This privacy policy applies to all services and features provided by our company and its product CranCash, including any personal information you provide or that is generated while using this application. The purpose of this policy is to ensure that, in the process of collecting, using, and handling your personal data, we comply with relevant laws and regulations applicable in Nigeria and safeguard your privacy and data security.

We are committed to processing your personal information in a lawful, fair, and transparent manner, in accordance with the terms of this privacy policy and applicable privacy protection laws and regulations, ensuring that your privacy is respected and protected.

When you use the CranCash application, We may request access to certain sensitive permissions on your device to collect relevant information and upload it to our servers for credit evaluation. This is to ensure the proper functioning of our services and enhance your user experience. The permissions we may request and their descriptions are as follows:

When applying for a loan, we may request access to your device’s camera specifically for the purpose of conducting a live identity verification. This ensures that it is genuinely you using the service and helps protect your account from unauthorized access. Granting this permission is voluntary, and you can disable it at any time through your device settings. After you authorize and complete the photo capture, we will upload your photo to our server solely for facial verification. Once the verification is successful, your loan application will proceed.

In order to evaluate your credit profile, make risk management and anti-fraud assessments, CranCash will collect your SMS messages, including sender, date, content and timestamp. Please NOTE that only your financial SMS messages will be collected, the filtering mechanism is to use financial keywords (e.g. “loan”, “transfer”, bank names) to identify whether a SMS message(s) should be collected. Rest assured that your personal messages and non-financial messages will not be collected. The SMS messages collected will be transmitted and uploaded to our server at https://m.crancash.co/analysis for credit analysis in a secure network(https). We will not share your SMS data with any third-parties. In addition, the SMS data will be retained only for a limited period necessary for credit review and regulatory compliance. You could go to settings to cancel permissions at anytime you want. You can choose not to grant this permission, but it may affect your loan assessment.

With your authorization, we will collect your IP address to verify that your location falls within our service area and to safeguard account security by preventing unauthorized access. Your IP address will be encrypted and securely transmitted to our servers for analysis, and we implement strict data protection measures to ensure your privacy.

Upon your authorization, we may request access to phone status information to collect device-specific data, which may include the brand, model, Widevine ID and system version. Additionally, we may collect other device-related information, such as battery level. This information helps us verify your identity, prevent unauthorized account access, and optimize our service to ensure compatibility with a broader range of devices. All device information will be encrypted and securely transmitted to our servers.

We collect non-personal information about installed apps but only transmit and store data related to specified financial apps. We determine financial apps based on predefined criteria, including app type and function. This helps us assess behavioral risks, detect high-risk apps, and evaluate potential multi-loan activity.

All collected data is securely encrypted and uploaded to our servers (https://m.crancash.co/analysis). We do not store or transmit non-financial app data and do not share your app list with third parties.

When you use the CranCash application, We may collect and process the following categories of personal data. The collection of this data is aimed at gaining a comprehensive understanding of our users' financial status, conducting credit risk assessments, and ensuring that we provide you with appropriate financial services:

This includes your name, identification number, passport number, and date of birth. This information is necessary for user identity verification, ensuring compliance, and preventing fraudulent activities. By accurately verifying your identity, we can ensure that only legitimate users access our services and effectively prevent identity theft.

This includes your phone number, email address, and residential address. This information is used to maintain timely communication with you, send loan-related notifications, repayment reminders, service updates, and other necessary communications. This helps to maintain effective communication between you and us, ensuring that you receive important service-related information in a timely manner.

This includes your job title, years of employment, and income level. This data is used to assess your financial capability, helping us better understand the stability and source of your income. Such information is critical for conducting credit assessments and determining your borrowing capacity, enabling us to offer more suitable loan products and repayment plans.

This includes your marital status and the number of family members. This information helps assess your financial responsibilities and stability. Marital status and family structure directly impact an individual's financial obligations, and understanding this allows us to more accurately evaluate your financial situation and risk profile, thus providing more personalized and appropriate lending solutions.

All data collected is strictly protected and will be used lawfully in accordance with applicable laws and regulations to ensure the privacy and security of your information.

We collects and processes your personal data based on the following legal grounds, in accordance with applicable laws and regulations:

Contractual Performance: We process your personal data to fulfill the contractual relationship between you and us, particularly in the provision of financial services. We need to collect and process your identity, contact, and financial information in order to provide loan services and ensure the smooth processing of repayments.

Legitimate Interests: In certain cases, we process your personal data to protect our legitimate interests. This includes preventing fraudulent activities, ensuring the security of our services, assessing credit risk, and improving our products and services. We ensure that such processing does not unnecessarily affect your fundamental rights and freedoms.

Legal Obligations: In some instances, we are required to process your personal data to comply with legal obligations. This may include adherence to anti-money laundering regulations, tax reporting requirements, or other regulatory obligations.

Consent: In specific cases, we process your personal data based on your explicit consent, such as when you authorize us to access sensitive permissions on your device or process certain sensitive data. You have the right to withdraw your consent at any time, but this will not affect the lawfulness of processing based on consent before its withdrawal.

The purposes of processing your personal data are to provide you with secure and compliant financial services, conduct credit risk assessments, verify your identity, and ensure the security and reliability of our services. We may also use this data to improve our products and user experience.

We are committed to disclosing your personal data only when it is lawful and necessary to ensure the smooth operation of our services. We may share your personal data with third parties that provide services on our behalf, such as payment processors, credit assessment agencies, and cloud storage providers. These third parties will only have access to your data to the extent necessary to provide their services, and we ensure that they comply with applicable privacy laws and implement necessary security measures to protect your information.

In certain instances, we may be required by law to disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies. For example, when complying with anti-money laundering regulations or tax reporting obligations, we are obligated to provide relevant information. Additionally, to prevent fraudulent activities and ensure system security, we may share information with partners involved in risk management and security assessments.

If we undergoes corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. In such cases, we will take appropriate measures to ensure the protection of your privacy rights and notify you before any data transfer takes place.

We will only disclose your personal data when it is necessary, based on legal obligations, legitimate interests, or with your explicit consent. We do not sell or rent your personal data to any third parties.

We retains your personal data in accordance with applicable laws, regulations, and our business needs. We will only retain your personal information for as long as it is necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Once these purposes have been fulfilled or the maximum retention period allowed by law has been reached, we will securely delete or anonymize your personal data unless we are required by law or have a legitimate reason to retain it.

To ensure the security of your personal data, we implement strict technical and organizational measures to prevent unauthorized access, loss, alteration, or disclosure. These security measures include, but are not limited to, data encryption, access controls, firewalls, and regular security audits. Additionally, our systems and servers are housed in secure facilities that comply with industry standards and are continuously monitored by professional personnel to maintain their security.

While we employ industry-standard security measures, no system is completely free of risk. Therefore, we encourage you to take necessary precautions to protect your account information, such as using strong passwords and avoiding the disclosure of sensitive information on public networks.

We are committed to continuously updating and improving our security measures to address new threats and challenges, ensuring that your data is fully protected within our systems.

We respects your privacy and ensures that you have the following rights regarding your personal data:

You have the right to request access to the personal data we hold about you and obtain a copy of this data. We will provide the relevant information as required by law to ensure transparency.

If your personal data is inaccurate or incomplete, you have the right to request that we correct or update it. We encourage you to keep your personal information accurate to ensure that our services accurately reflect your needs.

In certain circumstances, you can request that we delete your personal data, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent. We will process your request in accordance with legal requirements, unless we are legally obligated to retain the data.

Under certain conditions, you have the right to request that we restrict the processing of your personal data, for instance, if you contest the accuracy of the data or object to how it is being processed.

You have the right to request that we provide the personal data you have supplied to us in a structured, commonly used format, or that we transfer this data directly to another data controller, where applicable.

You have the right to object to the processing of your personal data for specific reasons, particularly if the processing is based on legitimate interests or for direct marketing purposes. If you object, we will stop processing your data unless we have compelling legal grounds to continue.

If we process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights or have any questions regarding the processing of your personal data, you may contact us at any time. We will respond to your request within a reasonable timeframe and take appropriate actions in accordance with applicable laws and regulations.

In providing the CranCash application, We may rely on third-party service providers or data processors to assist us in processing your personal data and delivering our services. These third parties include payment processors, credit assessment agencies, cloud storage services, and technical support providers. Additionally, we have integrated Google’s Advertising ID and AppsFlyer to optimize ad targeting, analyze user behavior, and assess conversion rates.

Google’s Advertising ID is an anonymous identifier used to track ad performance and conduct user behavior analysis, helping us deliver more personalized ad experiences to you. Users can manage or reset their Advertising ID through their device settings to ensure ads are tailored to their interests.

AppsFlyer is a tool designed to analyze user conversions, enabling us to understand user behavior patterns, optimize ad campaigns, and enhance user experiences. Through AppsFlyer, we collect and analyze user interaction data to ensure continuous improvement in our marketing strategies and service offerings.

We have entered into strict agreements with all third parties, ensuring they process your personal data only in accordance with our instructions and in compliance with relevant data privacy laws and regulations. These third parties will have access to user data only to the extent necessary to provide their services and are required to implement reasonable technical and organizational security measures to protect the integrity and confidentiality of the data.

We regularly review the security practices of these third-party service providers to ensure they take appropriate measures to safeguard your data and prevent unauthorized access, alteration, or loss.

We remains responsible for all third-party data processing activities, ensuring that they process your personal data in accordance with this privacy policy and applicable privacy laws.

We do not knowingly collect or process personal data from individuals under the age of 18. Our services are not intended for minors, and we require that users confirm their age during registration. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete the information. If you believe a minor has provided us with personal data, please contact us to ensure its removal.

We reserves the right to update or modify this privacy policy at any time. Any changes will be posted within the application or on our website, and, where appropriate, notified to you via other communication channels. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data. Continued use of our services after any amendments constitutes your acceptance of the updated policy.

Email: customerservices@crancash.co

Contact Number: +234 08078931162

Website：https://www.crancash.online