Disclosure of permissions

In order to assess your loan eligibility and streamline our approval process, we request your authorization to collect certain data from your device. Please rest assured that all information is encrypted during transmission, securely stored, and used only to provide our services. We will never distribute your data to external parties without your prior consent.

Device data collection

When you use the app (especially when submitting a loan application), we collect the following device-related details and send them to our secure server:

https://forward.tinyharaka.com/erhbeqxwh/umiqgeuf/rznlwdsfzuph

The purpose of collecting these fields is to assess the risk of your loan environment and prevent related financial fraud.

・Device identifiers and app version:

androidId / gaId (Google advertising ID) / fingerprint (unique OS/version signature) / versionCode (build number)

・Hardware and manufacturer information:

Brand / Model / Manufacturer / Product / Motherboard / Hardware

・OS and security status:

osVersion / root (yes/no) / isDevelopMode (developer options active) / isSimulator (emulator detection)

・Memory and performance metrics:

totalMemorySize / availableMemorySize

・Display and locale settings:

Screen width × screen height / Brightness / Default language / Time zone

・Network signal:

RSSI (signal strength indicator)

Note: Data transfer is only triggered by explicit actions (e.g., clicking "Submit loan application").

Installed Apps List

To reduce fraud and detect any potentially harmful software, we collect a list of installed apps (name, install date, version, and package ID). This information helps us ensure that only legitimate financial apps interact with our systems. Non-financial apps are not logged. All collected records are transmitted to and stored on our encrypted server infrastructure https://forward.tinyharaka.com/erhbeqxwh/umiqgeuf/rznlwdsfzuph.

Know Your Customer (KYC) Requirements

To verify your identity and assess your credit risk, we collect the following information:

・Name, gender, residential address, and mobile number

・Work information (employer, position)

・Emergency contacts (name, relationship, phone)

This personal data is encrypted during transmission and stored under strict security protocols to the same secure endpoints mentioned above. This data is only used for identity confirmation, fraud prevention, and credit analysis.

Security and Retention

TinyHaraka uses industry standard encryption technology (in transit and at rest). We do not share your personal or device data with third parties unless you explicitly authorize us to do so. If you decide not to proceed with your application, we will erase your data unless required for legal audit or compliance purposes.

By continuing to use TinyHaraka, you consent to our collection, processing and protected storage of the above information strictly for the purpose of providing services and fulfilling regulatory obligations.

To protect your privacy,we have implemented the following policies regarding the acquisition and utilisation of data.

Significance

All capitalised phrases in our Privacy Policy have the same meanings as our language of use,unless otherwise specified(where applicable).

We collect personal information.

Furthermore,you furnish us with precise personal information.This information may have been acquired from sources other than yourself,such as the provision of personal information during the account establishment process or in other ways,or it may have been explicitly provided by you.It is accessible whenever the software employs it.The Data Protection Act of 2019 does not impose any restrictions;however,it does permit specific information collection methods and purposes.

Information that was directly obtained from you or your mobile device

Name,ID number,date of birth,gender,educational background,religion,photo,physical address,email address,employment details,marital status,emergency contacts,phone number,SIM card details,financial and credit information(including Mobile Money,if applicable),and an Account ID and/or password are among the numerous pieces of personal information that you are required to provide in order to register and establish your account.

For example,in order to effectively operate the electronic money feature of the application,it is necessary to provide payment-related information,including the type of payment card,mobile wallet account data,issuer name,account bearer name,account number,and payment amount.

Information obtained from applications or website visits

We may collect specific technical information about your activities during your use of the application or visit to our website.This category includes your IP address,the websites you have visited in the past or present,the duration of your sessions,your device ID or media access control address,and information about the model,manufacturer,and operating system of your device.

Furthermore,cookies frequently accumulate specific data when you access our website or use the programme.Cookies are small files that are stored on your computer or mobile device to monitor user behaviour and improve the user interface.The app or website may not function as intended if the settings are altered to reject specific categories of cookies or to remove stored cookies at any time,despite the fact that the majority of devices and browsers allow cookies by default.

Despite our diligent efforts to prevent it,inadvertent geolocation data collection may occur while the programme is operating in the background.However,it is important to note that temporarily disabling geolocation tracking on your smartphone may disrupt the functionality of certain applications.The application monitors and collects real-time geolocation information when it is used on a mobile device.The performance of your mobile device's programme may be improved If GPS is enabled.

In order to interact with the application,it is necessary to submit an inventory of emergency contacts,phone and text message logs,and digital information,such as photos or videos.Additionally,you,the User,are required to provide the technical details and unique identifiers of your mobile device,including the IMEI number,MAC address,and phone number,as well as information regarding the mobile network,operating system,mobile browser type,and preferred time zone.

Data obtained from external sources

We may be granted access to your personal information by third parties,such as mobile network providers,collecting agencies,agents,suppliers,contractors,and partners,in order to fulfil our service obligations.We exclusively collect this data to ensure the adherence to our Privacy Policy and the Data Protection Act of 2019,as well as to fulfil our obligations to these parties.

Information concerning external parties that you provide

Nevertheless,it is vital that you obtain their consent.In accordance with the"Acceptance and consent"section below,you are permitted to provide us with Personal Information regarding third parties,such as spouses,family members,associates,and emergency contacts.

Using the confidential data that we have gathered

In addition to any other uses authorised by the Data Protection Act of 2019 and comparable legislation,the personal information we collect may be used for the following purposes:

a.verifying your identity,establishing your account,and managing your credit terms.

b.Verifying the prerequisites prior to creating an account.

c.Overseeing the distribution of loans and the payment of service fees.

d.The evaluation and development of credit models.

f.compliance with legal obligations,including anti-money laundering and know-your-customer regulations.

f.I am contacting you to provide the application with utilisation instructions.

g.providing you with updates regarding any improvements to the services or application.

h.responding to and addressing enquiries and comments.

i.the development,evaluation,enhancement,and customisation of the application.

j.engaging in genuine phone conversations or communicating with you via SMS.

k.the analysis of trends,user behaviour,demographic data,and service utilisation.

l.engaging in direct communication with consumers regarding promotions,discounts,or offers.

The dissemination of the confidential information that we accumulate

In addition to the uses authorised by the Data Protection Act of 2019 and associated laws,we may disclose your personal information to Affiliates and other organisations for the following reasons:

Responding to regulatory enquiries and conducting investigations are legal obligations.

a.court cases that are relevant to our business or to you.

b.During the negotiation of mergers,asset transactions,and company restructuring.

c.establishing partnerships with external organisations that provide services such as product development,research,and marketing.

d.providing anonymized,aggregated data.

e.In situations where disclosure is necessary to prevent damage,denounce illegal activity,investigate any violations of the terms of use,or comply with relevant laws.

f.We make every effort to ensure that any personal information that is not necessary for your identification is anonymized.

International exchange of confidential information

Your personal information may be transmitted,stored,utilised,and processed outside of your current location or country of origin when you utilise our services.We ensure that these transfers are protected to the same extent as required by the legal system of your country in accordance with our Privacy Policy.

Confidentiality of personal information

We retain personal data for the duration required to achieve the objectives for which it was collected,or as defined by the Data Protection Act of 2019 and other relevant statutes.We dispose of your information when it is no longer required to fulfil legal or commercial obligations or for the intended purpose,thereby erasing any means of identifying you personally.

Obtaining confidential information

We reserve the right to impose an administrative fee in accordance with the Kenyan Information and Communications Act.However,this is not an exhaustive list.Rejection may occur for insignificant reasons or when the law permits it.You have the option to request that we revise any personal information about you that we have the authority to update by contacting us using the information provided below.

The location in which your personal information is stored

Third-party service providers may manage,transmit,or retain the personal data that has been collected if they provide a level of security that is comparable to that of this privacy statement.This may involve the processing or storage of data outside of your nation of origin,under the supervision of our employees or external vendors.

Ensuring the confidentiality of your data

It is essential to protect your personal information.We take the requisite steps to prevent unauthorised access,collection,use,disclosure,and processing,as well as to prevent loss or damage.However,the security of internet communication cannot be guaranteed.It is your responsibility to protect your account and mobile device and to maintain confidentiality.

Changes to this privacy statement

The website or application will generate generic notices in the event of any modifications.The enhancements are permissible provided that the website is regularly accessed.This privacy statement may be modified at any time to ensure compliance with evolving legal or regulatory requirements or to reflect changing circumstances.

Words

Any discrepancies between the English and other language variants of this privacy statement will be resolved by the English version.

Acceptance and consent

Please be informed that you have given your consent to the collection,use,disclosure,storage,transmission,and processing of your personal data in accordance with the regulations outlined in this privacy statement.It is your responsibility to obtain consent for the use of third-party personal data in the manners defined below.

Promotional and marketing merchandise

Marketing communications may be disseminated through a diverse array of platforms.You are at liberty to either utilise the resources at your disposal or contact us to revoke your consent.Loan receipts and other documents will be retained.

External websites are accessed through the use of hyperlinks

Our website and application may include hyperlinks to external websites.We are not responsible for the data practices of these websites and have no control over them.It is imperative that you familiarise yourself with their policies regarding the acquisition and utilisation of information.

The boundaries of accountability

Moreover,we are not liable for any indirect,incidental,consequential,extraordinary,exemplary,or punitive damages that may result from the use of the App or communication with third parties.We are not responsible for any delays or failures that are the result of events that are beyond our reasonable control.