Privacy Policy — LoanScoreAage

About This Policy

This privacy policy applies to the LoanScoreAage mobile application and any related services operated by rajansingh (collectively, the "Application"). rajansingh is referred to as the "Service Provider" throughout this document.

By using the Application, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Personal Information You Provide

Phone number — used for account registration and login verification.
Identity documents — images of your Aadhaar card, PAN card, or other government-issued ID captured via camera or selected from your gallery.
Contact references — up to 4 contacts you choose to provide as social references for credit assessment. Your full address book is never uploaded without explicit consent.

2. Device Hardware Information

The Application automatically collects the following device-level data for credit risk modeling and fraud prevention:

Device model, brand, board name, and manufacturer
Screen dimensions — width, height (pixels), and diagonal size (inches)
Android OS version and SDK level
Total and available RAM (memory)
Total and available internal storage; external storage if present
Android ID and Google Advertising ID (GAID)
Network operator name and network type (2G / 3G / 4G / 5G / WiFi)
WiFi network IP address
Battery level and charging status (USB / AC)
System time zone, language, and locale settings

3. Installed Application List

The Application reads the list of packages installed on your device, including each app's name, package identifier, version, install date, and update date. The Service Provider uses this data exclusively for credit risk modeling — analyzing the presence of financial, e-commerce, and utility applications to better assess your credit profile. The Service Provider does not read any app content, messages, or usage data.

4. Location Information

Coarse (city-level) location is collected from your device's network provider. This helps verify that your location is consistent with your application details and detects unusual login patterns for fraud prevention.

5. Network and Usage Data

Your device's Internet Protocol (IP) address
The pages of the Application you visit, the date and time of your visit, and the time spent on those pages

How We Use Your Data

Credit Risk Assessment — Device hardware information, installed application list, location data, contact references, and identity documents are collectively analyzed by the Service Provider's credit risk model to generate a credit score and evaluate creditworthiness. This is the core service provided by the Application.
Identity Verification — Identity document images and liveness verification data confirm your identity and prevent impersonation.
Fraud Detection and Security — Device fingerprints, location patterns, and installed app data help detect SIM swap, device cloning, and other fraudulent activities.
Service Improvement — Aggregated and anonymized usage data helps the Service Provider understand usage patterns and improve performance.
Notifications — With your permission, push notifications are sent for loan repayment reminders, credit report updates, and important account activity. The Service Provider does not use notifications for marketing without your consent.

Data Transmission and Storage

All data collected by the Application is encrypted using AES encryption during transmission and sent to the Service Provider's servers at:

https://scrg5.com

Data is stored on servers operated by the Service Provider and its trusted infrastructure partners. The Service Provider implements physical, electronic, and procedural safeguards to protect your information against unauthorized access, alteration, or destruction.

Device Permissions

The Application requests the following Android permissions. You may decline any permission; however, core features may not function without them.

Location — Coarse (city-level) location for credit risk verification and fraud detection. Encrypted and handled per data protection regulations.
Camera and Photos — Capturing and uploading identity documents for verification. Photos are encrypted and never shared with third parties.
Device Hardware Information — Device identifiers (Android ID, GAID), hardware specifications, network status, battery, and system settings are read for credit risk profiling and fraud prevention. Encrypted in transit and storage.
Installed Application List — App inventory is analyzed for financial behavior patterns to improve credit risk accuracy. App content and usage data are never read. Used exclusively for credit risk modeling.
Notifications — Loan repayment reminders, credit report status updates, and important account notifications.

Third-Party Services

Only aggregated, anonymized data is transmitted to external services for analytics and improvement. The Application integrates the following third-party SDKs, each governed by its own privacy policy:

The Service Provider may also disclose information as required by law, to protect rights or safety, to investigate fraud, or to respond to a government request. Trusted service providers acting on the Service Provider's behalf are contractually bound to adhere to this privacy policy.

Cookies and Tracking Technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards, the Service Provider will use:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions or other legally recognized transfer mechanisms
Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required, the Service Provider applies appropriate safeguards and obtains required consent.

Data Retention

User Provided Data — Duration of your use plus 12 months, unless longer retention is required by law.
Automatically Collected Data (including device information and installed app list) — Up to 24 months from collection, unless longer retention is required for legal compliance.
Aggregated and Anonymized Data — Retained indefinitely as it no longer identifies you.
Legal compliance data — Retained as long as required by applicable law.

You may request deletion of your personal data at any time, subject to any legal obligation to retain it.

Your Rights and Choices

General Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at g9hhhhh3454@gmail.com.

California Privacy Rights (CCPA/CPRA)

California residents have the right to know what personal information is collected, to delete personal information, to opt out of the sale or sharing of personal information, and to non-discrimination for exercising these rights.

Opt-Out

You can stop all further data collection by uninstalling the Application. Uninstalling does not automatically delete data already transmitted.

Security and Breach Notification

The Service Provider maintains physical, electronic, and procedural safeguards to protect your information. All data transmitted between the Application and the Service Provider's servers is encrypted using industry-standard AES encryption.

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including information about the nature of the breach and the steps being taken to address it.

Children's Privacy

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly collect personally identifiable information from children. If the Service Provider discovers a child has provided personal information, it will be immediately deleted. Parents or guardians who become aware of such a situation should contact g9hhhhh3454@gmail.com.

Changes to This Policy

The Service Provider may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy with a new effective date. Where required by law, your consent will be sought before material changes take effect. Previous versions are available upon request.

This privacy policy is effective as of July 24, 2026.

Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal.

Contact Us

For questions about this privacy policy or to exercise your rights, contact the Service Provider at:

📧 g9hhhhh3454@gmail.com