Privacy Policy

01Data We Collect

Depending on the services you use and the permissions you grant, we may collect:

• Identity and contact data: name, date of birth, gender, phone number, email address and residential address.
• Financial and loan-application data: bank-account details, BVN, income or employment information, loan application details, repayment history and transaction information needed to assess, provide and service a loan.
• Usage data: login events, application progress, support interactions and consent records.
• Device data: device model, automatically collected when you use the app to support app compatibility, security and fraud prevention.
• Information from permitted third parties: identity-verification, payment, banking, credit-reference, fraud-prevention or regulatory partners where permitted by law and necessary for the stated purpose.

We do not access, upload or collect your device address book or contacts. If you choose to provide another person's details in a form, we process only the details you enter for the stated purpose.

02Why We Use Your Data and Our Lawful Bases

We process personal data to:

• verify identity, assess eligibility and make lending decisions;
• prevent fraud, maintain security and comply with legal obligations;
• provide, administer and collect repayments for loan services;
• communicate about your application, account, repayments and support;
• improve app reliability and customer experience; and
• establish, exercise or defend legal claims.

Depending on the processing activity, we rely on one or more lawful bases, including performance of our contract with you, compliance with a legal obligation, our legitimate interests such as fraud prevention and service security, your consent, or another basis permitted by applicable law. Where consent is required, we will obtain it separately and you may withdraw it at any time.

03Automated Decisions

We may use automated tools and risk models to assess loan applications and detect fraud. These tools may use identity, application, financial, device-model and transaction information.

04How We Share Data

We share personal data only where necessary and lawful, including with:

• identity-verification, payment, banking, credit-reference and fraud-prevention providers;
• cloud hosting, analytics, customer-support ticketing, security and technology providers acting on our instructions under written data-processing agreements;
• professional advisers, auditors and insurers;
• regulators, law-enforcement agencies, courts or other authorities where required by law; and
• a buyer, successor or affiliate in connection with a permitted corporate transaction.

Our service providers must provide the same or equivalent level of protection described in this Privacy Policy and may use personal data only for authorised purposes. We do not sell personal data.

We do not track your activity across apps or websites owned by other companies.

05International Transfers

If we transfer personal data outside Nigeria, we will do so only in accordance with Sections 41-43 of the Nigeria Data Protection Act 2023 and the safeguards applicable to the transfer. We will take reasonable steps to ensure that recipients protect personal data appropriately.

06Data Retention

We retain personal data only for as long as necessary to provide our services, meet legal, regulatory, accounting, fraud-prevention and record-keeping obligations, resolve disputes and enforce agreements.

• Loan application and account data: up to 7 years after loan closure or final settlement.
• Support logs and fraud-prevention records: up to 5 years.

We may retain information for longer where required by applicable law or where necessary to establish, exercise or defend legal claims. When retention is no longer required, we delete, anonymise or securely isolate the data in accordance with our retention procedures.

07Your Rights and Choices

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of processing of your personal data. You may object to certain processing, including direct marketing; withdraw consent where processing is based on consent; request human review of an eligible automated decision; and exercise any data-portability right available under applicable law.

You may initiate a request to delete your Uni Loan account in the app from My > Account & App > Account deletion request, or email dpo@soarglobaltech.com with the subject "Account Deletion Request". We will verify your identity before processing your request. Certain data may be retained to satisfy legal, tax and regulatory obligations even after account deletion.

You may also lodge a complaint with the Nigeria Data Protection Commission or another competent authority.

08Permissions

We do not request access to your device address book, SMS messages, contacts, call logs, photos or gallery. If we introduce a feature that requires a device permission, we will explain the purpose before requesting it. You may manage any granted permission in your device settings, and we will not require unnecessary permissions to use the core loan service.

09Security

We use reasonable technical, organisational and administrative safeguards to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9.1 Personal Data Breach

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will comply with applicable breach-notification obligations, including notifying the Nigeria Data Protection Commission within 72 hours of becoming aware of the breach where required by law. Where a breach is likely to result in a high risk to affected users, we will also notify them in plain and clear language.

10Children

Uni Loan is not intended for persons under 18 years old. We do not knowingly collect personal data from children. If we become aware that a person under 18 has used the service, we will take reasonable steps to restrict or terminate the account, cancel any pending application and prevent further disbursement. We will review and handle related personal data in accordance with this Privacy Policy and applicable Nigerian law. If you believe a child has provided personal data to us, contact us at dpo@soarglobaltech.com.

11Changes to This Policy

We may update this Privacy Policy when our practices or legal requirements change. We will post the updated version in the app and update the "Last updated" date. Where required, we will seek renewed consent.

12Contact Us