KopaFlex Privacy Policy

Last updated: August 11, 2026

1. Introduction

This Privacy Policy ("Policy") applies to KopaFlex ("KopaFlex", "we", "us", or "our") and the loan-related services provided through the KopaFlex mobile application and related service channels.

This Policy explains what personal information we collect, why we collect it, how we use, store, protect, and share it, and how you can exercise your privacy rights. Please read this Policy carefully before using KopaFlex. By creating an account, applying for a loan, or using our services, you acknowledge that you have read and understood this Policy.

KopaFlex is intended for users in Tanzania who are at least 18 years old.

2. Information We Collect

We collect only the information that is necessary to provide, protect, and improve our loan services, verify your identity, assess loan eligibility, prevent fraud, process loan applications and repayments, and comply with applicable laws and regulatory requirements.

2.1 Account and Login Information

When you register or log in, we may collect:

Mobile phone number;
OTP verification information;
User ID and account status;
Login time, app version, language setting, and related account activity information.

2.2 Identity and Personal Information

When you apply for a loan or complete your profile, we may collect information that you provide, including:

Full name;
Gender;
Date of birth;
Identification type and identification number, such as National ID, driver's license, or voter card information;
Marital status;
Education level;
Loan purpose;
Monthly income range;
Employment or profession type;
Alternative phone number;
Email address;
Optional social account information, such as Facebook account or Twitter/X account, if you choose to provide it.

2.3 Emergency Contact Information

To support loan application review, fraud prevention, and repayment communication, we may collect emergency contact information that you manually provide or manually select from your device contact picker, including:

Contact name;
Contact phone number;
Relationship with you;
Limited contact metadata available from the selected contact record, such as last updated time or starred status, where provided by the device contact picker.

KopaFlex does not require permission to read your full contact list. We only receive the contact information that you choose and submit during the application process.

2.4 Wallet and Repayment Information

To process loan disbursement, repayment, wallet verification, and account updates, we may collect:

Mobile money provider;
Wallet or repayment account number;
Loan product information;
Loan amount, repayment amount, fees, due date, order number, repayment status, and related transaction records;
OTP information used for wallet verification, where required.

2.5 Device Information

To improve account security, verify device integrity, prevent fraud, manage credit risk, and protect our services, we may collect device and technical information, including:

Android ID, advertising ID, AppsFlyer ID, Firebase Analytics App Instance ID, Firebase Installations ID, and anonymous analytics identifiers;
Device model, manufacturer, hardware information, OS version, SDK version, build information, screen information, CPU and memory information;
App package name, app version, install time, update time, app signature information, and whether the app is running in debug mode;
Network information, such as IP address, Wi-Fi status, mobile network type, SIM/operator information, network connection status, and related network identifiers where available;
Device security and environment signals, such as root status, emulator indicators, ADB status, sensor variance, and device uniqueness signals;
Battery, storage, language, system time, and other technical diagnostic information.

2.6 Location Information

With your permission, we may collect approximate location information, including latitude, longitude, country/region, city, timezone, and location service status. We use this information for account security, fraud prevention, loan risk assessment, and compliance purposes.

2.7 Installed Application Information

During loan application risk assessment, we may collect metadata about applications installed on your device, including:

App name;
Package name;
Version name and version code;
First install time and last update time;
Whether the app is a system app;
App UID.

We use this information to assess fraud risk, detect potentially harmful or suspicious environments, and support credit risk evaluation. We do not collect the content stored inside your other apps.

2.8 Usage, Analytics, and Diagnostic Information

We may collect app usage and diagnostic information, including:

Page views, clicks, form submission status, validation failures, and conversion events;
API request results and error information;
App performance, crash, and diagnostic signals;
Loan application flow status and interaction records.

This information helps us improve product stability, understand service performance, prevent fraud, and optimize the user experience.

3. Permissions We May Request

KopaFlex may request the following Android permissions:

Internet and network state permissions: to connect to our servers and provide online services;
Wi-Fi/network state permission: to understand connection status and improve reliability;
Read phone state permission: to collect device/SIM/network signals for security, fraud prevention, and risk assessment;
Approximate location permission: to support account security, fraud prevention, and risk assessment;
Advertising ID permission: to support attribution, analytics, fraud prevention, and service improvement.

KopaFlex does not require SMS reading permission, camera permission, photo/video access permission, or full contacts access permission in the current app implementation. Emergency contacts are provided by you manually or through a contact picker action that you initiate.

4. How We Use Your Information

We use your information for the following purposes:

To create, verify, and manage your account;
To send OTP codes and authenticate login or wallet verification;
To process loan applications, loan approvals, disbursements, repayments, rollovers, and related services;
To verify identity information and assess loan eligibility;
To conduct fraud prevention, risk control, device security checks, and credit assessment;
To communicate with you about your account, loan status, repayment reminders, customer service, and important service notices;
To provide customer support through in-app channels, phone, email, WhatsApp, or other available contact methods;
To improve app stability, service quality, user experience, and product performance;
To comply with laws, regulations, court orders, regulatory requests, dispute resolution, and legal obligations;
To protect the rights, property, and safety of KopaFlex, our users, partners, and the public.

5. Legal Basis and Consent

Where required by applicable law, we collect and process your information based on your consent, the need to perform our service agreement with you, our legitimate interests in preventing fraud and providing secure services, and our need to comply with legal and regulatory obligations.

You may decline certain permissions. However, if a permission or information item is necessary for identity verification, risk assessment, loan disbursement, repayment, or fraud prevention, some services may not be available or may not work properly without it.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only where necessary and appropriate, including:

With lending, financial, payment, mobile money, verification, risk control, collection, and customer service partners, to provide loan services and related support;
With technology service providers that help us operate the app, host data, perform analytics, attribution, diagnostics, fraud prevention, and communication services;
With regulators, law enforcement agencies, courts, public authorities, or other parties where required by law or legal process;
With professional advisers, auditors, insurers, or legal representatives where necessary for compliance, dispute handling, or business protection;
In connection with a merger, acquisition, financing, restructuring, or transfer of business assets, subject to appropriate confidentiality and data protection safeguards;
With your consent or at your direction.

7. Third-Party Services and SDKs

KopaFlex may use third-party services and SDKs to operate and improve the app, including:

AppsFlyer: attribution, install source analysis, campaign measurement, fraud prevention, and analytics;
Firebase Analytics and Firebase Installations: analytics identifiers, app usage analysis, diagnostics, and service improvement;
Google Play services and Google Play In-App Review: Google platform services, app review prompts, and related service functions;
Backend risk control, credit assessment, loan processing, payment, customer service, and notification service providers.

These third parties may process information according to their own privacy policies and our agreements with them. We require service providers to process information only for authorized purposes and to use appropriate security measures.

8. Data Storage, Security, and International Transfer

We use reasonable administrative, technical, and organizational safeguards to protect your information, including access controls, encryption or secure transmission where appropriate, permission management, and internal review procedures.

Your information may be stored or processed in Tanzania or in other countries where our service providers or partners operate. Where information is transferred internationally, we take reasonable steps to protect it in accordance with this Policy and applicable law.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will continue to improve our safeguards to protect your information.

9. Data Retention

We retain your information only for as long as necessary for the purposes described in this Policy, including providing loan services, maintaining account records, fraud prevention, legal compliance, dispute resolution, audit, tax, accounting, and regulatory requirements.

When information is no longer needed, we will delete, anonymize, or otherwise process it according to applicable laws and internal retention rules.

10. Your Rights

Subject to applicable law, you may have the right to:

Access the personal information we hold about you;
Request correction of inaccurate or incomplete information;
Request deletion of your account or personal information, where permitted by law;
Withdraw consent where processing is based on consent;
Object to or restrict certain processing activities;
Ask questions or make complaints about how we handle your information.

Some information may need to be retained where required for legal, regulatory, fraud prevention, loan servicing, repayment, dispute resolution, or legitimate business purposes.

11. Account Deletion and Data Clearing

You may request account deletion and personal data clearing through available customer service channels, including:

In-app customer service or account deletion entry, where available;
Customer service phone, email, WhatsApp, or other channels displayed in the KopaFlex app;
Email: ixwcerne@gmail.com.

After receiving your request, we may need to verify your identity and account ownership before processing the request. We will handle deletion requests within a reasonable time and in accordance with applicable legal and regulatory requirements.

12. Children's Privacy

KopaFlex is not intended for users under 18 years old. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we may reject the application, close the account, and delete relevant information where appropriate.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in our services, legal requirements, security practices, or business operations. If we make material changes, we will notify you through the app, website, email, or other appropriate channels.

The latest version of this Policy will apply from the date it is published, unless otherwise stated.

14. Contact Us

If you have any questions, requests, complaints, or concerns about this Policy or how we handle your personal information, please contact us through the customer service channels displayed in the KopaFlex app or by email:

ixwcerne@gmail.com