Flash Fund (“we,” “our,” or “us”) is a mobile lending platform designed for Tanzanian users. We are committed to protecting your privacy and being transparent about how your data is collected, used, and secured. This Privacy Policy explains how we handle personal information when you use our mobile application.
We access your SMS inbox to analyze financial-related message content, such as mobile money transactions and payment confirmations. This information is used to assess your financial behavior and ability to repay loans. The access is granted during key moments like application or account verification, and data is stored temporarily at https://api.flashfund.net/ before being deleted after use.
We collect general information about the applications installed on your device to support fraud detection and credit risk assessment. The presence of certain categories of apps may contribute to understanding usage patterns. This data is used internally, stored securely at https://api.flashfund.net/, and deleted automatically after evaluation.
Your camera is accessed only when necessary for identity verification, such as capturing a photo of your ID or a selfie. No background or unauthorized image capture occurs. The images are uploaded to https://api.flashfund.net/ and deleted after verification is complete.
We collect technical data from your device, such as system status and hardware characteristics, to verify device authenticity and prevent fraud. This helps ensure the platform runs smoothly and securely. All information is stored at https://api.flashfund.net/ and removed once it is no longer needed.
We collect personal details such as your name, national ID number, phone number, and date of birth to verify your identity and comply with regulatory requirements. This information is not shared and is stored at https://api.flashfund.net/ with strict access control. Contact list data is not collected under any circumstances.
We may collect location data while the app is in use to verify your geographic eligibility for loan services and support fraud prevention. We do not track your movements in the background. Location data is stored securely at https://api.flashfund.net/ and deleted after it has been analyzed.
To help you manage your schedule and stay on top of important tasks such as repayment deadlines, our application may request access to your device’s calendar. This allows us to send timely reminders, helping you avoid missed payments that could negatively affect your credit profile. We do not access event names or personal content—only non-sensitive metadata is used to improve notification timing. You have full control over this permission and may manage or revoke it at any time through your device settings. All calendar-related data is handled securely and stored temporarily at https://api.flashfund.net/ before being deleted after processing.
We request access to call log metadata only to support outbound verification calls and to receive voice-based one-time passwords (voice OTPs). This ensures a secure alternative to SMS verification when needed. We do not access audio, content, or communication details. Data is processed temporarily via https://api.flashfund.net/ and deleted immediately after use.
All data collected is retained only for the time required to fulfill its stated purpose or comply with legal obligations. Once the processing is complete—such as after loan assessment or verification—the data is automatically deleted from our systems. If you close your account or request deletion, your data will be permanently removed unless required by law to retain it.
We do not sell or share your data with advertisers. In limited cases, data may be shared with regulatory authorities or trusted service providers strictly for operational purposes such as identity verification. These partners are contractually bound to protect your information and delete it after use.
We apply industry-standard encryption and security practices to protect all information collected. Data is encrypted both in transit and at rest. Access is restricted to authorized personnel, and all information is securely stored at https://api.flashfund.net/. Regular security reviews and monitoring are performed to ensure protection from unauthorized access or misuse.
Our services are only intended for users aged 20 to 60. We do not knowingly collect data from individuals under the age of 18. If it is discovered that we have inadvertently collected information from a minor, we will delete that information immediately. If you believe a minor has registered an account, please contact us at customer@mbishemic.com.
You have the right to access, correct, or request deletion of your data at any time. You may also withdraw permissions through your device settings. To make a request, contact us at customer@mbishemic.com using the contact details associated with your account.
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our services. When updates occur, we will notify users via the app or website. The effective date at the top will always reflect the latest version. Continued use of our service after an update indicates your agreement with the revised terms.
If you have any questions or concerns about this Privacy Policy or how your data is handled, please reach out:
customer@mbishemic.com