Privacy Policy

Mobile Number (Mandatory)

Why & How We Use It: Your phone number acts as your primary account ID. We use it to verify your identity via One-Time Passwords (OTPs), deliver critical updates regarding your credit line, prevent identity theft, and send regulatory disclosures.

How We Protect It: This data is stored in highly restricted, isolated servers with strict access controls, accessible only by secure automated communication systems.

Email Address (Optional)

Why & How We Use It: Providing your email is voluntary. It helps us add an extra layer of security for account recovery, send monthly statements, and deliver formal legal notifications or policy modifications.

How We Protect It: Email addresses undergo advanced cryptographic hashing to shield them from unauthorized scraping, phishing, or accidental data leaks.

Camera & Image Access (Optional)

Why & How We Use It: This permission allows you to take real-time photos of your KYC documents or upload images of invoices to resolve billing disputes.

How We Protect It: We strictly prohibit background data collection. The app only accesses your camera during active, user-initiated actions, and no images are scanned without your explicit command.

Emergency Contacts (Reference Network)

Why & How We Use It: We collect designated reference contacts to build a backup verification channel. This is used exclusively to confirm your identity during critical account lockouts or to mitigate severe fraud risks.

How We Protect It: These details are heavily encrypted immediately upon collection. They are never shared with third parties or used for marketing activities.

User, Device & Advertising Identifiers (Optional)

Why & How We Use It: User and Device IDs ensure your session remains stable across networks and prevent unauthorized Account Takeovers (ATO). Advertising IDs help customize your app experience.

How We Protect It: Advertising tokens are completely decoupled from your legal identity and stored in a separate database section. You can reset or revoke this access at any time through your operating system settings.

Approximate Location (Optional)

Why & How We Use It: We evaluate your regional location (coarse tracking) to verify that credit applications originate within legally permissible Indian territories and to flag suspicious cross-border transactions.

How We Protect It: Your precise coordinates are never tracked. Location data is converted into broad regional zones and processed instantly without creating permanent history logs.

Crash Logs (System Stability)

Why & How We Use It: When an unexpected error occurs, the app collects technical performance details to help our engineering team identify bugs, optimize performance, and maintain platform stability.

How We Protect It: All crash reports are thoroughly anonymized and stripped of any personally identifiable information (PII) before being analyzed.

Installed Application Packages

Why & How We Use It: We scan the list of installed software to detect malicious software, remote-access mirroring tools, or fraudulent overlay apps that might attempt to steal your credit credentials.

How We Protect It: This scanning process relies on transient cryptographic signatures executed on the fly. We do not build permanent profiles of your application library.

Call Logs (Optional)

Why & How We Use It: With your explicit consent, this temporary access is used during the registration phase to facilitate a seamless, automated verification process, eliminating manual entry errors.

How We Protect It: This data extraction is strictly momentary. No call history or logs are stored, saved, or uploaded to our permanent servers.

Comprehensive Device Metrics

Why & How We Use It: We analyze specific hardware parameters — including remaining storage capacity, battery status, active Bluetooth status, hardware model, memory (RAM) allocation, network connection strength, and internal sensor data. This creates a unique digital signature to block automated bot attacks and optimize user interface displays.

How We Protect It: These metrics are aggregated and converted into a one-way cryptographic hash token, used strictly for device authentication without exposing individual hardware data.

SMS Data / Messages (Optional)

Why & How We Use It: With your explicit, affirmative consent, we collect and monitor transactional and financial SMS logs (including sender names, transaction amounts, and dates) strictly to evaluate your creditworthiness, process financial applications, and streamline fraud detection algorithms. We do not read, access, or collect personal or social SMS messages.

How We Protect It: SMS data is encrypted during transmission using industry-standard SSL/TLS protocols and processed through our automated credit evaluation engines. No unencrypted text contents or raw logs are stored on our public-facing servers, and data access is strictly restricted to automated scoring systems.