Privacy Policy

Rupiva Credit is a digital lending service platform developed and operated by NIVANA FINTECH PRIVATE LIMITED. The Company acts as a Lending Service Provider (LSP), providing loan application assistance and related technical and operational support. Rupiva Credit does not directly provide loans, make credit approval decisions, or disburse loan funds.

Rupiva Credit partners with Allen's Housing & Finance Limited, a Non-Banking Financial Company (NBFC) registered with the Reserve Bank of India (RBI). Loan products displayed on the Platform are offered by the partner lending institution. Loan approval, credit decisions, loan terms, and disbursement of funds are the responsibility of the partner lending institution, in accordance with applicable laws, regulations, and RBI regulatory requirements.

Platform Operator (LSP)

Company Name

NIVANA FINTECH PRIVATE LIMITED

Registered Address

4/F Unit No-1,2 Kalpataru, Prime P/N D-3, Road-16, Wagle I.E., Thane, Thane-400604, Maharashtra, India

Contact Email

case@nivanafintech.com

Official Website

https://nivanafintech.com/

Partner Lending Institution (NBFC)

Company Name

Allen's Housing & Finance Limited

RBI Registration Number

B.05.06399

Corporate Identification Number (CIN)

U65993WB1992PLC056844

Official Website

https://allenhf.in/partner.html

To facilitate loan applications, identity verification, credit assessment, risk management, and related services, we may collect and process the following categories of personal information, where necessary and permitted by applicable laws.

1.1 Personal Identification Information

To complete Know Your Customer (KYC) verification in accordance with applicable RBI requirements, assess loan eligibility, and identify suitable loan products, we may collect your full name, mobile number, identity documents, email address, date of birth, and other basic information necessary for identity verification. This information is primarily used to verify the identity of loan applicants, assist with loan assessment and disbursement, support credit evaluation and risk management, prevent fraud, and comply with applicable legal and regulatory record-keeping obligations. We process such information in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws. We will not use your personal information for unrelated purposes without the necessary authorisation.

Where necessary, your identification information may be securely shared with our partner lending institution for legitimate lending and compliance purposes. The relevant information will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through appropriate security measures, including encryption, data masking, and access controls. Once the relevant processing purposes have been fulfilled and no legal retention obligation applies, we will delete or anonymise the information in accordance with applicable laws and prescribed retention periods.

1.2 Financial Information

To comply with applicable financial regulations in India and assist our partner lending institution in assessing creditworthiness and reviewing loan applications, we may collect necessary financial information, including bank account details, bank statements, income documents, transaction records, and other financial information relevant to your loan application. Our partner lending institution may use this information to assess your repayment capacity and reduce the risks associated with inappropriate lending and loan defaults. Financial information may be obtained directly from information you voluntarily provide, through legally authorised Account Aggregator channels, or through other compliant methods.

Such information will be processed in accordance with applicable laws and regulatory requirements. The relevant documents and information will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through encrypted storage and access control measures. Your financial information will only be used for credit assessment, risk management, loan-related services, and necessary regulatory record-keeping. It will not be used for unrelated advertising, sold to third parties, or processed for other unauthorised purposes.

Where separate authorisation is legally required for sharing credit information, we will obtain the necessary authorisation before sharing such information with authorised credit information companies, in accordance with applicable laws. You may request to withdraw your authorisation for certain data processing activities, subject to applicable laws. However, withdrawing such authorisation may affect the processing of future loan applications. Functions that can legally operate independently, such as account enquiries, viewing loan statements, and making repayments, should not be unnecessarily restricted as a result. Loan records and other information that must be retained by law will continue to be stored and processed for the applicable statutory retention period.

1.3 Device Information

To improve service quality, protect account security, and prevent fraudulent activities, we may collect necessary information relating to your iOS device, including the device model, operating system version, relevant device identifiers, network information, IP address, and application operation logs. This information is primarily used to identify suspicious devices, prevent identity misuse, detect fraudulent registrations and multi-device fraud, manage lending-related risks, troubleshoot technical issues, and support necessary regulatory audits.

We follow the principle of data minimisation and do not access unrelated application content, private photographs, contact lists, or other personal information stored on your device. Where necessary, device information will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through appropriate encryption and access control measures. Access to such information will be restricted to authorised personnel on a need-to-know basis, and we will not use this information for unauthorised advertising or unrelated data sharing.

You may manage applicable device permissions through your iOS settings. However, certain technical information necessary for providing lending services may not be controlled through separate system permission settings.

1.4 Advertising Identifier (IDFA)

To measure advertising performance, attribute app installations, and analyse promotional activities, Rupiva Credit may request access to your iOS device's Identifier for Advertisers (IDFA), where applicable. If the relevant data processing involves cross-app tracking as defined under Apple's App Tracking Transparency (ATT) framework, we will request your explicit permission through the iOS system authorisation mechanism before conducting such tracking. Once the necessary permission has been granted, the advertising identifier may be used to evaluate advertising effectiveness, identify app installation sources, and optimise marketing campaigns.

We will not sell or disclose your advertising identifier without the necessary authorisation. We will also not use device fingerprinting or similar alternative methods to circumvent your tracking permission choices. You may withdraw tracking permission at any time through your iOS settings. Disabling this permission may affect personalised advertising or advertising performance analysis, but it will not prevent you from using essential services such as loan applications, disbursement status enquiries, and loan repayments.

1.5 Camera Permission

When you voluntarily use features that require access to your device's camera, such as identity document capture, facial verification, or other camera-based verification functions, Rupiva Credit will request your explicit permission before accessing the camera. Camera access is primarily used for online identity verification, which may include liveness detection, capturing images of original identity documents, and video-based Know Your Customer (Video KYC) verification, where applicable. These processes help verify the applicant's identity and prevent fraudulent loan applications involving identity misuse.

The camera will only be accessed when you actively initiate a relevant verification process. Once the required information has been captured, the application will stop accessing the camera. Rupiva Credit will not secretly access your camera or record camera footage in the background. Images and identity verification information collected through these features will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through encryption and access control measures.

Such information will only be processed by authorised business, risk management, or compliance personnel where necessary. We will not sell this information, share it with unrelated third parties, or use it for purposes unrelated to lending services. You may disable camera permission at any time through your iOS settings. However, doing so may prevent you from completing identity verification processes that require photographs or camera access. Functions that can legally operate independently, including account enquiries, viewing loan statements, and making repayments, will remain available without unnecessary restrictions.

1.6 Image Information

When you use the image upload feature in Rupiva Credit, we may process images that you voluntarily upload, including their content, file size, file format, and other file information necessary for uploading and verification. Such information is primarily used to upload identity documents, income documents, and other necessary loan application materials for KYC verification and loan eligibility assessment.

We will not automatically access or collect unrelated photographs from your device's photo library. We will only process images that you actively select and upload using the iOS image selection functionality. Files voluntarily uploaded by users will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through encrypted storage and access control measures in accordance with applicable laws and RBI information management requirements. We will not use these files for unauthorised purposes or sell or disclose them to third parties unrelated to the lending services.

1.7 Emergency Contact Information

When applying for a loan through Rupiva Credit, you may be required to voluntarily provide or select the name, mobile number, and relationship details of an emergency contact, where genuinely necessary for the relevant service and permitted under applicable laws. If the application uses the contact selection functionality provided by iOS, we will only process the contact information that you explicitly select. We will not access or upload your entire contact list or collect information about other contacts without the necessary authorisation.

Emergency contact information will only be used for clearly disclosed and lawful purposes, where necessary, including identity verification, risk management, fraud prevention, and other legitimate lending-related activities. Any contact activities relating to overdue loans will be conducted in accordance with applicable RBI regulatory requirements and personal data protection laws.

Emergency contact information voluntarily provided by you will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through encrypted storage and access controls. Except for partner lending institutions or authorised service providers directly involved in providing lending services and where permitted by law, we will not share, sell, or disclose such information to unrelated third parties without a lawful basis. We will not use emergency contact information for advertising, marketing, or other unrelated commercial purposes.

1.8 Social Media Account Information

If you voluntarily use relevant features and provide the necessary authorisation, Rupiva Credit may collect basic information associated with your social media accounts. Such information may be used to facilitate quick login, support identity verification, automatically populate certain loan application details, and, where applicable, assist with risk management and fraud prevention.

In accordance with the principle of data minimisation, we will only process necessary information, such as account identifiers, publicly available display names, and linked email addresses. We will not access private messages, private photo albums, friends lists, or other private content without the necessary authorisation.

Relevant information will be securely transmitted to our data security centre at https://etinstan.rupivagoios.com/ and protected through encryption and access control measures. Such information will only be accessed by authorised personnel where necessary and will not be used for unrelated purposes. You may withdraw the relevant authorisation in accordance with applicable laws. Following withdrawal, certain features, such as quick login or supplementary identity verification, may no longer be available. However, essential functions that can legally operate independently, including account enquiries, loan repayments, and viewing loan statements, should not be unnecessarily affected.

1.9 Geolocation Information

When you apply for a loan through Rupiva Credit, we may request your explicit permission to access your device's geolocation information to verify the authenticity of the loan application location, identify unusual login activities, and prevent fraud. We will only access relevant location information when necessary for specific business purposes and will not continuously track your location in the background. Such information will be protected by appropriate security measures and used solely for identity verification and risk management. We will not share it with unrelated third parties.

1.10 Calendar Permission

To help you keep track of your loan repayment dates and avoid missed payments, Rupiva Credit may, with your explicit permission, add loan repayment dates and related reminders to your device's calendar. This permission is used solely to create and manage loan repayment reminders. We will not read, collect, or modify your other private calendar events or notes. You may manage the relevant permission at any time through your device settings.

1.11 Permission to Save to Photo Library

When you view or save loan-related documents in Rupiva Credit, we may request your permission to save repayment receipts, transaction screenshots, or other relevant images to your device's Photo Library. This permission is used solely to save images that you actively choose to save. We will not read, collect, or modify other photos or personal files in your Photo Library. You may manage the relevant permission at any time through your device settings.

We collect and process personal information in accordance with the principles of lawfulness, fairness, and necessity to provide secure, efficient, and convenient digital lending services. Your personal information may be used to verify your identity, protect account security, support credit assessment and risk management, assist our partner lending institution in determining suitable credit facilities, and facilitate loan applications, loan approval, disbursement, repayment, account management, and other related lending services.

We may also use relevant information to identify and prevent fraud, money laundering, and other security risks, comply with applicable legal and regulatory obligations, provide customer support, handle complaints, and resolve disputes. Where permitted by applicable laws, we may use anonymised information or apply other appropriate data protection measures to improve product functionality and user experience.

We are committed to processing your information only for the lawful and necessary purposes described above. We will not use your personal information for unrelated purposes without the necessary authorisation. If the purposes of processing change in a manner that requires renewed consent, we will inform you in advance and obtain the necessary authorisation in accordance with applicable laws.

We use your personal information strictly in accordance with applicable laws and this Privacy Policy, and only where there is a lawful basis and a legitimate need to do so. In providing and operating our services, your information is primarily used to support identity verification, credit assessment, loan approval and disbursement processes, repayment processing, and account management. For risk management and security purposes, we may use relevant information to monitor, identify, and prevent fraud, money laundering, and other unlawful activities, thereby protecting your account and transaction security.

To improve our services, we may analyse application usage and optimise app functionality after implementing appropriate data protection measures. We may also use the contact information you provide to send necessary service notifications and loan repayment reminders. In fulfilling our legal obligations, we may process relevant information to comply with applicable requirements relating to anti-money laundering, tax reporting, regulatory investigations, and other legal or compliance matters.

If we intend to use your personal information for purposes beyond those described above, we will obtain your explicit authorisation in advance where required by law. We will take appropriate measures to ensure that your information is only used for the disclosed purposes.

To ensure the secure and stable operation of Rupiva Credit and provide a smoother user experience, we may use cookies and similar technologies on our website and in applicable areas of the application. These technologies are primarily used to verify user identity, maintain account and transaction security, ensure the proper functioning of essential website features, and remember necessary user settings and preferences.

You may manage the use of cookies and similar technologies through your browser or device settings. However, disabling certain essential technologies may affect the normal operation of the website or application. We will not use these technologies for purposes not disclosed in this Privacy Policy without the necessary lawful authorisation. Where cross-app tracking is involved, we will comply with applicable Apple privacy requirements and respect your permission choices.

Rupiva Credit may update or revise this Privacy Policy from time to time to reflect business developments, technological changes, or amendments to applicable laws and regulations. If any changes materially affect your rights or interests relating to personal information, we will provide appropriate advance notice through platform announcements, push notifications, SMS, email, or other suitable communication channels. Such notices will explain the key changes to the Privacy Policy.

Where renewed consent is legally required for certain data processing activities, we will provide the necessary information and obtain the required authorisation before commencing such processing. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The updated Privacy Policy will indicate the relevant revision date or effective date.

All intellectual property rights associated with the Rupiva Credit platform and its related services, including but not limited to its website, mobile application, brand identity, user interface designs, source code, databases, technical solutions, and other related materials, belong to NIVANA FINTECH PRIVATE LIMITED or their respective lawful owners. These rights include applicable trademarks, patents, copyrights, trade secrets, and other legally protected intellectual property.

Without prior express written authorisation from us or the relevant rights holder, no individual or organisation may copy, reproduce, modify, distribute, reverse-engineer, commercially exploit, or otherwise use such materials without permission. You may access and use Rupiva Credit services only for lawful purposes and in accordance with the applicable Terms of Service and relevant laws.

We respect the intellectual property rights of third parties and expect users to do the same. If you believe that any content on the Platform infringes your lawful rights, please contact us using the contact details provided in this Privacy Policy.

Rupiva Credit is a digital loan application service platform designed for users in India, with the aim of providing a secure, convenient, and transparent digital lending experience. Through the application, users can complete loan application forms online, undergo necessary identity verification, view available loan product information, track application status, and access relevant account management and repayment services.

Depending on the features available in the application, users may also review loan terms and conditions, access and manage electronic loan documents, view repayment schedules and related information, receive necessary loan repayment reminders, and track loan application and repayment status. These features are intended to help users better understand and manage their loan applications and repayment obligations.

Rupiva Credit is operated by NIVANA FINTECH PRIVATE LIMITED in its capacity as a Lending Service Provider (LSP). Loan approval, sanctioned loan amounts, interest rates, loan tenure, and disbursement of funds are determined and managed by our partner lending institution, Allen's Housing & Finance Limited. We implement appropriate technical and information security measures to protect users' account information and personal data submitted while accessing our services.

Rupiva Credit is committed to protecting the privacy and personal information of minors. Our loan application services are intended only for individuals who are at least 18 years old and meet the applicable legal age requirements for borrowing. We do not knowingly provide loan application services to minors or intentionally collect their personal information.

If you are a parent or legal guardian and become aware that a minor has provided personal information to us without appropriate authorisation, please contact us promptly. After verifying the circumstances, we will take appropriate action, including processing or deleting the relevant information, in accordance with applicable laws and regulatory requirements.

Where processing a minor's personal information is legally permitted and necessary for a specific lawful purpose, we will strictly follow the principle of necessity and obtain verifiable consent from a parent or legal guardian, as required by applicable laws. We encourage parents and guardians to guide minors in using online services safely and responsibly.

We comply with applicable laws, regulations, and data protection requirements when storing and managing your personal information. We implement appropriate technical and organisational safeguards, including encryption, access controls, and other necessary security measures, to protect personal data against unauthorised access, disclosure, alteration, or loss. Data relating to digital lending activities will be stored and managed in accordance with applicable RBI regulatory requirements.

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy and comply with applicable legal obligations. When the relevant processing purposes have been fulfilled, the applicable retention period has expired, or you lawfully request deletion and no legal retention obligation applies, we will take appropriate steps to securely delete or anonymise the information.

Where cross-border data transfers are legally permitted, we will comply with applicable laws and regulatory requirements. We will ensure that relevant data recipients implement appropriate safeguards and obtain your consent in advance where required by law.

At Rupiva Credit, you may exercise your rights to access, correct, or delete your personal information in accordance with applicable laws. You may contact us to request information about the personal data we hold about you and, where permitted by law, obtain relevant information to verify its accuracy.

You also have the right to request the deletion of your personal information and associated account, subject to applicable legal requirements. For valid deletion requests, we will carry out the necessary identity verification and process the request in accordance with applicable laws and established procedures. The Rupiva Credit iOS application provides an in-app account deletion option, allowing users to initiate the account deletion process directly through the application. This process is intended for account deletion rather than merely logging out or temporarily deactivating an account.

You may also contact us at case@nivanafintech.com to request access to, correction of, or deletion of your personal information, or to enquire about the status of your request. To protect your personal information, we may request necessary identity verification details to confirm that the request has been submitted by the account holder or an authorised representative.

Please note that certain records, including KYC records, loan records, transaction records, anti-money laundering records, and other regulatory information, may be subject to mandatory legal retention requirements. Such information may need to be retained for the applicable statutory period, even after an account deletion request has been submitted. Once the required retention period has expired, we will delete or anonymise the relevant information in accordance with applicable laws. We respect your rights relating to personal information and will handle all valid requests in accordance with applicable legal requirements.

We implement a range of technical and organisational security measures to protect your personal information. These measures include using encryption technologies to protect data during transmission and storage, deploying firewalls and other security systems to prevent cyberattacks, implementing role-based access controls and operational audits, and establishing internal information security management policies and procedures.

We also provide appropriate information security training to relevant employees and require third-party service providers authorised to access personal information to comply with suitable confidentiality and security obligations.

In addition, we maintain an information security incident response mechanism. In the event of a personal data security incident, we will promptly take appropriate remedial measures and fulfil applicable notification and reporting obligations in accordance with relevant laws and regulatory requirements. We also encourage you to protect your account information, passwords, and verification credentials to help maintain the security of your account and personal data.

When using Rupiva Credit services, you have the right to receive important information relating to your loan application, including applicable loan terms, interest rates, charges, and other relevant conditions. Your personal information and privacy will be protected in accordance with applicable laws and this Privacy Policy. We will not share or disclose your personal information to unrelated third parties without a lawful basis or the necessary authorisation. You also have the right to receive appropriate customer support and submit enquiries, feedback, or suggestions regarding our services.

As a user, you are responsible for providing accurate, complete, and truthful personal and financial information to enable our partner lending institution to assess your loan application in accordance with applicable laws. You are also expected to comply with the Platform's Terms of Service, applicable loan agreements, and relevant legal requirements. You must take reasonable precautions to protect your account information and passwords against unauthorised access or misuse.

We and our users share responsibility for maintaining a secure, lawful, and reliable digital lending environment.

We collect personal information primarily to facilitate loan applications and related services and, where necessary, to improve the user experience. We do not sell, share, or disclose your personal information to third parties unrelated to the lending services.

Where genuinely necessary and permitted by applicable laws, we may share relevant information with our partner lending institution involved in your loan application, relevant financial institutions, third-party service providers providing technical support, and affiliated companies and authorised internal personnel to the extent necessary for performing their responsibilities. We will conduct appropriate compliance assessments of relevant data recipients and require them to process personal information only for agreed purposes, subject to confidentiality obligations and appropriate security standards.

For the purposes of this Privacy Policy, "unrelated third parties" refers to external individuals or organisations that have no direct business relationship with your loan application or related services and have no other lawful basis for processing the relevant information.

To improve service quality, we may also integrate third-party analytics tools. Such tools may process necessary information, including device identifiers, application usage information, or other applicable data, for advertising performance measurement, app installation attribution, and product optimisation. Where cross-app tracking is involved, we will obtain the necessary authorisation in accordance with Apple's App Tracking Transparency (ATT) requirements and comply with applicable data protection laws.

AppsFlyer (https://www.appsflyer.com/)

Rupiva Credit may use AppsFlyer to perform app installation attribution, measure advertising effectiveness, and conduct related data analysis. Depending on the actual SDK configuration and permissions granted by users, AppsFlyer may process necessary device identification information, app installation data, and in-app event data. Where the processing involves IDFA or cross-app tracking, we will obtain the necessary authorisation before conducting such activities.

Firebase Analytics (https://firebase.google.com/support/privacy)

Rupiva Credit may use Firebase Analytics to analyse application usage, evaluate product functionality, and improve the user experience. Where applicable and subject to the necessary authorisation, relevant data may also be used for advertising performance analysis. We will manage such data processing activities in accordance with the actual SDK configuration, user permissions, and applicable legal requirements.

We remain committed to protecting user privacy and data security. All relevant information-sharing activities will follow the principle of data minimisation and comply with applicable laws and regulations.

If you have any questions, concerns, feedback, or suggestions regarding this Privacy Policy, the processing of your personal information by Rupiva Credit, or your rights relating to data access, correction, deletion, or other matters, please contact us using the details below. We will review and process your requests in accordance with applicable laws and relevant procedures.

Contact Email

case@nivanafintech.com

Customer Support Hours

Monday to Friday, 9:00 AM to 5:30 PM

Contact Address

4/F Unit No-1,2 Kalpataru, Prime P/N D-3, Road-16, Wagle I.E., Thane, Thane-400604, Maharashtra, India