This Privacy Agreement is developed by UNITE KARE LTD and applies to the AmanfiLoan application (hereinafter referred to as "AmanfiLoan" or "this Application"). This Agreement is intended to explain to you how we collect, use, store, share and protect your personal information when you use AmanfiLoan. Please read this Privacy Agreement carefully to understand how we process your personal information. If you do not agree with any part of this Agreement, please do not use this Application.

Introduction

AmanfiLoan is a mobile application that provides loan services to users in the Republic of Ghana. Through this application, you can apply for a short-term loan, and we need to collect, store, verify and verify your personal information. We value your privacy and have established this Privacy Policy to outline the practices we follow when collecting, using and disclosing personal information.

1. Collection of personal information:

When you apply for a loan, we will collect the following information as part of your credit assessment:

1.1 Personal information permissions:

Before applying for a loan, we will collect your name, ID number, contact information, Emergency Contact Information(Contact Name, Phone Number, Relationship),bank card information and other personal information in the form of a form for identity verification to ensure that your identity is authentic and valid and meets the compliance requirements of the loan business; assess your credit status to provide you with a suitable loan amount and interest rate; process core business processes such as loan application, loan issuance and repayment to ensure the smooth progress of the transaction. We strictly abide by relevant laws and regulations, encrypt and store your personal information and transmit it to the server: https://www.unitekareltd.spaceto prevent information leakage.

1.2 Emergency Contact Information:

To ensure account security, prevent fraudulent activities, and conduct necessary risk control, we collect emergency contact information during the loan application process, including the contact’s name, phone number, and relationship with the user. This information is used solely for account security verification, risk identification, and related security management purposes.

Before providing emergency contact information, the user must ensure that the contact person has been informed and has given their consent.

This application does not access, read, or upload the contacts stored on the user’s device. All emergency contact information is manually entered and provided by the user within the application. We do not obtain contact data from the user’s device through any automated means, nor do we use this information for purposes unrelated to our services.

1.3 Location permission:

When you use the APP, we need to obtain your approximate location information. It is mainly used to identify the area you are in. We only provide loan services to Ghanaian citizens aged 18 years and above who are in Ghana. Based on location information, we can determine your current location to ensure that you are a user within our Services. On the other hand, depending on your region, we can also provide you with loan products that are in line with local policies and market conditions. We strictly abide by relevant laws and regulations, and encrypt and store your personal information and transmit it to the server: https://www.unitekareltd.space to prevent information leakage.

1.4 Camera permissions:

Camera permissions are mainly used for ID cards, face recognition module shooting and uploading. The purpose is to obtain your face image through camera permissions, verify your identity, ensure that the loan is executed by you, and protect your account security. We strictly abide by relevant laws and regulations, encrypt and store your personal information and transmit it to the server: https://www.unitekareltd.space to prevent information leakage.

1.5 Device permissions:

Access to device permissions includes information such as device model, operating system version, and device identifier (e.g., IMEI, etc.). This information is used to identify the uniqueness of your device. In conducting risk assessments, device information may serve as a reference factor. For instance, if the same device is used to apply for different loans across different accounts, we do not rule out the possibility of loan fraud, and we need to confirm that the device being applied for is not a virtual device; we do not accept any applications from virtual devices to prevent loan fraud. At the same time, we optimize the compatibility and performance of the app on different devices to provide you with a smoother user experience. We strictly adhere to relevant laws and regulations, encrypt your personal information, and transmit it to the server: https://www.unitekareltd.space to prevent information leakage.

2. Use of Personal Information：

(I) Core Business Purposes

Process your loan application, including but not limited to identity verification, credit assessment, matching with lenders, and loan issuance process.

Provide you with loan services, including loan amount determination, repayment arrangements, overdue reminders, etc.

Monitor and manage loan risks to ensure the security and sustainable development of our business.

(II) Other Purposes

Improve and optimize our services, and enhance the functionality and user experience of the application by analyzing your usage data and feedback.

Communicate with you, including sending you service-related notifications and messages, such as loan approval results, repayment reminders, application updates, etc.

Conduct internal audits, data analysis and research to improve our products and services and better meet user needs.

3. Facial Recognition Permissions:

(1) Collection

During the facial recognition process initiated by the user as part of the loan application, we only collect raw facial images captured in real time through the device camera (i.e., unprocessed image data). We do not extract or store any facial feature points, feature vectors, or other biometric information.

(2) Use

The collected facial data is used solely for necessary identity verification within the loan application process, including:

(2.1) Performing liveness detection using real-time images to determine whether the operation is conducted by a real user and to prevent fraudulent activities;

(2.2) Comparing the user’s real-time facial image with the photo from the submitted valid identification document on a 1:1 basis to verify identity;

(2.3) Generating a verification result (pass/fail) based on the comparison, which determines whether the user may proceed with the loan application process.

The facial data will not be used for any purposes unrelated to the loan business.

(3) Disclosure and Sharing

Unless otherwise required by laws and regulations or with the user’s explicit consent, we will not disclose or share users’ facial data with any third parties, nor will it be used for advertising, marketing, or any unrelated purposes.

(4) Storage

After identity verification is completed, the raw facial images will be encrypted and uploaded to our server for secure storage (server address: https://www.unitekareltd.space). Encryption measures are applied during both transmission and storage to ensure data security.

(5) Retention and Deletion

We follow the principle of data minimization and retain facial data only for the period necessary to achieve identity verification purposes and comply with regulatory requirements. In accordance with the Ghana National Identification Authority (NIA) requirements, facial images will be retained for no more than six (6) months from the date of the most recent collection or update. After the retention period expires, the data will be permanently deleted in an irreversible manner.

4. Storage of Personal Information：

(I) Storage Location

We will store your personal information in an encrypted server. If it is necessary to transfer your personal information overseas, we will obtain your explicit consent in advance and take appropriate measures to ensure that your personal information is adequately protected overseas.

(II) Storage Period

We will determine the storage period of your personal information in accordance with the requirements of laws and regulations and business needs. After your loan application is processed and the relevant business activities are completed, we will delete or anonymize your personal information in accordance with regulations, unless otherwise required by laws and regulations or you agree to retain it separately.

5. Security protection of personal information：

(I) Security measures

We attach great importance to the security of your personal information and have taken a series of reasonable security measures to protect your personal information, including but not limited to:

Encrypt your personal information to ensure the confidentiality of data during storage and transmission;

Implement access control measures to limit access to your personal information to authorized personnel only, and record and audit access;

Regularly scan and repair the system for security vulnerabilities to prevent hacker attacks, data leaks and other security incidents;

(II) Security incident handling

If a personal information security incident unfortunately occurs, we will immediately activate the emergency plan and take measures to reduce the losses and impacts caused by the incident. We will promptly inform you of the basic situation of the incident and the measures we have taken. If it involves the leakage of your sensitive information, we will report to the relevant regulatory authorities in accordance with the requirements of laws and regulations.

6. Your rights

(i) Right of access

You have the right to access the personal information you provide in AmanfiLoan at any time, including registration information, loan application information, etc. You can view and obtain your personal information in the relevant settings or personal information management interface by logging into this application.

(ii) Right of correction

If you find that the personal information we collect and store is wrong or inaccurate, you have the right to ask us to correct it. You can make a correction request to us through the feedback channel provided in this application or contact our customer service team, and we will handle it in a timely manner after verification.

(iii) Right of deletion

In compliance with the provisions of laws and regulations, you have the right to ask us to delete your personal information. For example, if we no longer need your personal information for the original collection purpose, or you withdraw your consent to our use of your personal information, you can make a deletion request to us. We will delete your personal information in a timely manner after verification, except as otherwise provided by laws and regulations.

(iv) Right to withdraw consent

You have the right to withdraw your consent to our collection and use of your personal information at any time. You can exercise the right to withdraw consent by changing the relevant settings in this application or contacting our customer service team. After withdrawing your consent, we will no longer collect and use your personal information for the purposes you previously agreed to, but this will not affect the legal processing we have already carried out before you withdraw your consent.

(V) Right to complain

If you have any questions, comments or complaints about our handling of your personal information, you can contact our customer service team in the following ways: [Specific contact information, such as customer service email, customer service phone number, etc.]. We will handle your questions as soon as possible and give you a reply within a reasonable time.

7. Protection of minors :

This application does not provide services to minors. We will not intentionally collect personal information from minors. If we find that we have accidentally collected personal information from minors, we will immediately take measures to delete the relevant information. If you think we may have collected your personal information as a minor, please contact us in time and we will deal with it as soon as possible.

8. Changes to the Privacy Policy :

We may revise this Privacy Policy based on changes in laws and regulations, business development needs or other reasonable reasons. We will publish the revised Privacy Policy in this application and notify you through in-app notifications, emails or other appropriate methods within 30 days of publication. If the revised Privacy Policy has a significant impact on your rights, we will clearly state it in the notification and, if necessary, re-ask for your consent. If you continue to use this App after we post the revised Privacy Policy, you agree to be bound by the revised Privacy Policy.

If any provision of this Privacy Agreement is deemed invalid or unenforceable, it will not affect the validity and enforceability of other provisions. We will do our best to modify the invalid or unenforceable provisions to make them comply with the requirements of laws and regulations and to achieve the intent of the original provisions to the greatest extent possible.

UNITE KARE LTD