Privacy Policy

1. Introduction

Peso Mate ("we", "us", or "our") operates the Peso Mate mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Types and Sources of Personal Information We Collect

We only collect information necessary to deliver services, ensure security, and comply with applicable laws. The categories include:

2.1 Basic Identity Information

• Information you provide: Full name, government-issued identification (e.g., national ID, passport, driver's license), mobile number, contact number, email address, residential and mailing address
• Supporting verification data: Facial photographs (for liveness detection and identity verification), background details (such as occupation, income for credit assessment), and ID document photos

2.2 Device and Permission-Related Information

• Device data: Device model, operating system version, unique device identifier, IP address, network access type (Wi-Fi/mobile data), and device logs (e.g., crash reports, performance data)
• Application-related data: Running process information or memory data (used only for malware detection and account security)
• Location permission: GPS data collected with your consent, used for auto-filling application information, verifying identity, and preventing account risks
• Camera permission: Used to capture ID documents and selfies for identity verification and fraud prevention
• Storage permission: Used only to cache necessary data to ensure smooth app performance; no personal files will be accessed
• SMS permission: Transaction-related messages for risk analysis and fraud prevention; personal conversations and contact details will not be read or collected
• App-list permission: Only the presence of selected finance-related apps is checked for anti-fraud risk control; no app data or usage details are collected

2.3 Financial Information

Includes bank account details, income records, and credit card status, used for credit evaluation and risk assessment to provide suitable financial services.

2.4 Other Information

• Social media accounts you submit
• Emergency contact details (name, phone number, and relationship, for communication in account security events)
• User behavior data collected via cookies, pixel tags, or web beacons (e.g., usage frequency, feature preferences, used to optimize services and analyze ad effectiveness)

2.5 Sources of Information Collection

• Information you directly provide during registration, service applications, or document submission
• Data automatically generated during your account use or app activities
• Information provided by government authorities, regulators, law enforcement agencies, telecom providers, or financial institutions
• Publicly available sources (such as legitimate public registry data)
• Interaction data collected through cookies, tracking tools, and similar technologies

Unless otherwise required by law, we will only collect information with your explicit consent. By submitting personal information to us or our authorized agents, you guarantee that the information provided is true, accurate, complete, and valid.

3. How We Use Your Information

We follow the principle of "minimum necessity" and use your information only for the following authorized purposes:

• Identity Verification & Account Security: Verifying your identity (e.g., ID, facial recognition), detecting fraud, fulfilling Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations
• Service Provision & Functionality: Processing loan applications, assessing credit limits, managing accounts (e.g., updates, repayment reminders), and providing personalized services (e.g., loan product recommendations)
• Account Protection: Ensuring account safety through monitoring, security measures, and risk assessment
• Communication & Notifications: Sending verification codes, transaction alerts, account updates, and marketing offers (with your consent)
• Risk Control & Compliance: Monitoring abnormal transactions, preventing illegal activities (e.g., money laundering), and complying with legal orders or regulatory investigations
• Data Analysis & Optimization: Analyzing user behavior to improve service features, enhance user experience, and optimize search and ad delivery
• Legal & Dispute Resolution: Responding to government requests, handling disputes (e.g., with guarantors or collection agencies), and protecting legal rights

4. Information Disclosure Rules

We prioritize the confidentiality of your personal information and will only disclose or share it within the scope described in this Policy and in compliance with applicable laws, regulations, and industry standards. For efficient and stable service delivery, you understand and agree that your personal information may be shared or processed in the Philippines or abroad with the following parties:

• Group Companies & Business Partners: Parent companies, subsidiaries, and authorized service providers (e.g., payment processors, cloud storage providers, data processing institutions) supporting daily operations and technical services
• Government & Regulatory Authorities: As required by law, regulation, or judicial order
• Professional Third-Party Teams: IT support, cybersecurity experts, and licensed collection agencies assisting with security, technical, or debt recovery matters when necessary
• Program Partners: Selected partners for joint activities, promotions, or marketing, under confidentiality and compliance agreements
• Credit Bureaus: We may report your loan information and repayment history to credit bureaus to help assess creditworthiness for future financial transactions

5. Information Security Protection

5.1 Storage Location & Retention Period

• Your data will be transmitted using encryption and stored on our secure servers
• Generally, we retain information for as long as required by legal or business purposes (no longer than 10 years)
• Once your account is closed or the retention period expires, data will be deleted or anonymized

5.2 Security Measures

• Technical measures: Encrypted storage, firewalls, access control, and regular security testing
• Administrative measures: Strict access hierarchy, staff training on privacy, and operational audits
• Emergency response: In case of a data breach or security incident, we will promptly take remedial actions and notify affected users in accordance with the law

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Under the Philippine Data Privacy Act of 2012, you have the following rights:

• Right to Access: Request a copy of your personal information we hold
• Right to Rectification: Correct or supplement inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information under applicable laws or agreements
• Right to Withdraw Consent: Revoke consent or permissions at any time (may affect functionality)
• Right to Restrict Processing: Request limitations on data processing under certain circumstances
• Right to Data Portability: Request a copy of your data in a structured format
• Right to Object: Object to the processing of your personal information
• Right to Complain: File a complaint if you object to how your personal data is being processed

To exercise these rights, please contact us at [email protected]. We will respond to your request within 15 days as required by law. It is your responsibility to keep the personal information you provide accurate and up to date.

7. Updating Personal Information

It is your responsibility to keep the personal information you provide accurate and up to date. You also have the right to access and request corrections to any personal information we hold about you. If you believe any of your information is inaccurate, incomplete, outdated, or misleading, you may contact us to update or correct it.

You may submit updates via email to [email protected] or through our in-app customer service. Upon receiving your request, we will verify your identity and make necessary updates as soon as possible.

For clarity, we reserve the right to request additional documentation to confirm your identity or validate your request before making corrections.

8. Protection of Minors

Our products and services are intended for adult users and are not directed toward individuals under 18 years old. We do not knowingly collect personal data from minors.

If we discover that we have collected such information without guardian consent, we will promptly delete it. Guardians may contact us via [email protected] or through the in-app customer service center.

9. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Policy Changes & Effectiveness

We reserve the right to revise or update this Privacy Policy at any time based on legal requirements, business adjustments, or technological developments. Updates will be published in prominent locations within the app (e.g., login page, homepage notice) or on the official website, with the effective date indicated.

By continuing to use our services, you acknowledge that you have read, understood, and accepted the updated Privacy Policy. If you do not agree with the changes, please discontinue using our services immediately.

By voluntarily providing your personal information, you explicitly consent to the collection, use, processing, and disclosure of your information as described herein.

11. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, you may contact us through the following channels:

We commit to responding within a reasonable time and handling your concerns in accordance with the law. You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

12. Governing Law and Compliance

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, particularly:

• Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations
• Republic Act No. 9474 (Lending Company Regulation Act of 2007)
• Republic Act No. 8792 (Electronic Commerce Act of 2000)
• Bangko Sentral ng Pilipinas (BSP) regulations
• Securities and Exchange Commission (SEC) regulations