Consent-first identity, built for Africa

Your data.
Your consent. One wallet.

UCAP lets you share verified personal information with banks, lenders, and services — on your terms. Approve once, see every active share, and revoke access in a single tap.

Free to use. No personal data is shared without your explicit consent.

wallet.ucap.africa
Active grants
3
2 banks, 1 lender
Last shared
Today
Income proof → Equity Bank
Pending requests
1
Awaiting your review
Equity Bank
Mortgage pre-approval
until 12 Jun 2026
M-Kopa
Device financing
until 30 May 2026
Britam Insurance
Life cover quote
until 01 Jul 2026

A single source of truth for your personal data.

Built around three quiet promises: see everything, control everything, never lose the trail.

One-tap consent

Approve a partner request with a single tap. No long forms, no fine-print traps. Every field is shown in plain English before it leaves your wallet.

Revoke anytime

Change your mind? Pull a grant in seconds. Partners are notified instantly and any cached data is sealed off.

Full audit trail

Every approval, every share, every revoke — timestamped and tamper-evident. Your consent history is always one tap away.

For partners

Drop in Apply with UCAP and verify customers in minutes.

One script tag. A signed, consent-first session. Real, verified data delivered straight to your backend — never scraped, never stale.

<script src="https://ucap.africa/embed/button.js" async></script>

<button data-ucap-apply
        data-ucap-product="prd_mortgage_v1"
        data-ucap-client="pub_live_xxx">
  Apply with UCAP
</button>

Three steps. No surprises.

01

Build your wallet

Add the documents you'd otherwise re-upload everywhere — once. Encrypted at rest, only you hold the key.

02

Approve on request

When a partner asks for data, UCAP shows exactly what's requested, why, and for how long. You decide.

03

Stay in control

Track every active share, revoke with one tap, and audit who's seen what — forever.

Envelope-encrypted PII

ID numbers and sensitive fields are encrypted at rest with rotated keys.

Consent-first by design

No partner reads anything without an explicit, time-bound grant from you.

Tamper-evident audit

Every privileged action lives in an append-only audit log.