Privacy Policy

Personal Information

When you register and use Kredixa, we collect the following personal information:

• Phone number (used for account registration and OTP-based authentication via Firebase Phone Auth)
• Full name and profile details you provide
• Profile photograph (optional)

Location Data

Kredixa is a location-based platform. We collect:

• Your geographic location (latitude and longitude) when you enable location services
• Address information you provide in your profile
• Location data is used for proximity-based matching with nearby lenders or borrowers

Financial Information

To facilitate lending transactions, we collect:

• Loan request details (amount, interest rate, duration, collateral type)
• Lending capacity and terms (for lenders)
• Transaction history and repayment records

Communication Data

We store messages exchanged through the in-app chat system, including text messages and shared files or images, to facilitate communication between lenders and borrowers.

Device Information

We collect device tokens for push notifications via Firebase Cloud Messaging (FCM) to send you important updates about your loans, messages, and account activity.

Kredixa respects your privacy and does NOT request, track, or store access to the following:

• Your phone contacts or address book
• Your call logs or SMS messages
• Your media files, photo gallery, or camera roll
• Your microphone or voice recordings
• Your SMS or message content
• Any data from your social media accounts
• Your biometric data (fingerprint, face ID)

Kredixa only accesses data that is strictly necessary to provide its core service: connecting money seekers with money lenders. No invasive permissions are required to use the app.

Every piece of data we collect is used exclusively for one purpose: to facilitate user-to-user matchmaking between money seekers and money lenders. We do not use your data for advertising, profiling, or any secondary purpose.

Specifically, we use the information we collect for the following purposes:

• Account creation, authentication, and identity verification
• Location-based matching to connect borrowers with nearby lenders
• Facilitating loan requests, offers, and transaction management
• Enabling real-time communication between users via in-app chat
• Sending push notifications for loan updates, messages, and important alerts
• Platform improvement, analytics, and troubleshooting
• Fraud prevention and security enforcement
• Customer support and dispute resolution

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used solely to operate and improve the Kredixa marketplace.

Where Your Data is Stored

Your data is stored securely using industry-standard infrastructure:

• Account data, loan records, and chat messages are stored in MongoDB Atlas with encryption at rest
• Uploaded files (such as chat attachments and profile photos) are stored in Amazon Web Services (AWS) S3 with server-side encryption (region: ap-south-1)
• Authentication is handled via Firebase with secure token-based verification

Security Measures

We implement the following security measures to protect your data:

• JWT-based authentication with token expiry
• Encrypted data transmission over HTTPS/TLS
• Secure OTP-based phone authentication (no passwords stored)
• Pre-signed URLs with limited expiry for file access
• Role-based access controls for admin operations
• Regular security audits and monitoring

We do not sell your personal information. We may share your information in the following limited circumstances:

• With other users: Your profile information (name, location, lender/borrower status, ratings) is visible to other users for the purpose of facilitating loan transactions
• With service providers: We use third-party services (AWS, Firebase, MongoDB Atlas) for infrastructure, and they process data on our behalf under strict data protection agreements
• For legal compliance: We may disclose information when required by law, court order, or government regulation
• For safety: We may share information to prevent fraud, protect user safety, or enforce our terms of service

As a Kredixa user, you have the following rights regarding your personal data under the Digital Personal Data Protection Act (DPDPA), 2023 and other applicable laws:

• Access: You can view your personal information through your profile at any time
• Correction: You can update your profile information through the app
• Deletion: You can request deletion of your account and associated data by contacting our support team. Note that some data may be retained for legal and regulatory compliance
• Data Portability: You can request a copy of your personal data in a structured format
• Withdraw Consent: You can withdraw consent for location tracking or push notifications through your device settings

In-App Data Control Mechanisms

Kredixa provides you with the following in-app options to control your data:

• Request Data Deletion: You can request complete deletion of your account and all associated data at any time through the app or by contacting support
• Restrict Real-Time Location Tracking: You can disable location tracking at any time through your device settings. The app will continue to function but location-based matching may be limited
• Revoke Profile Visibility: You can choose to hide your profile from other users at any time through your privacy settings in the app
• Opt-Out of Push Notifications: You can disable push notifications at any time through your device settings
• Restrict Data Sharing: You can limit the information visible to other users through your privacy settings

All data control requests will be processed within seventy-two (72) hours of receipt. You will receive confirmation once your request has been completed.

We retain your data for the following periods:

• Account data: Retained for as long as your account is active, plus 5 years after account deletion for regulatory compliance
• Loan transaction records: Retained for 8 years after loan completion as per financial record-keeping requirements
• Chat messages: Retained for 2 years after the last message in a conversation
• Push notification tokens: Deleted when you uninstall the app or revoke notification permissions

The Kredixa mobile application does not use browser cookies. However, we use the following technologies:

• AsyncStorage on your device to store authentication tokens and app preferences locally
• Firebase Analytics may collect anonymized usage data to help us improve the platform
• The Kredixa admin dashboard (web application) may use cookies for session management

Kredixa is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor, we will promptly delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes through in-app notifications or push notifications. Your continued use of Kredixa after changes are posted constitutes your acceptance of the updated policy.

Kredixa is solely a technology platform that connects lenders and borrowers. Important disclaimers:

• Kredixa is NOT a bank, non-banking financial company (NBFC), or money lending institution
• The owners, operators, and developers of Kredixa are not responsible for any financial loss, non-repayment, fraud, or disputes arising from transactions between users
• All lending and borrowing transactions are conducted directly between users at their own risk
• Kredixa does not guarantee the repayment of any loan, the creditworthiness of any user, or the outcome of any transaction
• Users are solely responsible for evaluating risks, verifying counterparties, and making informed financial decisions
• By using Kredixa, you acknowledge and accept that the platform bears no liability for any monetary losses incurred through transactions facilitated on the platform

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• In-App Support: Use the support feature within the Kredixa app
• Email: [email protected]

Grievance Officer (DPDPA, 2023)

In accordance with the Digital Personal Data Protection Act (DPDPA), 2023 and the Information Technology Act, 2000, the name and contact details of our Grievance Officer are provided below:

• Name: Durga Prasad Nakka
• Mobile: 96661 44491
• Email: [email protected]

The Grievance Officer will acknowledge your complaint within twenty-four (24) hours and endeavour to resolve it within thirty (30) days from the date of receipt. If you are not satisfied with the resolution, you may escalate the matter to the relevant Data Protection Board of India as constituted under the DPDPA, 2023.