HaloLoan | Privacy Policy

MACJESS LIMITED ("we", "us", or "our") operates the HaloLoan application. We take your privacy very seriously and are committed to protecting the confidentiality and security of your personal information. This Privacy Policy describes in detail how we collect, use, store, protect, and disclose your personal information when you use our loan services.

We adhere to the principle of data minimization, collecting only the information necessary to provide and improve our loan services. All personal data is encrypted during transmission and stored securely using industry-standard security measures. We will never sell your personal information to any third party for commercial purposes.

By accessing or using the HaloLoan application, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services.

Information We Collect

When you use HaloLoan, we may collect the following types of data. All data collected is encrypted during transmission and stored securely on protected servers.

SMS / Messages

Financial Data

We request permission to read SMS messages on your device. This permission is used exclusively to access and analyze financial-related SMS messages, including bank transaction alerts, loan approval notifications, credit card statement reminders, and mobile payment confirmations. This data helps us assess your financial behavior patterns to determine creditworthiness and loan eligibility. We do not access, collect, or store any private personal messages (such as chat conversations with contacts) or any SMS messages unrelated to financial activities. The SMS data analyzed is processed in real-time and used solely for credit risk assessment purposes. All data is transmitted to our servers using industry-standard encryption and stored with AES encryption. You can revoke this permission at any time through your device settings, though this may affect your loan application evaluation.

Installed Applications

Device Data

We collect a list of applications installed on your device to assist in credit risk assessment. Specifically, we identify the presence of financial applications such as banking apps, mobile payment services, and other lending platforms. This information helps us evaluate your financial profile and credit history by understanding your existing banking and financial service relationships. We do not collect any personal data, messages, or content from these applications, nor do we access any personal information stored within them. We only scan for the presence of application package names and do not access your contacts, calendar, or any other personal data on your device. The list of installed apps is transmitted securely and stored with encryption.

Approximate Location

Location

We collect approximate location data. This data is used to verify account security by detecting anomalous access patterns that may indicate fraudulent activity, such as loan applications made from different geographic regions in a short timeframe. Location data also helps us ensure compliance with regional lending regulations and prevent fraudulent applications. We do not collect precise GPS location. Location data is transmitted via encrypted channels and stored securely. We retain location data only for the duration necessary to process your loan application and for fraud detection purposes, after which it is deleted or anonymized.

Device Information

Device Data

We collect device information including device model, operating system version, screen resolution, battery status, and unique device identifiers (such as Android ID and device serial number). This data is used to maintain app stability and compatibility, detect and prevent fraudulent activities (such as multiple loan applications from the same device), identify anomalous behavior patterns, and ensure secure authentication. Device identifiers help us link multiple loan applications from the same device and detect synthetic identities. All device information is transmitted via encrypted channels and stored securely. We do not sell this data to third parties or use it for advertising purposes.

Camera

Identity Verification

We request camera permission to capture images of your government-issued identification documents (such as national ID cards) for Know Your Customer (KYC) verification purposes as required by financial regulations. The camera is used solely for document capture during the identity verification process. After capturing the ID document image, we perform facial recognition to verify that the applicant matches the identity document, which helps prevent identity theft and ensures compliance with anti-fraud regulations. The captured images are securely transmitted to our servers for verification. The images are encrypted during transmission and storage and are retained only for the time necessary for compliance and anti-fraud purposes.

Personal Information You Provide

The following personal information is collected directly from you during the loan application process for identity verification, credit assessment, loan approval, and account management:

Mobile Number — Account registration and communication
Full Name — Identity verification and account management
National ID Number — KYC verification and regulatory compliance
Education Level — Credit scoring model enhancement
Employment Type — Loan eligibility assessment
Marital Status — Risk assessment and loan limit determination
Income — Repayment capacity assessment
Account Information — Loan disbursement and repayment processing

All personal information above is used only for the stated purposes, transmitted via encrypted channels, and protected with industry-standard security measures.

How We Use Your Information

We use your personal information solely for the purposes outlined below. We collect only the minimum data necessary and process it in accordance with applicable privacy laws in Ghana.

Specific Processing Purposes

We use your information for the following purposes:

Account Registration and Management: To create and maintain your account, verify your identity, and manage your loan applications
Identity Verification and KYC: To verify your identity using ID documents, facial recognition, and other verification methods to prevent identity theft and comply with regulatory requirements
Credit Assessment: To evaluate your creditworthiness and determine loan eligibility, including analyzing financial behavior patterns from SMS and device data
Risk Control and Fraud Prevention: To detect and prevent fraudulent activities, assess device security risks, and protect both you and our platform from malicious behavior
Loan Disbursement and Repayment: To process loan disbursements to your account and manage repayment schedules
Customer Support: To respond to your inquiries, resolve issues, and provide technical assistance
Service Improvement: To analyze usage patterns and improve our services, including troubleshooting and enhancing user experience
Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities

Automated Decision-Making

We may use automated decision-making processes, including algorithms and credit scoring models, to:

Assess your creditworthiness for loan eligibility
Determine loan amounts and terms
Detect potentially fraudulent applications

These automated decisions help us process loan applications efficiently. If you disagree with an automated decision, you may request human review by contacting us through the details provided in the "Contact Us" section.

Data Minimization: We adhere to the principle of data minimization. We only collect and process personal information that is necessary, adequate but not excessive, accurate and kept up to date.

Information Sharing and Disclosure

Your data will not be shared with third parties

We will not sell, rent, lease, or exchange your personal information to any third party for commercial purposes. We only disclose your information in the following exceptional circumstances when required by law:

Legal Requirements: When required by applicable laws, regulations, or legal processes, including responding to valid requests from regulatory authorities, law enforcement agencies, or government entities.
Protection of Rights: When necessary to protect our legitimate rights and interests, prevent fraud, or ensure the safety of our users and the public.

Except in the cases specified above, we will not share your personal information with any third party. All necessary technical services (such as cloud hosting) are performed under strict confidentiality agreements. Service providers only process data on our behalf and may not use it for any other purpose.

We do not sell your personal information, and there is no form of information trading.

Information Security

HaloLoan employs industry-standard security measures to protect your personal information:

Transmission Encryption: All data is protected using TLS encryption protocols during transmission to prevent interception, eavesdropping, or tampering. This applies to all data transferred between your device and our servers.
Storage Encryption: Your personal information is stored on controlled secure servers and secured using AES-256 encryption algorithms. This ensures that even if data is compromised, it remains protected and unreadable.
Access Control: Only authorised personnel with a legitimate business need may access your data. All access is logged, monitored, and reviewed regularly to detect and prevent unauthorized access.
Secure Authentication: We use multi-factor authentication and secure session management to protect your account from unauthorized access.
Regular Security Audits: Our systems undergo regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses.

Data Storage

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. The following outlines our data retention practices:

Active Accounts: Your personal information is retained while your account is active or as long as needed to provide you with our services. You may request account deletion at any time.
Closed Accounts: If you close your account, we will delete or anonymise your personal information within 30 days, unless we are required by law to retain certain data for a longer period (such as for tax, legal, or regulatory compliance purposes).
Legal Compliance: We may retain certain information for longer periods if required by applicable laws, regulations, court orders, or governmental requests.
Data Minimization: We continuously review the data we collect and retain only what is necessary for our legitimate business purposes and legal obligations.

After the retention period expires, we will securely delete or anonymise your personal information. When data is deleted, we use industry-standard methods to ensure it cannot be recovered.

Your Rights and Choices

Under applicable privacy laws, you have the following rights regarding your personal information:

Right of Access: To confirm whether we hold your personal information and to know the source, processing purpose, and recipients of the information
Right to Rectification: To request correction of inaccurate, incomplete, or outdated information
Right to Erasure: In certain circumstances (e.g., when the information is no longer necessary or exceeds the purpose of use), to request deletion of your personal information
Right to Object: To object to the processing of your personal information based on your particular situation

Please note that limiting or withdrawing certain permissions may affect the normal functioning of HaloLoan features, including the loan application process.

To exercise any of these rights, please submit a request using the contact details provided in the "Contact Us" section. We will respond within the timeframes prescribed by applicable law.

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the relevant data protection supervisory authority.

Access to this Privacy Policy

This Privacy Policy is publicly available and accessible to all users at any time. We believe transparency is essential, and we want you to have easy access to understand how we handle your personal information.

In-App Access

You can access this Privacy Policy directly within the HaloLoan application through two convenient entry points:

Permission Page: When granting app permissions during initial setup or usage, you will see a link to the Privacy Policy that you can click to review.
Profile Center: After logging in, navigate to your personal profile/account center and select "Privacy Policy" from the menu options.

Both entry points provide access to the most current version of this Privacy Policy.

Website Access

The latest version of this Privacy Policy is also available on our official website. You can access it at any time without logging in:

https://www.macjesstech.com/privacy.html

We recommend bookmarking this page for easy reference.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service enhancements. When we make material changes, we will notify you through the following methods:

In-App Notification: A prominent notification within the HaloLoan application, typically displayed as a banner or pop-up message when you open the app
Website Update: The updated Privacy Policy will be posted on our website with the "Last Updated" date clearly indicated at the top
Email Notification: If we have your email address, we may send you a notification about significant policy changes

Your continued use of the HaloLoan service after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy regularly to stay informed about how we protect your privacy.

Children's Privacy

HaloLoan is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or your personal information, please contact us using the details below:

business@macjesstech.com

Website

https://www.macjesstech.com