BluePeak Fintech ("we", "us", "our") provides microfinance loan and EMI management services through our website and mobile application (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

To provide loan and payment services, we collect:

• Identity & contact details — name, mobile number, email address, and residential address.
• KYC documents — PAN number, Aadhaar number, and photographs or scanned copies of identity/address proof required for loan verification.
• Loan & payment information — loan applications, EMI schedules, payment history, and payment proofs (e.g. UPI/bank transaction references or screenshots) you submit.
• Account security data — your login credentials, PIN, and biometric authentication tokens (fingerprint/Face ID data itself never leaves your device; we only store a token confirming that biometric unlock succeeded).
• Device & notification data — device push-notification tokens, used to deliver EMI reminders and account alerts.
• Usage information — basic app/website interaction logs used for security and troubleshooting.

We do not collect your device's precise location (GPS) or background location data. The app does not request or use location permissions.

2. How We Use Your Information

• To process loan applications, disburse funds, and manage EMI schedules and repayments.
• To verify your identity and comply with KYC and other regulatory requirements applicable to microfinance lending.
• To send EMI due-date reminders, payment confirmations, and other account notifications via push notification, SMS, or email.
• To verify payment proofs you submit and reconcile them against your loan account.
• To provide customer support and respond to your requests.
• To detect, prevent, and investigate fraud or unauthorised account access.

3. How We Store & Protect Your Information

Passwords, PINs, and biometric confirmation tokens are stored using one-way hashing — we cannot see or recover your actual password, PIN, or biometric data. Access to KYC documents and loan data is restricted to authorised personnel (your registered Shop Partner and BluePeak Fintech administrators) who need it to process your loan.

4. Sharing With Third Parties

We share limited data with the following service providers, solely to operate the Service:

• OneSignal — to deliver push notifications to your device (device token only, no financial data).
• Razorpay — to process online payments you initiate (payment details are handled directly by Razorpay under its own privacy policy).
• Email/SMS delivery providers — to send account notifications and reminders.

We do not sell your personal information to anyone. We may disclose information where required by law or by a regulator overseeing microfinance/lending activity.

5. Data Retention

We retain loan, KYC, and payment records for as long as your account is active and thereafter for the period required by applicable financial recordkeeping regulations.

6. Your Choices & Rights

• You can review and update your address, PAN, and Aadhaar details at any time from Profile in the app.
• You can enable or disable PIN and biometric login from Profile → Security.
• To request correction or deletion of your data (subject to our regulatory recordkeeping obligations), contact us using the details below.

7. Children's Privacy

The Service is intended for adults capable of entering into a loan agreement and is not directed at children. We do not knowingly collect information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at:

+91 70021 28302
WhatsApp Support