Your information.
Understand your choices.

Scope & operator

This draft describes the proposed privacy disclosures for App Name, its app and informational website. It must be reconciled with the actual product, service providers and data flows before being used as an effective policy.

Information covered

The observed app flow includes basic details, bank details and identity verification. The final policy should identify the specific fields and documents collected at each step.

• Profile information: details entered during registration and the application process.
• Verification information: identity documents and any verification image requested in the app.
• Bank and application information: bank details, application records, offer and order information.
• Payment and support information: repayment records and details provided when asking for help.

Device information, analytics, permission access and any additional collection remain to be confirmed. They are not asserted as active practices in this draft.

Purposes of processing

Proposed purposes to validate against the actual service include:

• Creating and maintaining a user account.
• Verifying submitted information and supporting eligibility assessment.
• Displaying application updates, offers, orders and repayment information.
• Responding to support and account-related requests.
• Managing security, fraud prevention and applicable record-keeping obligations.

The final policy must explain the actual purpose for each category of information and any processing that relies on user consent.

Permissions & choices

Where a feature requires a device permission, the purpose and the information accessed should be explained before permission is requested. The final policy must list the permissions actually used by App Name.

Permission settings may be managed through the device settings. Refusing a permission may affect the feature that depends on it. An optional permission should not be described as mandatory for unrelated features.

Access to contacts, messages, location or other device data is not confirmed by this draft.

Sharing & service providers

The final policy must identify the actual recipients or recipient categories, the information shared and why it is shared. Potential categories requiring confirmation include the relevant lender, verification providers, payment providers, hosting providers and support providers.

Any disclosure for an applicable legal requirement or to protect the service should be accurately described. No provider identity, marketing-sharing practice or sale-of-data practice is assumed in this preview.