1. Who we are
KasaLoan is a digital credit brand operated by CyberBrains Ltd. In this notice, “KasaLoan”, “CyberBrains”, “we”, “us”, and “our” refer to the party responsible for the KasaLoan service and the processing described here.
Before publication, this section must be completed with the exact registered company name, company registration number, registered office, data protection registration details, and any applicable licensed lender or partner relationship.
2. Information we may collect
Account and identity information
- Mobile number, one-time verification codes, account identifiers, and authentication records.
- Name, date of birth, gender, residential information, Ghana Card details, and other KYC information.
- Images of identity documents and a selfie submitted for identity and image-quality checks.
Financial and application information
- Employment, income range, education, marital status, emergency contact information, and information supplied in a credit application.
- Mobile money or bank account details used for disbursement and repayment.
- Applications, offers, agreements, payment transactions, repayment history, arrears, and support records.
Device and alternative data
- Device identifiers, operating system, app version, network information, diagnostics, security signals, and app interaction events.
- Approximate location where permission is granted and needed for an explained purpose.
- Limited installed-app signals and selected financial SMS data where the applicable KasaLoan version requests them, only after a prominent explanation and permission.
KasaLoan should not collect your full contact list. Emergency contacts are information that you actively provide for the stated purpose.
3. How we may use information
- Create and secure your account, verify your identity, and prevent impersonation or fraud.
- Assess eligibility and credit risk, provide an application outcome, and administer an agreement.
- Disburse funds, process repayments, reconcile transactions, and issue transaction notices.
- Provide customer support, investigate complaints, and contact you about an application or agreement.
- Monitor service quality, diagnose errors, protect our systems, and improve the user experience.
- Meet legal, regulatory, audit, accounting, credit reporting, and anti-money-laundering obligations.
The final notice must state the lawful basis for each purpose after Ghana legal review.
5. How long information is kept
We retain information only for as long as it is needed for the purposes described in this notice, to administer an active agreement, and to meet legal, regulatory, dispute, fraud-prevention, and accounting requirements. Different records may have different retention periods.
The production version must include the approved retention schedule and the circumstances in which information is securely deleted or anonymised.
6. Your choices and rights
Subject to applicable law, you may ask to access or correct your information, withdraw a permission, object to or restrict certain processing, receive information about a decision, make a complaint, or request account deletion.
Account deletion may not require us to erase records that must lawfully be retained for an active agreement, regulatory reporting, fraud prevention, or a legal claim. Visit the account deletion page for the request process.
7. Security
We use organisational and technical safeguards designed to protect personal information, including access controls, encrypted transfer, restricted administrative access, monitoring, and backup procedures. No method of electronic storage or transmission can be guaranteed to be completely secure.
8. Contact and complaints
For a privacy question or complaint, email [email protected].
The production notice must add a privacy-specific contact, support phone number, registered office, response timeline, escalation channel, and Data Protection Commission information where applicable.