Privacy Policy

Who we are

This privacy policy applies to the Chatura Rupee: Credit Line App for mobile devices, together with any related services operated by Ram singh (collectively, the “Application”). Ram singh is referred to in this policy as the “Service Provider”, and also as “we”, “us” or “our”.

The Application provides a digital credit line to users in India. To do this, we need to collect and verify certain information about you. This policy tells you exactly what that information is.

By downloading, registering with, or using the Application, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Application.

Information we collect

Information you give us

When you register and complete your KYC, you provide the following:

• Account details — your mobile phone number and the verification code used to sign in.
• Personal and financial profile — education level, type of work, years of work experience, profession, job level, monthly income, living arrangement, marital status, number of children, and religious belief.
• Identity information — your full name, your PAN card number, and a photograph of your PAN card.
• Face verification — a live photograph taken through the in-app camera, used to confirm that you are the person on the identity document.
• References you choose — the name and phone number of up to two contacts that you select from your address book using the system contact picker. We do not read or upload your address book; only the contacts you deliberately pick are sent to us.
• Bank account details — the bank card or account number used to disburse a loan and to collect repayment.

You may also contact us through the app (for example, through the Contact Us form), in which case we receive the content of your message and any contact details you choose to include.

Installed applications

To assess risk and detect fraudulent behaviour, the Application reads the list of applications installed on your device. For each application this includes the app name, package name, version name and code, first installation time, last update time, and whether it is a system application. This information is used as part of our automated risk assessment and is not used to identify you personally or to contact you.

Device and technical information

We automatically collect technical details about the device you use, including:

• Device model, brand and device name, operating system version and API level;
• Screen size, available storage and battery status;
• Device and advertising identifiers, including the Android ID, your Google advertising ID, the Adjust identifier, and the Firebase application instance ID;
• Network information, such as the connection type (Wi-Fi, 2G, 3G, 4G, 5G) and the Wi-Fi IP address;
• The source from which you installed the Application (install referrer);
• Your device's Internet Protocol (IP) address.

Location information

With your permission, the Application collects your device's approximate location (coarse location, derived from the network provider). We use it for location-based features, for fraud prevention, and to improve the Application and our services. We do not collect continuous background location tracking.

• Geolocation services — location data may be used to provide location-based features or content.
• Analytics and improvements — aggregated location data may help us understand usage patterns and improve performance.
• Service providers — location data may be processed by service providers acting on our behalf, subject to this policy and applicable law.

How you use the Application

We collect information about your activity in the Application, including the pages and screens you visit, the time and date of your visit, the time spent on those pages, the time spent in the Application, and your credit, loan and repayment records, including repayment reminders you create.

Permissions we request

The Application asks for the following permissions. Each is optional in the sense that you may refuse it — but the related feature, or your ability to complete KYC, may not work without it.

How we use your information

• To verify your identity and assess your eligibility for a credit line;
• To calculate your credit limit using our risk assessment model;
• To disburse loans to you and to process your repayments;
• To prevent, detect and investigate fraud, and to protect the security of our services;
• To provide customer support and respond to your enquiries and requests;
• To send you important information and required notices about your account, and — where permitted by law — marketing communications;
• To comply with our legal and regulatory obligations, including record-keeping requirements;
• To understand how the Application is used and to improve its performance and features.

Where we rely on your consent to process your information, you may withdraw that consent at any time by contacting us. Withdrawing consent does not affect processing carried out before the withdrawal.

How your data is stored and protected

When you use the Application, the information you submit — including your KYC profile, your identity documents and your face photograph — is encrypted and uploaded to our own server at https://c5yaar.com. Request content is encrypted with AES before it leaves your device, and all communication between the Application and our server is carried over an encrypted HTTPS (TLS) connection.

Your data is used to calculate your credit limit and to provide the services described in this policy. It is not sold, rented, or traded, and it is not shared with third parties for their own purposes. Access to personal data inside our organisation is limited to staff and systems that need it to perform the risk assessment, verification and servicing of your account.

Sharing and disclosure

We do not share your personal data with third parties for their own purposes, and we do not sell it. We may disclose information only in the following limited circumstances:

• Service providers acting for us — companies that perform services on our behalf (such as hosting, analytics and crash reporting). They may use your information only to provide that service to us, they do not have an independent right to use it, and they are bound by confidentiality obligations and this policy.
• Legal requirements — when required by law, such as to comply with a subpoena, a court order, or a lawful request from a government or regulatory authority.
• Protecting rights and safety — where we believe in good faith that disclosure is necessary to protect our rights, to protect your safety or the safety of others, to investigate fraud, or to respond to a government request.
• Business transfer — if our business is transferred or merged, your information may be transferred as part of that transaction, subject to this policy.

Only aggregated, anonymised data may be used by us for reporting and service improvement, as it no longer identifies you.

Third-party services

The Application uses third-party services that have their own privacy policies about how they handle data. These services support functionality, analytics and service delivery, and they may receive limited technical or usage data (such as device identifiers, app events and crash reports) — but not your KYC information, identity documents, face photographs, or contact details.

• Google Play Services
• Google Analytics for Firebase
• Firebase Crashlytics
• Adjust

We encourage you to read the privacy policies of these services. Where required by applicable law, we will obtain your consent before using non-essential tracking technologies.

Cookies and tracking technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, we will obtain your consent before using non-essential tracking technologies.

International data transfers

We, or our third-party service providers, may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, we will use appropriate mechanisms, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Adequacy decisions or other legally recognised transfer mechanisms;
• Your consent, where required and legally permitted.

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, we will apply appropriate safeguards and obtain any consent required for the transfer.

How long we keep your data

We retain personal data only as long as it is needed for the purposes described in this policy:

• Information you provide — retained for the duration of your use of the Application, plus 12 months afterwards, unless a longer period is required by law.
• Information collected automatically — retained for up to 24 months from collection, unless a longer period is required for legal compliance.
• Aggregated and anonymised data — retained indefinitely, because it no longer identifies you.
• Records required for legal compliance — retained for as long as applicable law requires.

You may ask us to delete your personal data at any time, subject to any legal obligation we have to retain it. Please note that some of the information you provided may be required for the Application to function properly.

Your rights and data deletion

You may ask us to:

• Give you access to the personal data we hold about you;
• Correct any personal data that is inaccurate or incomplete;
• Delete your personal data or your account;
• Withdraw consent, where our processing is based on consent.

To exercise any of these rights, contact us at rahulsingh739910@gmail.com. You can also request deletion of your account and its data from the Settings section of the Application. Once we have verified your identity, we will delete your personal data from our systems, except where retention is required for legal compliance or legitimate business purposes, and we will process your request within the timeframes required by applicable law.

Your rights in India (DPDP Act)

If you are in India, you have rights under applicable Indian data protection law, including the right to access a summary of the personal data we process about you, the right to correction and erasure, the right to nominate another person to exercise your rights in the event of death or incapacity, and the right to a readily available grievance redressal mechanism. You may exercise these rights, or raise a grievance, by contacting our Grievance Officer:

• Grievance Officer: Ram singh
• Email: rahulsingh739910@gmail.com

You always have the right to withdraw your consent to processing. If you withdraw consent, we may be unable to continue providing the credit line or related services to you.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information. To exercise your CCPA/CPRA rights, contact us at rahulsingh739910@gmail.com.

Children

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. We do not knowingly solicit data from children or market the Application to them, and where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent.

If we discover that a child has provided us with personal information, we will delete it from our servers immediately. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at rahulsingh739910@gmail.com so that we can take the necessary steps.

Security and data breach notification

We are concerned about safeguarding the confidentiality of your information, and we provide physical, electronic and procedural safeguards to protect the information we process and maintain. Information is encrypted in transit to our server over HTTPS.

No method of transmission over the internet or method of electronic storage is completely secure. If a data breach occurs that affects your personal data, we will notify you and the relevant authorities in accordance with applicable legal requirements, including, where required, information about the nature of the breach and the steps being taken to address it.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy with a new effective date. Where required by law, we will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available on request by contacting us at rahulsingh739910@gmail.com.

Your consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action — for example, by granting a permission or submitting your KYC information. You may withdraw consent at any time without affecting processing carried out before the withdrawal. Processing based on other lawful bases is carried out as described above.

Contact us

If you have any questions about this policy, about privacy while using the Application, or about our data practices, please contact the Service Provider:

• Service Provider: Ram singh — Chatura Rupee: Credit Line App
• Email: rahulsingh739910@gmail.com