(Effective Date: October 28, 2026)
Welcome to Kcash Lending. This comprehensive Privacy Statement (the "Statement") governs the processing of personal data whenever you access, register with, or utilize the Kcash Lending financial platform.
The Kcash Lending service ecosystem is operated and managed by Finloan Lending Inc., a SEC licensed Lending Company (SEC registration number 2026080264663-07 ). Safeguarding borrowers' personal privacy and ensuring rigorous digital security standards remain fundamental to establishing a trustworthy service framework.
Please review the provisions of this Statement with diligence. Should any condition fail to meet your acceptance, we advise that you refrain from transmitting credentials and discontinue utilizing our applications. This documentation elucidates how Kcash Lending ("we", "us", or "our") administers, retains, processes, and protects information submitted directly during platform interaction or obtained lawfully via authorized third-party integrations. Data records are preserved exclusively for durations sanctioned by statutory rules or required to fulfill established contractual obligations.
All information shared with Kcash Lending will be handled solely within the scope and operational criteria detailed herein. Data gathering relies on explicit consent or voluntary disclosure on your part. Processing activities are kept proportionate, strictly bounded by the legitimate necessities of your credit transactions.
We reserve the prerogative to periodically update this Statement, reflecting amendments by releasing an updated version across our digital channels without mandatory prior formal notification. You are invited to review our official portal at https://kcashlending.com/ to inspect current policies. Continued interaction with Kcash Lending signifies acknowledgment and acceptance of the principles described herein.
Categories of Information Processed
During platform usage, Kcash Lending processes solely the data strictly essential under relevant legal regulations to service your borrowing requests. Transmitted data assets are encrypted via modern protocols and safely deposited within our centralized server infrastructure: https://gateway.kcashlending.com/.
Specific information points processed encompass the following items:
- Approximate Location: While the Kcash Lending application operates in foreground mode, we process approximate regional location telemetry to corroborate user identity, verify service area eligibility, and conduct real-time anti-fraud screenings. We do not track your precise GPS coordinates or collect location data when the application is running in the background. Without this permission, location-based identity, service-area, and fraud checks cannot use device location; functions that do not require location remain available. You may decline this permission when prompted or revoke it anytime via your device's system settings. Declining location access will not prevent you from using our core features, though it may affect the accuracy of our anti-fraud verification.
-Installed Applications: You have the right to refuse the collection of information regarding the applications installed on your device. If you choose to decline this request when prompted, you may still access and use our core services, though it may impact the precision of our risk assessment and the specific loan products available to you.
Upon your explicit consent, to evaluate your credit profile, prevent identity fraud, and ensure responsible lending practices, our system utilizes standard Android intent queries to scan for launchable applications on your device—with a primary analytical focus on financial management platforms, digital wallets, banking tools, and security-relevant or high-risk applications. The information collected is strictly limited to basic technical metadata, including application names, package identifiers, application versions numbers , installation dates, and update timestamps. This data helps us verify device environment integrity, identify potential over-borrowing or multi-platform risks, and detect abnormal activities indicative of fraud, enabling us to make informed lending decisions.
We never access, read, or harvest personal content, usage frequency, or private data within other applications. All collected metadata is encrypted during transmission to our server and is never shared with third parties without your explicit consent. You may withdraw your consent for future collection at any time by contacting our customer support team.
-Phone status: To establish device authentication, ensure authorized account sessions, prevent identity spoofing, manage systemic lending risks, perform marketing attribution and crash analytics (via AppsFlyer, Meta, and Firebase SDKs), Kcash Lending accesses specific technical device parameters. This encompasses hardware identifiers, advertising ID (GAID), device brand, manufacturer, device model, hardware specifications, build fingerprint, operating system version, system language, time zone, available memory, remaining storage capacity, battery charging status and level, emulator detection status, root integrity status, active IP coordinates, and network configuration status.
-OTP & Verification Codes (via SMS APIs): A temporary dynamic verification code (OTP) is dispatched during registration to validate the ownership and legitimacy of your contact number. For subsequent access to your profile, our system accommodates authentication through dynamic security codes or verified credentials. To streamline your experience when entering OTPs or promotional coupon codes, we utilize secure Google Play Services APIs (such as the SMS Retriever or SMS User Consent API) to auto-fill the specific code. We do not request broad SMS permissions, nor do we access, read, collect, or store your private SMS inbox or communication history.
-Emergency Contact: We obtain information for 2-3 designated emergency contact individuals (including full names, contact numbers, and mutual relationship) strictly for borrower validation, risk oversight, and default communication when direct outreach is unavailable. Only details manually chosen or entered by the user are transmitted in an encrypted state.
-Camera & Verification Photos: Camera access enables real-time capture of government identification cards and facial portrait selfies. This visual verification confirms physical presence, validates document authenticity, and adheres to mandatory Know Your Customer (KYC) compliance standards. ID and selfie photos captured through the app, along with any supporting images you manually select, are compressed, encrypted, and uploaded to https://gateway.kcashlending.com/ for identity verification. Basic file information, such as file names, extensions, and sizes, may also be processed as part of the upload. The live face verification step is performed directly by our identity verification service provider. We do not request broad access to your photo gallery or scan unrelated files on your device. Only images you capture or explicitly select are processed. You may refuse camera access when prompted or disable it anytime in your device settings. While declining camera access will not block you from accessing or browsing the application, you will be unable to complete the mandatory KYC identity verification required to submit a loan application.
-Notifications: With your permission, push notifications deliver repayment reminders, application updates, and security alerts. You may decline or disable notifications in Android settings. If disabled, please check due dates and loan status directly in the app.
-Financial Information: To disburse loan proceeds, settle balances, and prevent fraudulent transactions, we collect nominated bank account details, digital wallet references, card specifications, and transaction histories.
-Log Data: In instances of technical malfunction, diagnostic details are captured. These telemetry records may encompass IP addresses, equipment identifiers, OS versions, application runtime state, and execution timestamps to facilitate defect analysis.
-Supplemental Demographic & Profile Data: Additional personal attributes required to complete your borrower profile and fulfill regulatory KYC mandates, including your gender, date of birth, nationality, occupational credentials, registration identifiers, and platform interaction metrics.
The information categories above are used for the specific purposes stated for each category. We maintain a strict policy against unauthorized disclosure of personal records to outside parties without explicit consent.
Objectives of Personal Data Processing
Collected data assets are handled, recorded, utilized, and retained to advance the following legitimate purposes:
-To authenticate applicant identity and establish borrower profiles;
-To conduct credit risk profiling, evaluate creditworthiness, and mitigate financial fraud;
-To convey necessary operational notices regarding account status, applications, or inquiries;
-To execute lending operations, spanning application review, fund distribution, ongoing servicing, and lawful repayment facilitation;
-To satisfy corporate recordkeeping, regulatory auditing, and compliance requirements;
-To introduce new or upgraded lending features and supplementary financing services to eligible borrowers;
-To administer account registration workflows and provide essential decisioning support for lending assessment and related financial operations;
Information from External & Third-Party Sources
We may gather supplemental borrower records from authorized external entities, including licensed credit bureaus and specialized identity verification agencies. Processing of third-party records conforms strictly to the permissions granted and relevant third-party privacy statements. Kcash Lending refrains from transferring data to external entities without authorization.
Data Governance, Security Safeguards & Technical Measures
Data assets collected by Kcash Lending are protected and managed under rigorous protocols:
-Kcash Lending employs state-of-the-art cybersecurity standards to protect borrower records, ensuring payment transactions and application details are shielded via advanced transit and storage encryption.
-Kcash Lending issues temporary authorization tokens to enable authenticated platform access.
-Kcash Lending facilitates private password management to empower borrowers. Account owners remain responsible for keeping user credentials and authorization credentials confidential to prevent unauthorized access.
-Kcash Lending implements layered network firewalls and cryptographic protections throughout the lifecycle of loan assessment.
-Access permissions are strictly governed; solely designated, authenticated staff are granted access to personal records.
-Disclaimer: Notwithstanding our adoption of high-standard security safeguards, borrowers bear the duty of safeguarding personal information across their personal devices and networks. The platform cannot assume liability for compromised credentials or device-level breaches arising from user negligence.
Authorized Data Recipients & Information Sharing
Internal Access: Vetted employees of Finloan Lending Inc., along with its corporate affiliates, who require access to administer financial services, investigate policy breaches, or perform usage audits, subject to rigorous data confidentiality controls.
-Any authorized personnel must successfully pass multi-factor verification and internal credentialing prior to inspecting user records.
Third-Party Sharing: Disclosures to external entities are strictly circumscribed to the following categories:
-Judicial and Regulatory Bodies: Courts, public authorities, and law enforcement agencies where mandated by official subpoenas, statutory requirements, or Philippine legal orders, or when disclosure is critical to prevent harm or investigate violations.
-Credit Information Bureaus: Licensed credit repositories and recovery agencies in accordance with lawful account reporting obligations.
-Customer Care Teams: Designated support personnel for resolving account assistance requests.
-Banking and Payment Partners: Financial institutions, depository banks, and authorized payment gateways pursuant to contractual processing agreements.
-Compliance and Legal Counsel: Legal advisory teams to ensure regulatory alignment and protect user rights and platform safety as allowed by law.
-Technical Service Vendors: Contracted third-party vendors delivering cloud infrastructure, identity verification services, anti-fraud evaluation, collections support, and system maintenance.
Digital Tracking Technologies & Web Cookies
Kcash Lending and third-party analytics partners deploy standard tools such as cookies and tracking identifiers to analyze service trends, administer interfaces, and observe aggregate usage patterns to enhance platform functionality.
Data Retention, Storage Limits & Account Deletion
Records are stored in alignment with regulatory retention obligations and operational needs. Certain profile archives are retained throughout the active account lifecycle, while legal and financial transaction logs must be preserved for mandatory periods under Philippine financial statutes. If you desire account cancellation and data erasure, you may employ the "Delete Account" feature located under the "Account" → "Settings" section within the Kcash Lending Application, submit a deletion request via our dedicated web portal at https://kcashlending.com/delete-account, or contact our customer support at support@kcashlending.com. Data will subsequently be removed or anonymized in accordance with statutory requirements.
Acknowledgment & Consent
By clicking on the "I Agree" button in the prominent disclosure part within the Kcash application, you signify your full agreement to the data collection, transfer, and processing activities outlined within this Privacy Statement. Please read the privacy policy carefully before you proceed
Contact Information & Data Protection Office
For inquiries, clarifications, or to exercise your statutory rights regarding personal data, please address our Data Protection Officer at support@kcashlending.com. These rights include access, correction, obtaining a copy, objection to processing, and erasure, subject to applicable law. You may also file a complaint with the National Privacy Commission (NPC) at https://privacy.gov.ph/file-a-complaint-2/. All intellectual and operational rights are reserved by Finloan Lending Inc.