any arbitration provision or class-action waiver applicable to a particular Kora product will be governed by the separate agreement applicable to that product.

59. SEVERABILITY

60. NO WAIVER

Kora's failure to enforce any provision of these Terms does not constitute a waiver of Kora's right to enforce that provision in the future.

61. ENTIRE AGREEMENT

These Terms, together with:

applicable product agreements;
account agreements;
loan documents;
authorizations;
disclosures;
the Kora Privacy Policy;
applicable GLBA Privacy Notice;
KoraConnect consumer-reporting disclosures; and
other agreements expressly incorporated by reference,

constitute the agreement governing your use of the applicable Services.

62. ELECTRONIC ACCEPTANCE

Your electronic acceptance constitutes your agreement to these Terms to the same extent as a written signature, where permitted by applicable law.

63. CONTACT INFORMATION

Questions concerning these Terms may be directed to:

Kora Financial Inc.
Attn: Compliance Department
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Email: support@koramoney.com
Privacy: privacy@koramoney.com
Telephone: 800-840-6604

For KoraConnect consumer-reporting matters, including consumer-file requests and disputes:

Kora Financial Inc.
Attn: Consumer Reporting / Privacy
500 W. Madison Street, Suite 1000B
Chicago, IL 60661

Email: privacy@koramoney.com
Telephone: 800-840-6604

64. IMPORTANT KORACONNECT CONSUMER-REPORTING NOTICE

KoraConnect may operate as a Consumer Reporting Agency under the FCRA.

If you access or use KoraConnect consumer reports, you acknowledge that:

consumer reports may be obtained only for permissible purposes;
permissible purposes are consumer-specific;
a general contractual authorization does not create a permissible purpose;
consumer reports may not be used for an unauthorized purpose;
consumer-report information must be protected against unauthorized access and disclosure;
Kora may monitor subscriber access and usage;
Kora may require certifications and representations concerning permissible purpose;
Kora may investigate consumer disputes;
Kora may suspend or terminate access for violations of applicable law or these Terms; and
users of consumer reports remain independently responsible for complying with applicable FCRA requirements.

The FCRA protects the privacy and accuracy of consumer-report information and imposes obligations on CRAs, furnishers, and users of consumer reports.

65. IMPORTANT DATA AND AI AUTHORIZATION

develop new products and services;
improve existing products and services;
conduct research and analytics;
create data products;
develop models and algorithms;
develop, train, test, validate, evaluate, improve, and deploy AI systems;
develop, train, test, validate, evaluate, improve, and deploy machine-learning systems;
create synthetic data;
develop new technologies;
conduct fraud prevention and cybersecurity activities;
conduct product testing;
perform benchmarking;
conduct statistical analysis;
support commercial activities; and
otherwise conduct lawful business, technological, research, analytical, or commercial activities.

Kora may retain, disclose, share, license, transfer, commercialize, and otherwise use such Aggregated Data, De-Identified Data, and Anonymized Data for any purpose permitted by applicable law.

This authorization is intended to survive account closure or termination to the extent permitted by applicable law.

Nothing in this authorization:

creates a permissible purpose under the FCRA;
authorizes the unauthorized use of an identifiable consumer report;
waives a consumer's non-waivable rights;
limits Kora's obligations as a CRA; or
permits Kora to disregard applicable privacy, consumer-reporting, data-security, or other legal requirements.

66. ORDER OF PRECEDENCE FOR CONSUMER-REPORTING MATTERS

For matters involving identifiable consumer-report information, the following order will generally apply to the extent of any conflict:

applicable federal law, including the FCRA;
applicable state law;
applicable regulatory requirements;
applicable consumer-reporting disclosures and authorizations;
applicable product or account agreement;
these Terms of Use; and
other general Kora policies.

Nothing in these Terms is intended to reduce or waive a right or obligation imposed by applicable law.

67. EFFECTIVE DATE

These Terms of Use are effective September 1, 2026.

By accessing or using the Kora Services after the effective date, you acknowledge that you have reviewed and agree to these Terms of Use.

Kora Financial Inc.