1. Scope and Application
This Privacy Policy applies to the Credo website, app, loan application channel, customer support, service messages, and related loan services provided under the Credo brand or platform.
By using Credo services, you acknowledge that personal information may be processed as described in this Privacy Policy, the User Agreement, the Loan Agreement, and any notice shown during account registration or loan application.
2. Personal Information We May Collect
The information collected depends on the service you use and the permissions or documents needed for verification. Credo may collect:
- Identity information: name, date of birth, gender, identification document information, selfie or liveness verification result, and KYC details.
- Contact information: mobile number, email address, residential address, emergency contact or reference details when lawfully provided.
- Application information: employment, income, loan amount request, repayment preferences, bank or e-wallet account, and application history.
- Device and technical information: device model, operating system, IP address, app version, device identifiers, network status, log data, and security signals.
- Transaction information: disbursement records, repayment status, payment channel information, service records, and support tickets.
- Communication information: consent records, SMS, Viber, email, push delivery status, call records related to customer support, and message interaction logs where permitted.
3. How We Use Personal Information
Credo may use personal information for legitimate product, legal, and operational purposes, including:
- Account registration, authentication, identity verification, and fraud prevention.
- Loan application review, risk assessment, offer generation, disbursement, and repayment processing.
- Customer support, dispute handling, payment verification, and service quality management.
- Repayment reminders, account notices, security alerts, service messages, and consent-based marketing messages through SMS, email, app notification, Viber, phone call, or other lawful channels.
- System security, analytics, product improvement, audit, compliance, legal claim management, and regulatory reporting where required.
5. App Permissions and Data Minimization
Credo aims to request only permissions and information needed for specific and legitimate purposes. For example, camera access may be used for identity verification, document capture, or liveness checks. Device and network information may be used for account security, fraud prevention, and service stability.
Where a permission is no longer required, users may manage or revoke it through device settings. Some features may not work if required permissions or data are not available.
6. References, Contacts, and Guarantors
If Credo requests reference or guarantor information, the purpose will be explained during the application process. You should inform any reference before providing their details. A guarantor should not be treated as responsible for your loan unless that person has separately and expressly agreed to act as guarantor under applicable rules and documentation.
7. Data Retention
Credo retains personal information only for as long as necessary for the purposes described in this Privacy Policy, including account management, loan servicing, repayment processing, fraud prevention, legal claims, audit, and regulatory requirements. When information is no longer needed, Credo will take reasonable steps to delete, anonymize, or securely dispose of it according to internal policy and applicable law.
8. Security Measures
Credo uses reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no online service can guarantee absolute security. Users should keep login credentials, OTP codes, devices, and account information secure.
9. Your Privacy Rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, consent withdrawal, or information about how your personal data is processed. Credo may need to verify your identity before processing a request.
Some requests may be limited when information must be retained for legal, regulatory, repayment, dispute, security, or legitimate business purposes.
10. Children’s Privacy
Credo services are not intended for minors. The service is not designed for individuals who are not legally capable of entering into binding agreements. If information from a minor is identified, Credo may delete or restrict the account according to applicable procedures.
11. Updates to this Privacy Policy
Credo may update this Privacy Policy from time to time. Updates will be posted on the website or app with a revised effective date. Continued use of Credo services after an update means you acknowledge the updated Privacy Policy.
12. Contact and Privacy Support
For privacy, account, or service questions, please use the official Credo in-app customer service channel or any official support contact published within the Credo service.