This Privacy Policy applies to all individuals who use TupaLoan’s digital lending and credit evaluation services. The policy explains how user information is collected, used, stored, and protected.

All data processing activities are strictly limited to legitimate business needs and comply with applicable data protection regulations.

We collect specific categories of information to provide accurate credit assessment, secure loan processing, and smooth app operation:

Identification Information: We ask for basic information such as your name, ID number or passport, phone number, and email. This allows us to confirm it’s really you and ensure your account is securely protected.

Financial & Employment Information: We may ask about your income range, work status, and borrowing history. This helps us understand your needs and provide loan offers that are fair and suitable for you.

Device & Technical Information: Your device type, operating system, and technical settings are collected automatically to keep the app running smoothly, detect unusual activity, and protect your account from fraud.

App Interaction Information: We keep track of how you navigate and interact with the app so we can improve performance, simplify the process, and provide better support when you need help.

TupaLoan may request certain device permissions to enable accurate credit evaluation and secure operations:

SMS Permission: TupaLoan may request limited access to your SMS inbox to detect messages that clearly relate to financial transactions (such as notifications from banks, mobile money operators, or payment providers).

The app scans messages locally on your device using predefined financial keywords. Only messages identified as relevant are processed.

From these filtered messages, essential details — such as sender ID, transaction summary, and date — are securely encrypted and uploaded to TupaLoan’s servers for the sole purpose of credit evaluation and repayment capacity analysis.

Messages unrelated to financial activity remain on your device and are never uploaded or stored by us.

Approximate Location: TupaLoan may access your approximate location, determined from your network information (such as IP address).

This is used solely to verify whether our services are available in your region and to help prevent fraudulent or unauthorized use.

Your location data is processed securely, and only the minimum information necessary is encrypted and uploaded to our servers for eligibility and security checks.

We do not use location data for real-time tracking, marketing, or profiling.

Device Information: TupaLoan may collect certain technical details from your device, such as model, operating system version, Android ID, network type, and language settings. This information is encrypted and securely uploaded to our servers, and is used only to ensure app compatibility, verify legitimate device access, and prevent potential fraud. It is not used for advertising, tracking, or any unrelated purposes.

Installed Applications List: TupaLoan may request access to the list of applications installed on your device. This access is limited to a one-time scan using predefined financial-related keywords to identify apps linked to lending or credit activity. The purpose of this scan is to help determine whether there is potential multi-loan exposure, so that we can accurately assess your creditworthiness. Only the names of relevant applications are encrypted and securely uploaded to our servers for risk evaluation. Applications unrelated to financial activity are ignored, and no complete list is stored or used for advertising, profiling, or tracking.

Camera: TupaLoan may request access to your device’s camera solely to complete liveness verification during identity checks. This process ensures that the person applying is the genuine account holder and helps prevent identity fraud. A single live image is captured for verification purposes, encrypted, and securely uploaded to our servers. The camera is not used for any other purpose, and no continuous video recording or unrelated images are stored.

All data is encrypted before transmission and handled securely.

The information collected by TupaLoan is processed only for legitimate and necessary purposes directly related to the services we provide. This includes confirming the applicant’s identity through secure verification procedures, ensuring compliance with applicable KYC and anti-fraud requirements, and performing credit evaluations to determine eligibility and appropriate loan terms. Collected data is also used to process loan applications, facilitate disbursements, manage repayments, and maintain accurate account records. In addition, the information supports fraud detection, prevention of unauthorized access, and preparation of required compliance reports. Technical and usage data help improve the reliability, stability, and overall performance of the application, ensuring a secure and efficient user experience. All information is handled in accordance with strict internal access controls and is never used for advertising, behavioral profiling, or cross-platform marketing.

User information is stored on secure servers with strong encryption and strict access controls. Certain data is retained beyond the duration of active services for the purpose of ongoing risk assessment, credit analysis, and compliance with applicable financial regulations. Such retained data is used exclusively for legitimate risk evaluation and financial service operations, and is never processed for marketing, profiling, or unrelated purposes. If a user closes their account or permanently discontinues use of our services, all personal information linked to that account will be securely erased from active systems, except where limited retention is required by law.

AES encryption for data at rest and TLS/SSL encryption for data in transit

Strict role-based access control and regular internal audits

Real-time monitoring for unusual access and incident response protocols

TupaLoan does not sell user information to third parties. Data sharing occurs only under the following conditions:

All third-party access is governed by strict confidentiality and data processing agreements.

TupaLoan provides users with clear and accessible ways to manage their personal data. You may review and correct your account details at any time through the in-app settings or by contacting our support team. Permissions such as SMS, Camera, or Location can be disabled from your device settings, though certain functions of the app may no longer operate as intended. If you decide to close your account, you may request the permanent deletion of your personal data, subject to any legal or regulatory retention requirements. You may also withdraw any consent you have previously granted for specific data processing activities, without affecting the services already provided before the withdrawal.

TupaLoan is intended only for individuals aged 18 and above. No personal data from minors is knowingly collected. If such information is detected, it will be removed promptly. Guardians may contact us to request deletion.

For questions, requests, or complaints about this Privacy Policy or your data rights, please contact:

TupaLoan may revise this Privacy Policy due to changes in services, regulatory requirements, or operational needs. Significant updates will be communicated via in-app notifications or other appropriate channels. Continued use of TupaLoan after updates constitutes acceptance of the revised policy.