LendKash Loan Service Privacy Policy

This Privacy Policy (hereinafter referred to as "this Policy") is formulated by BRICK BRIDGE COMPANY LTD (hereinafter referred to as "we" or "the Company") and applies to our loan service mobile application LendKash (hereinafter referred to as "the Application") and related services (including but not limited to websites, mini-programs, etc.). This Policy aims to explain to you (hereinafter referred to as "User" or "you") our principles, methods, and your rights in collecting, using, storing, sharing, and protecting your personal information, in order to protect your privacy and security.

Please read and understand all the contents of this Policy carefully before using the Application. If you do not agree to any terms of this Policy, please immediately stop using the Application and related services; once you use the Application, it will be deemed that you have fully understood and agreed to all the provisions of this Policy.

I. Definitions

For ease of understanding, the following terms are used in this Policy:

Personal Information: refers to various information recorded electronically or otherwise relating to an identified or identifiable natural person, excluding anonymized information (as defined in accordance with the Nigerian Data Protection Act (NDPA) and related regulations).

Sensitive Personal Information: This refers to personal information that, if leaked, illegally provided, or misused, may endanger personal and property safety, and is highly likely to cause damage to personal reputation, mental and physical health, or discriminatory treatment. This includes, but is not limited to, identification document information, biometric information, bank account information, and health information (as defined by the NDPA).

Processing: This refers to any operation involving the collection, storage, use, processing, transmission, provision, or disclosure of personal information.

User/You: This refers to a natural person who registers, logs in, or uses the services of this application, including borrowers, potential borrowers, and other users of the application's functions.

II. How We Collect Your Personal Information

To achieve the core functions of this application (including but not limited to loan application, review, disbursement, repayment, and user services), we will collect your personal information in accordance with the principles of legality, legitimacy, and necessity. The specific scope and methods of collection are as follows:

Personal information collection：

Information Collection Scope: When you apply for a loan, we will collect two types of necessary information through a designated form. Basic identity information includes your name and ID number, used to complete real-name verification.

Purpose of Information Use: 1. Identity verification to ensure the applicant's identity is authentic and valid; 2. Credit assessment to match you with a suitable loan plan; 3. Business processing to complete core processes such as loan application review, fund disbursement, and repayment management, ensuring transaction security.

Storage and Transmission Security: All collected personal information is stored using encrypted technology and transmitted to our official server (address: https://wlq.brcompltd.store/) via HTTPS protocol, ensuring information security throughout the entire process.

Location Information Collection：

Scope of Information Collection: When you use the Lendkash service, we need to obtain information about the approximate location of your current device based on service requirements.

Purpose of Information Usage: Firstly, to recommend loan options tailored to local market conditions, taking into account regional policy differences; secondly, to further verify the status of your loan application and ensure service compliance.

Data Security and Permissions: All collected personal information is stored using encrypted technology and transmitted to our official server (address: https://wlq.brcompltd.store/) via HTTPS protocol, ensuring information security throughout the entire process.Data is temporarily stored and will be anonymized within 60 days after loan settlement. You must manually grant location permissions upon first use and can disable these permissions at any time within the application.

Camera Permissions:

Camera permissions are primarily used for taking and uploading photos of your ID card and for facial recognition. This permission is used to capture your facial image and verify your identity. To ensure that loan transactions are conducted by you and to protect your account security, we will not access any content in your photo album.Data Security and Permissions: All collected personal information is stored using encrypted technology and transmitted to our official server (address: https://wlq.brcompltd.store/) via HTTPS protocol, ensuring information security throughout the entire process.Data is temporarily stored and will be anonymized within 60 days after loan settlement. You must manually grant location permissions upon first use and can disable these permissions at any time within the application.

SMS Access:

Before you apply for a loan, we will request permission to read your SMS messages. This permission is solely for assessing your financial health to provide a customized credit solution.

Data Collection Scope: To ensure your data security, we strictly adhere to the Nigerian Data Protection Regulation and Google Developer Policy. We only collect data from SMS messages containing the following financial keywords: [NAIR, REDI, MONI, DUE, PAY, LAIRA, KASH, FINANCE, FUND, MONEY, LOAN, LEND, CASH, WALLET, DEBT, Arbitrage, Amortization, Liquidity, Fiduciary]. Your information will be transmitted via TLS 1.3 encryption and stored on a local Nigerian server: [https://wlq.brcompltd.store]. Original data will be permanently deleted within 24 hours of loan approval.

App List Permissions:

To protect your funds and data security, we need to collect information about the apps you actively install from the app store. Please note: We do not collect data on native apps on your device. We will scan your currently installed apps for high-risk apps, Trojans, viruses, and other harmful applications. If such apps are detected, we will use this information to assess your creditworthiness and may reject your application.Data Security and Permissions: All collected personal information is stored using encrypted technology and transmitted to our official server (address: https://wlq.brcompltd.store/) via HTTPS protocol, ensuring information security throughout the entire process.Data is temporarily stored and will be anonymized within 60 days after loan settlement. You must manually grant location permissions upon first use and can disable these permissions at any time within the application.

Contact Information Permission:

This permission is primarily used for periodic follow-ups to understand user needs and optimize the application. This information can also be used as backup in emergencies, such as when we cannot directly contact you but need to verify your loan application information. We will only use your contact information for loan services and will not harass you or your contacts.Data Security and Permissions: All collected personal information is stored using encrypted technology and transmitted to our official server (address: https://wlq.brcompltd.store/) via HTTPS protocol, ensuring information security throughout the entire process.Data is temporarily stored and will be anonymized within 60 days after loan settlement. You must manually grant location permissions upon first use and can disable these permissions at any time within the application.

Device Permission:

Device information access includes information such as device model, operating system version, and device identifier (e.g., IMEI). This information uniquely identifies your device. Device information may be a factor in the risk assessment process. For example, if you use the same device to apply for different loans under different accounts, we cannot rule out the possibility of loan fraud. We need to verify that the application device is not a virtual device; to prevent loan fraud, we do not accept any applications from virtual devices. We have also optimized the application's compatibility and performance across different devices to provide a smoother user experience.Data Security and Permissions: All collected personal information is stored using encrypted technology and transmitted to our official server (address: https://wlq.brcompltd.store/) via HTTPS protocol, ensuring information security throughout the entire process.Data is temporarily stored and will be anonymized within 60 days after loan settlement. You must manually grant location permissions upon first use and can disable these permissions at any time within the application.

III. How We Use Your Personal Information

We will only use your personal information for the following purposes, strictly adhering to the "minimum necessary" principle:

(I) Providing and Optimizing Core Services

Completing the loan application process, including identity verification, credit assessment, credit limit approval, contract signing, and loan disbursement.

Processing your repayment requests, sending repayment reminders (SMS, in-app notifications), and updating repayment status.

Providing customer service, answering inquiries, and handling complaints and disputes.

(II) Risk Management and Compliance Requirements

Monitoring abnormal transactions (such as overdue repayments, account theft), and taking risk control measures (such as freezing accounts, restricting withdrawals).

Cooperating with legitimate investigations by regulatory agencies or judicial authorities (such as anti-money laundering, anti-fraud), and providing necessary information as required.

(III) Personalized Services and Notifications

Recommending loan products or promotional activities that meet your needs based on your borrowing history, repayment behavior, etc. (provided you have not explicitly rejected the marketing).

Sending service-related notifications (such as system maintenance announcements, interest rate adjustment explanations). (iv) Improve products and services. Analyze user behavior data, optimize application functions, interface design and service processes to improve user experience.

Your Personal Information Rights

In accordance with the NDPA and relevant laws, you have the following rights, which you can exercise through the "Contact Us" section of this agreement:

(I) Right to Access and Correction

You have the right to access and copy your personal information held by us; if you find the information to be inaccurate or incomplete, you may request us to correct or supplement it.

(II) Right to Deletion

You may request us to delete your personal information in the following circumstances:

We have achieved the purpose of processing or you have withdrawn your consent;

You no longer use the service and have no outstanding debts;

We have processed your information in violation of the law or the agreement.

You can also clear your data using the app's built-in "Cancel Account" function. Your data will be anonymized and deleted within 24 hours of cancellation.

(III) Right to Withdraw Consent

For information processed based on your consent (such as marketing push notifications), you may withdraw your consent at any time (by turning off the relevant permissions through "Settings - Privacy Settings" in the APP), but withdrawal will not affect the processing activities previously carried out based on your consent.

(IV) Right to Restrict Processing

If you believe there is a dispute regarding our processing of your information, you may request us to suspend processing until the dispute is resolved. (V) Right to Data Portability

You have the right to request that we transfer your personal information in a structured, machine-readable format to a third party you designate (provided it is technically feasible and does not infringe upon the rights of others).

(VI) Right to Object

For processing of your information based on "legitimate interests" (such as risk monitoring), you may object to the processing on legitimate grounds, and we will cease the relevant processing and explain the reasons.

VII. Child Privacy Protection

This application does not provide services to minors under the age of 18 (or lower as stipulated by Nigerian law). We will not proactively collect children's personal information; if we accidentally discover that we have collected children's information, we will delete it within a reasonable period.

VIII. Privacy Responsibility of Third-Party Services

This application may access third-party services (such as payment platforms, map services, and advertising platforms), and these third parties may have independent privacy policies. We cannot control the information processing behavior of third parties, and we recommend that you read the privacy policies of third parties before using related functions and authorize them with caution.

IX. Changes and Effectiveness of the Agreement

We may modify this agreement due to legal updates, business adjustments, etc. The revised agreement will be notified to you through the following methods:

A pop-p notification within this application;

A notification sent to your registered mobile phone number or email address.

Your continued use of this application constitutes your acceptance of the revised agreement; if you do not agree, you may choose to discontinue use.

X. Contact Us

If you have any questions about this agreement or need to exercise your personal information rights, you can contact our privacy officer through the following methods:

Company Name: BRICK BRIDGE COMPANY LTD

Address: 19 ADEBOLAADEFUYE STREET, OWUTU, IKORODU, LAGOS STATE, NIGERIA

Phone: +234 813 006 9052 (Nigeria local number)

Email: privacy@lendkash.com

Working Hours: Monday to Friday 9:00-18:00 (Nigeria time)

BRICK BRIDGE COMPANY LTD