Ecokash Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to provide loan services, verify identity, assess creditworthiness, prevent fraud, comply with legal obligations, and maintain account security. The information collected may vary depending on the device platform.

A. Information Collected on Both Android and iOS

1.1 Identity Information

We may collect:

• Full name
• Date of birth
• Gender
• Residential address
• Phone number
• Email address
• Bank Verification Number (BVN)
• National Identification Number (NIN) where required
• Government-issued identification documents

Purpose:

• Identity verification
• Regulatory compliance
• Loan application processing

1.2 Camera Information

Purpose:

• Selfie capture
• Identity verification
• Official ID card photos upload
• Liveness detection

Data collected:

Images and verification materials voluntarily submitted by users. All image data is fully encrypted and securely uploaded to our protected server. We do not access local photo albums.

1.3 Approximate Location Information

Purpose:

• Verify user residency within Nigeria
• Fraud prevention
• Risk assessment

Data collected:

Approximate location only (estimated 1-km radius). Data is encrypted in transit and sent only to our secure servers.

1.4 Emergency Contact Information

Purpose:

Anti-fraud verification, identity validation, and credit risk scoring to confirm user profile authenticity.

Data collected:

Specific fields manually selected by the user: contact name, phone number, and relationship. We do not request full address book or global contacts scanning permissions. This profile data is encrypted and securely stored on our servers.

1.5 Device Information

Purpose:

• Fraud detection
• Security monitoring
• System compatibility
• Service optimisation

Data collected may include:

• Device model
• Operating system version
• Device identifiers permitted by the platform
• IP address
• Mobile network information
• Application version
• Device language settings

All uploads are strictly encrypted and stored securely on our servers.

2. Loan Data Usage (Credit Assessment)

When you apply for a loan through Ecokash, we may collect and process information to evaluate your eligibility and manage lending services.

This may include:

• Personal identification information
• Financial information
• Transaction history
• Device information
• Repayment behaviour

This information is used for:

• Loan eligibility evaluation
• Credit risk assessment
• Fraud detection and prevention
• Loan processing and repayment management
• Compliance with applicable financial regulations

Ecokash does not sell personal financial data to third parties.

3. Loan Terms Disclosure (Interest Rates and Examples)

Ecokash provides short-term digital loans through the application.

Loan terms may include:

• Loan Amount: Varies depending on eligibility
• Loan Tenure: Typically between 91 days and 360 days
• Annual Percentage Rate (APR): May range from 10% to 33%

Actual loan terms may vary based on user eligibility and applicable regulations.

Loan Calculation Example:

Example: If a user borrows NGN 100,000 for 120 days at an APR of 24%:

• Interest = NGN 7,890
• Total Repayment = NGN 107,890

This example is provided for illustration purposes only. Actual loan terms may vary.

4. How We Use Your Information

We use collected information to:

• Create and manage accounts
• Provide loan and financial services
• Process transactions and repayments
• Verify identity and prevent fraud
• Improve application performance
• Provide customer support
• Send important service notifications
• Comply with legal and regulatory requirements

5. Information Sharing and Disclosure

We do not sell your personal information.

We may share information only when necessary with:

Service Providers

Third-party vendors supporting:

• Payment processing
• Identity verification
• Fraud prevention
• Cloud hosting and infrastructure
• Customer support

Such providers are contractually obligated to protect your information.

Financial and Regulatory Institutions

Including:

• Licensed credit bureaus
• Banks and payment processors
• Regulatory authorities
• Law enforcement agencies when legally required

Corporate Transactions

Information may be transferred during:

• Mergers
• Acquisitions
• Corporate restructuring

Any successor entity will remain bound by this Privacy Policy.

6. Data Security

We implement industry-standard safeguards to protect your information.

Security measures include:

• AES-256 encryption for sensitive data
• HTTPS/TLS encrypted transmission
• Access controls and authentication procedures
• Secure cloud infrastructure
• Routine security monitoring and audits

All collected data is fully encrypted before transmission to our secure servers (https://srv.ecokash.com). While we strive to protect information, no electronic transmission or storage system can be guaranteed to be completely secure.

7. Data Retention

We retain information only as long as necessary for legitimate business, legal, and regulatory purposes.

Typical retention periods include:

• Active loan accounts: Duration of relationship plus 5 years
• Closed accounts: Up to 5 years
• Rejected applications: Up to 12 months
• Regulatory records: As required by applicable law

Data may be retained longer where required by legal obligations or dispute resolution requirements.

8. Your Privacy Rights

Subject to applicable laws, you may request to:

• Access your personal information
• Correct inaccurate information
• Delete eligible personal information
• Withdraw consent where processing is consent-based
• Restrict certain processing activities
• Object to certain processing activities

Data Deletion Request:

Users may request deletion of their personal information at any time. To submit a deletion request or exercise other rights, please contact:

Email: [email protected]

Please include in your request:

• Registered phone number or email
• Account information for verification

We may require identity verification before processing requests. Requests will be processed within a reasonable timeframe, subject to regulatory requirements.

9. Children’s Privacy

Ecokash services are intended only for individuals who are at least 18 years old.

We do not knowingly collect personal information from minors. If we become aware that information from a minor has been collected, we will take appropriate steps to delete it.

10. Cookies and Similar Technologies

Ecokash may use cookies or similar technologies to:

• Maintain secure sessions
• Analyse service usage
• Improve application performance
• Provide better user experiences

Users may manage cookie preferences through device or browser settings.

11. International Data Transfers

Where necessary, information may be processed on secure servers located inside or outside Nigeria. Whenever information is transferred internationally, we implement reasonable safeguards to ensure compliance with applicable privacy laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updated versions will be posted within the App and on our website. Continued use of the App after changes become effective constitutes acceptance of the revised Privacy Policy.