1. Pri
v
acy
P
olicie
s
1.1
.
What data and how i
s
collected and u
s
ed
“Iman
P
ay” app collect
s
following u
s
er’
s
data:
-
P
hone number
-
P
a
ss
port or ID card
-
P
ayment pla
s
tic card
s
The proce
ss
of data collection include
s
regi
s
tration
s
tep
s
where u
s
er
s
add per
s
onal
d
ata after accepting the “
Pu
blic offer” which include
s
P
rivacy policy” rule
s
by using
O
T
P
in the app.
Collected data i
s
s
ending t
o
governmental credit organization
s
which could
s
core
us
er
s
for checking their creditworthine
ss
.
-
S
elfie
Face data which i
s
collected by the app we
s
end to local authority’
s
databa
s
e for
us
er
s
’ identification. It allow
s
to recognize face of our u
s
er
s
by comparing it with
d
ata from governmental organization. It a
ss
i
s
t
s
u
s
to prevent the growth of fraud
ca
s
e
s
. Thu
s
, third party already ha
s
face data of u
s
er
s
, and they
s
tore it not more than
d
uring the one year.
I
n addition, we u
s
e face data only during our
s
coring proce
ss
that take
s
in avera
g
e
f
rom 5 to 30 minute
s
. After receiving the re
s
ult from
s
coring, we continue to
s
tore
f
ace data of u
s
er
s
during the one year.
1.2. Confi
r
mation of u
s
ing SDK
s
The data collected i
s
s
hared with
s
elected and authorized provider
s
of data analytics
s
er
v
ice
s
. The
s
ervice provider
s
are de
s
cribed below:
-
App
M
etrica.
“Iman
P
ay” app u
s
e
s
the
s
ervice for marketing purpo
s
e
s
.
-
CredoLab
P
te Ltd.
“Iman
P
ay” app u
s
e
s
Credolab
s
ervice
s
a
s
part of our deci
s
ion proce
ss
to a
ss
e
ss
you
r
creditworthine
ss
for a Iman
P
ay” with u
s
. We may al
s
o u
s
e your data to a
ss
e
ss
you
r
intere
s
t in receiving financial
s
ervice
s
through algorithm
s
and mathematical modelling.
Metadata acce
ss
ed, collected and
s
hared are a
s
follows:
-M
edia
-
Contact
s
-
Audio
-
Calendar
-
Reminder
s
We collect data of your pho
n
e to provide a
s
egmented ri
s
k profile and generate an
aggregated
s
tati
s
tical information. To protect your identity, we remove all personal
identifier
s
(if any) and p
s
eud
o
nymize
s
uch information. Any metadata proce
ss
ed in this
wa
y
cannot be u
s
ed to reproduce the original data collected.
Credolab’
s
privacy policy i
s
available at the foll
o
wing
link: http
s
://www.credolab.com/privacy-policie
s
/gdpr-privacy-policy.
1.3. Explanation of data
r
etention/deletion policie
s
According to our retention policy, collected data i
s
retained until we get re
s
pon
s
e
fr
om
organization
s
which provide
s
information about the u
s
er
s
creditworthiness.
With re
s
pect to our deletion p
o
licy, we provide two option
s
for u
s
er
s
of app Iman
P
ay”:
log out from the app and delete their account.
F
ir
s
t option allow
s
u
s
er
s
to leave the account
which i
s
created in the app. If u
s
er
s
choo
s
e the
s
econd option, all per
s
onal information o
f
u
s
er
s
with their account i
s
deleted automatically from our
s
ystem.
2. Permi
ss
ion
 Reque
s
t of pe
r
mi
ss
ion
s
Before
s
tarting the regi
s
tration proce
ss
, u
s
er i
s
a
s
ked to provide permi
ss
ion for collecting
their per
s
onal information for scoring. U
s
er
s
s
hould be familiarized with “
P
ublic of
f
e
r
document and accept it. Thi
s
document include
s
information of “
P
rivacy
P
olicy” rules
which are al
s
o accepted by u
s
er
s
. After receiving the permi
ss
ion from u
s
er for collecting
their per
s
onal information, regi
s
tration proce
ss
i
s
s
tarted.
 Functionality fo
r
withd
r
awing the con
s
ent
U
s
er
s
of “Iman
P
ay” cannot withdraw their con
s
ent for collection of per
s
onal information
becau
s
e we are financial organization which i
s
needed
s
en
s
itive information of our use
r
s
for checking their creditworthine
ss
. When u
s
er
s
accept “
P
ublic offer” we
s
tart
automatically to collect data for providing limit which can be u
s
ed by u
s
er
s
for purchases
in in
s
tallment
s
. If u
s
er
s
do not agree with collection of their information they reject
P
u
b
lic offer” and do not regi
s
ter in the app.
3. Data
M
inimization
“Iman
P
ay” app a
s
k
s
an acce
s
s only to “Camera” and “Contact
s
” app
s
which are e
s
sential
for core functionality of the app. Acce
ss
to “Camera” i
s
needed for taking a
s
elfie in the
app. “Contact
s
” i
s
u
s
ed for adding friend
s
’ contract
s
in the app. It’
s
important for use
r
s
who can take a participation in the referral
s
y
s
tem.
4. Acce
ss
“Iman
P
ay” app doe
s
not a
s
k an acce
ss
for unnece
ss
ary data from the u
s
er’
s
device.
I
t
re
sp
ect
s
u
s
er’
s
permi
ss
ion
s
and u
s
e only acce
ss
which i
s
e
ss
ential for core functionality
of the app.
5. Account
S
ign-In
“Iman
P
ay” app include
s
account-ba
s
ed feature
s
. Therefore, the proce
ss
of u
s
er
s
s
ign
-
in
i
s
c
r
ucial for the core functionality of the app. Here, we provide our u
s
er
s
option to delete
their account if they do not want to hold it. Account deleting functionality i
s
placed in
app’
s
S
etting
s
” near the “Log out” button.
6. App
s
for di
s
covering the pa
ss
word
s
It’
s
r
e
s
tricted in our company to u
s
e developer
s
’ app
s
for di
s
covering the pa
ss
word
s
o
f
u
s
er
s
.
7. SafariViewController
SafariViewController i
s
u
s
ed to vi
s
ibly pre
s
ent information to u
s
er
s
.
8. Collection of per
s
onal information
“Iman
P
ay” app collect
s
per
s
onal information of u
s
er
s
after receiving the acceptance o
f
P
u
b
lic offer” by u
s
er
s
. Acceptance of thi
s
document mean
s
that u
s
er
s
allow to collect
their per
s
onal information for scoring. Our company re
s
trict
s
to collect u
s
er
s
’ per
s
onal
information without their explicit con
s
ent.
9. Legal entity
s
ubmit
s
u
s
er information
“Iman
P
ay” app provide
s
financial
s
ervice that’
s
s
pecialized a
s
highly regulated field.
The
r
efore, u
s
er information i
s
submitted by a legal entity providing
s
ervice
s
, not by ou
r
developer
s
.
10. Reque
s
t of ba
s
ic contact information
“Iman
P
ay” app reque
s
t
s
ba
s
ic contact information from u
s
er
s
a
s
their phone numbe
r
.