Privacy Policy

1. Phone Number (Mandatory)

Required to establish a unique user profile and authenticate account owner identity. Used to deliver One-Time Passwords (OTP), issue updates on revolving credit status, and secure account access. Encrypted during transmission via TLS 1.3 protocol and stored in physically segregated, access-controlled databases.

2. Email Address (Optional)

Provided voluntarily to set up a secondary channel for account notifications. Used for transmitting monthly billing summaries, official statements, and system alerts. Protected using SHA-256 cryptographic hashing algorithms to prevent unauthorized access.

3. Camera & Image Data (Optional)

Allows real-time document capture required for financial verification procedures. Used to capture Know Your Customer (KYC) documents and user photos for identity verification during underwriting. Hardware permission is prompted exclusively during active usage; background camera access is strictly prohibited.

4. Emergency Contact Information

Required to construct a secondary identity validation framework and evaluate risk. Used to verify identity or reach out solely if the applicant becomes uncontactable regarding credit obligations or during fraud investigations. Encrypted and stored in restricted vaults; contact details are never marketed or shared with third parties.

5. User ID, Device ID & Advertising ID (Optional)

Required to recognize unique device environments and protect against account takeover risks. Aids in preventing multi-account fraud and optimizing application performance across hardware types. Anonymized and decoupled from real-world identification numbers in secondary database environments.

6. Coarse / Approximate Location (Optional)

Ensures jurisdictional compliance with Indian regional lending rules. Verifies that credit requests originate within serviced geographic territories and flags unusual login locations. Converted into generalized regional codes without recording high-precision GPS coordinates.

7. Application Crash Logs

Needed to monitor system stability and diagnose software failures. Helps engineering teams debug application errors, minimize latency, and improve software reliability. Diagnostic data is completely scrubbed of personally identifiable information (PII) before storage.

8. Installed Applications Inventory

Needed to detect system-level fraud tools and unauthorized screen-sharing applications. Scans for malicious utilities or remote-access software that pose risks to credit line security. Evaluated through temporary local runtime execution without constructing permanent user software logs.

9. Comprehensive Device Information (Storage, Battery, Bluetooth, Hardware, RAM, Network, Sensors)

Generates an anti-fraud device fingerprint to block automated bots, emulator usage, and device cloning attempts. Parameters are hashed into an irreversible checksum, ensuring raw telemetry is kept confidential.

10. SMS Permissions (Optional)

To verify financial transactions and streamline credit risk assessments. Evaluates transactional SMS messages sent by financial institutions to gauge credit history; personal messages are filtered out. Scanned locally using automated parsing rules; personal conversations are strictly ignored and never uploaded.