PRIVACY POLICY

Effective Date: March 3, 2026
Welcome to ZaloKash (“we,” “our,” or “the App”).
At ZaloKash, we are committed to protecting your privacy, maintaining transparency, and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, process, and protect your information when you access or use the ZaloKash mobile application and related services.
By downloading, registering, accessing, or using ZaloKash, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

To provide our financial services, process loan applications, prevent fraud, and comply with applicable laws and regulations, we may collect the following categories of information: • Personal Information: Your full name, phone number, email address, government-issued ID, and other identifiable details.

During registration and service use, we may collect:
- Full name
- Mobile phone number
- Date of birth
- National ID or passport information
- Gender
- Residential address
- Employment and income information
- Bank or mobile money account details
- Selfie or facial verification images
- Emergency contact details
This information is required for identity verification, Know Your Customer (KYC) compliance, loan processing, fraud prevention, and risk management.

With your explicit consent, we may collect financial-related SMS information from your device to support credit assessment, fraud prevention, and loan risk analysis.
Collected SMS data may include:
- Sender information
- Message timestamps
- Financial transaction alerts
- Loan notifications
- Repayment reminders
- Transaction verification messages
- Billing or payment-related messages
We do not collect personal SMS unrelated to financial services.
All SMS information is encrypted during transmission and securely stored through our protected infrastructure at:
- https://api.zalokash.ai
- https://api.zalokash.co.zm
SMS information is used strictly for:
- Credit scoring
- Risk evaluation
- Fraud detection
- Loan approval processing
- Compliance obligations

To maintain platform security and reduce fraudulent activities, we may collect device-related information, including:
- Device model
- Operating system version
- Device identifiers
- Hardware information
- IP address
- Device security status
- App version
- Network information
This information helps us identify abnormal activities, improve application performance, and protect user accounts.

With your permission, we may collect approximate location information to:
- Verify identity consistency
- Evaluate loan applications
- Detect suspicious activities
- Prevent fraud risks
Location information is securely encrypted and processed in accordance with applicable data protection standards.

We request access to your device camera solely for identity verification and KYC purposes, including:
- Capturing identification documents
- Facial verification
- Uploading supporting documents
All uploaded images and documents are encrypted and protected against unauthorized access.

You may be required to provide emergency contact information, including:
- Contact name
- Phone number
- Relationship to you
This information is used only for identity verification, account validation, and risk analysis purposes.
We do not access your phone contact list without authorization.

We may collect your device advertising identifier to:
- Improve marketing effectiveness
- Analyze user engagement
- Enhance application performance
You may disable or reset your advertising identifier through your device settings at any time.

We use collected information strictly for legitimate business and legal purposes, including:
- Creating and managing user accounts
- Processing loan applications and repayments
- Conducting identity verification
- Performing credit assessment and risk analysis
- Preventing fraud and unauthorized activities
- Improving product functionality and user experience
- Providing customer support
- Meeting legal and regulatory obligations
- Conducting internal audits, analytics, and reporting
We may also use anonymized or aggregated information for statistical analysis, security monitoring, and system optimization.

We respect your privacy and do not sell your personal information to third parties.
Your information may only be shared with:
- Trusted service providers
- Licensed business partners
- Payment processors
- Credit assessment partners
- Regulatory authorities
- Law enforcement agencies where legally required
All third parties receiving personal information are required to comply with strict confidentiality, security, and data protection obligations.

We implement industry-standard technical and organizational security measures to protect your information, including:
- Data encryption during transmission and storage
- Secure databases and firewalls
- Access control mechanisms
- Authenticated API gateways
- Continuous security monitoring
Our security infrastructure is maintained through:
- https://api.zalokash.ai
- https://api.zalokash.co.zm
Despite our efforts, no electronic transmission or storage system can guarantee absolute security.

We retain personal information only for as long as necessary to:
- Provide our services
- Fulfill contractual obligations
- Comply with legal and regulatory requirements
- Resolve disputes
- Enforce agreements
After the retention period expires, information will be securely deleted, destroyed, or anonymized in accordance with applicable laws and internal policies.

Subject to applicable laws and regulations, you may have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your data
- Withdraw permissions previously granted
- Object to certain processing activities
- Request restriction of processing
Please note that withdrawing certain permissions may limit your ability to use some App features or services.

Our App may contain integrations or links to third-party services. We are not responsible for the privacy practices or content of external services not operated by ZaloKash.
Users are encouraged to review the privacy policies of third-party providers separately.

ZaloKash services are intended only for individuals who are legally eligible to enter into financial agreements under applicable laws.
We do not knowingly collect personal information from minors without appropriate legal authorization.

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.
Updated versions will be published within the App or through official communication channels. Continued use of the App after updates constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: ZaloKash Support Team Email: [email protected] or [email protected]