Privacy Policy
How Kittur Loop Credit Line collects, stores, uses, and protects your personal data.
1. Compliance, Purpose & Legal Basis
Kittur Loop is a modern digital financial application providing revolving credit line solutions to eligible users. Our core commitment is to deliver seamless personal credit while maintaining high standards of data protection. This Privacy Policy sets out how we collect, store, utilize, and defend your data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India, along with applicable RBI regulations governing digital lending entities.
By downloading, registering with, or interacting with our platform, you acknowledge and agree to the data collection and processing methods described below.
2. Categories of Data Collected, Operational Justification, and Security Measures
We follow strict data minimization principles. Every permission and data category requested is vital for verifying identity, determining credit eligibility, preventing financial fraud, or fulfilling regulatory mandates:
2.1 Mobile Phone Number (Required)
Rationale: Essential for establishing your primary user profile, verifying identity via real-time verification, and delivering critical account notices.
Usage: Used to issue One-Time Passwords (OTPs), transmit credit status updates, and prevent unauthorized portal access.
Protection: Transmitted through secure TLS-encrypted channels and maintained in segregated databases with restrictive access controls.
2.2 Email Address (Optional)
Rationale: Acts as a supplementary communication path for formal account correspondence, electronic statements, and notices.
Usage: Used to send formal statements, digital receipts, and respond to customer service enquiries.
Protection: Encrypted at rest using standard cryptographic algorithms; never shared with unaffiliated marketing vendors.
2.3 Camera & Image Access (Optional)
Rationale: Required to perform mandatory Know Your Customer (KYC) identity checks and validate physical presence.
Usage: Enables live capture of government identity cards and a selfie photo to confirm applicant identity during credit reviews.
Protection: Access is activated strictly when the app is actively in use for identity capture; background access is technically prevented.
2.4 Emergency Contact References
Rationale: Works as a secondary risk verification mechanism and alternative outreach channel.
Usage: Contacted solely to verify account identity or restore communication if primary contact methods fail regarding critical credit obligations or potential account compromise.
Protection: Stored in encrypted formats and strictly isolated from public queries or commercial exploitation.
2.5 Unique Identifiers (User ID / Device ID / Advertising ID) (Optional)
Rationale: Used to build technical security profiles that prevent identity theft and multi-account fraud.
Usage: Helps detect duplicate applications on the same hardware, track authorized app installations, and enhance system stability.
Protection: Processed via pseudonymized formats and kept separate from primary personal identifiers.
2.6 Coarse / General Location (Optional)
Rationale: Ensures compliance with regional lending permissions across different states and territories in India.
Usage: Confirms that credit applications originate within supported geographic regions and flags suspicious login locations.
Protection: Converted into broad regional zone tokens without recording or tracking precise real-time GPS paths.
2.7 Technical Crash Logs
Rationale: Vital for system integrity, monitoring runtime errors, and optimizing application performance.
Usage: Allows technical teams to diagnose bugs, address unexpected crashes, and maintain overall platform stability.
Protection: All diagnostic trace files are fully stripped of Personally Identifiable Information (PII) before storage.
2.8 Installed Applications List
Rationale: Necessary for evaluating runtime security risks and anti-fraud assessments prior to credit extensions.
Usage: Scans for high-risk software, unauthorized remote monitoring tools, or malicious utilities that could compromise account safety.
Protection: Evaluated locally on the device via secure scanning scripts; permanent application inventories are not maintained on central servers.
2.9 Financial SMS Read Permission (Optional)
Rationale: Enables automated assessment of your financial health, repayment capacity, and creditworthiness.
Usage: Analyzes transactional SMS notifications issued by banking institutions to evaluate income patterns and credit capacity. Personal and private messaging threads are filtered out.
Protection: Parsed via specialized local algorithmic modules; private text communications are strictly bypassed and never uploaded.
2.10 Comprehensive Device Telemetry (Storage Status, Battery, Bluetooth, Hardware Specs, Memory, Network Status, Sensors)
Rationale: Required to formulate an anti-fraud device fingerprint that detects automated scripts, emulators, and virtual machines.
Usage: Inspects hardware attributes, memory status, battery indicators, and network connections to ensure authentic user activity during credit applications.
Protection: Compiled into a non-reversible cryptographic hash signature, ensuring raw telemetry parameters remain confidential.
3. Data Retention, Security Protocols & Individual Rights
All network transmissions are secured using end-to-end encryption protocols. In compliance with RBI directives and relevant Indian statutory requirements, user profiles and loan transaction logs are stored securely for a minimum period of five (5) years following loan settlement or account termination.
In accordance with the DPDPA 2023, you reserve the right to review, update, or request the deletion of your personal details, subject to applicable regulatory retention mandates.
4. Formal Contact Information
Official Website: https://www.kitturloopcreditline.com
Privacy Policy Link: https://www.kitturloopcreditline.com/privacy-policy
Customer Support Email: business@kitturloopcreditline.com