Last Updated: February 3, 2026

FLoan (hereinafter referred to as "we" or "FLoan") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information, as well as your rights regarding your personal information. Please read this Privacy Policy carefully to understand our privacy practices.

1. Scope of Application

This Privacy Policy applies to your use of our cash loan services in Zambia through the FLoan mobile application (hereinafter referred to as "this Application"). We comply with relevant laws and regulations in Zambia, including but not limited to the Zambian Data Protection Act.

2. Information We Collect

2.1 Information You Provide

When using this Application, you may need to provide the following information:

  • Basic Personal Information: Name, ID card number, mobile phone number, email address, etc.;
  • Account Information: Receiving account details;
  • Transaction Information: Loan application records, repayment records, etc.;
  • Emergency Contact Information: Names and contact details of two emergency contacts.

2.2 Information We Automatically Collect

When using this Application, we collect the following information:

Application List

  • With your explicit consent, and solely to support fraud prevention, risk control, and account security, FLoan may collect limited application-related information from your device on a restricted and event-based basis. This information includes the application name, whether the app is pre-installed, package identifier, application version, installation time, and last update time, only for applications that match predefined security-related criteria.
  • This collection follows the principle of data minimization and does not involve accessing application content, monitoring user activity, or continuously scanning your device. FLoan does not monitor how you use other apps. The collected information is used exclusively for security, fraud prevention, and risk management purposes, and is not used for advertising, marketing, analytics, or user profiling, nor is it shared with any third party.
  • You may choose whether to grant this access and may revoke your consent at any time through your device settings or within the App.
  • All collected data is securely transmitted and stored on FLoan’s servers located at https://zm.floan.online , using industry-standard security and encryption measures.

Emergency Contact Information

  • FLoan only collects information of two (2) emergency contacts, which is manually entered by the user, solely for identity verification, risk management, and anti-fraud purposes. The FLoan App does not access, read, or collect any data from your device address book or contact list. Emergency contact information is securely transmitted and stored on FLoan’s servers located at https://zm.floan.online, using industry-standard security measures. Emergency contact information will not be used for marketing purposes or harassment, and users may modify or delete their emergency contact information at any time.

Use of Device Identifiers

  • FLoan may generate or access persistent device identifiers to uniquely recognize a device for the purpose of fraud prevention, security monitoring, and risk control. These identifiers help us detect repeated abuse, prevent multiple account misuse, and ensure the integrity of our financial services.
  • Such identifiers are used exclusively within the FLoan App, are not combined with third-party data, and are not used for cross-app tracking or advertising purposes. We do not sell, rent, or share device identifiers with any external parties. Access to these identifiers is strictly limited to authorized systems and protected by appropriate technical and organizational safeguards.

2.3 Permission Explanations

This Application collects the following device permissions:

SMS Permission

Purpose of SMS Access:
  • With your explicit consent, FLoan may access specific SMS messages on your device solely for fraud prevention, risk assessment, and account security purposes. Only SMS messages containing financial-related keywords (e.g., transaction notifications, repayment reminders) are processed. FLoan does not analyze or collect all SMS messages on your device, and SMS data is not used for advertising, marketing, user profiling, or contacting third parties.
Your Choice:
  • You have the right to decline SMS access. Refusing this access will not prevent you from applying for loans through the App, and your use of the app will not be affected.
Data Security and Retention:
  • Any SMS data accessed by FLoan will be encrypted and securely transmitted to https://zm.floan.online for analysis. After processing, SMS data will be permanently deleted, either immediately or within 7 days upon your deletion request. FLoan does not share SMS data with any third party.
  • FLoan will only access SMS data after you explicitly grant the READ_SMS permission. When the App is closed or not in use, FLoan does not read or collect SMS data.

Location Permission

  • With your explicit consent, FLoan may collect approximate location information derived from network-based sources only while you are actively using the App, solely for fraud prevention, risk management, and account security purposes. Location data is collected on a limited and event-based basis, subject to minimum time and distance thresholds, and is not continuously collected. FLoan does not collect precise GPS location data, does not monitor your real-time movements, and does not access location information when the App is closed or running in the background.
  • You may choose whether to grant location access. You can revoke this permission at any time through your device settings or within the App, and you may request deletion of any stored location data.
  • Location information is not used for advertising, marketing, analytics, or user profiling, and is not shared with any third party. All location data is securely transmitted and stored on FLoan’s servers at https://zm.floan.online , using industry-standard security and encryption measures.

Camera Permission

  • FLoan requests access to your device camera only when you choose to take photos for identity verification and loan application purposes (e.g., capturing government-issued ID documents) in accordance with KYC (Know Your Customer) requirements. Camera access is user-initiated; FLoan does not record video, take photos in the background, or access the camera when the App is not in use. Images collected via the camera are used solely for identity verification, compliance, and fraud prevention, and are not used for advertising, marketing, or user profiling. All images are securely transmitted and stored using industry-standard security measures, and you may request deletion of such data per this Privacy Policy.

2.4 Data Collection & Synchronization

To ensure normal service operation and risk control, this application may periodically synchronize necessary data to the following server endpoint while running in the background:

  • /pan8/amass/hakodate

Content synchronized: Only essential technical data such as device identifiers and app operation status are included, excluding personally identifiable information.

Frequency: Synchronization occurs only when the device is connected to Wi-Fi, no more than 3 times per day.

Purpose: This synchronization is used for anti-fraud analysis and service stability monitoring, and all data is anonymized.

User control: You may disable the app’s background refresh permission in system settings, though this may affect certain security features.

3. How We Use Your Information

The information we collect is used for the following purposes:

  • To provide and maintain cash loan services through this Application;
  • To process your loan applications and transactions;
  • To manage your account and repayment plans;
  • To communicate with you, including sending repayment reminders and service notifications;
  • To improve the functionality and user experience of this Application;
  • To use SMS information and application lists (by filtering keyword patterns) for risk assessment and credit review;
  • To use approximate location information for service area confirmation;
  • To use camera functions for identity verification;
  • To contact your emergency contacts when necessary.

4. Information Sharing and Disclosure

We will not sell, rent, or share your personal information with third parties, except:

  • With your explicit consent;
  • To provide services you request and cooperate with third parties;
  • To comply with relevant laws and regulations in Zambia or respond to lawful requests from government authorities;
  • To protect our legitimate interests (including but not limited to legal actions).

5. Information Storage and Security

5.1 Information Storage

We will store your personal information for the period required by law or for the period necessary to achieve the purposes described in this Privacy Policy. In accordance with Zambian laws and regulations, we will take appropriate measures to ensure secure storage of your personal information.

5.2 Information Security

We implement various security measures to protect your personal information, including but not limited to:

  • Encrypting storage and transmission of personal information;
  • Restricting access to personal information;
  • Conducting regular security assessments and updates.
  • To ensure the security of data transmission, this application uses obfuscation techniques (such as XOR operations) for certain sensitive information to increase the difficulty of direct reading by third parties. Please note that this technique is not standard encryption and cannot provide the same level of security as encryption algorithms.

6.Third-Party Services & Data Sharing

To optimize product experience, analyze usage, measure advertising effectiveness, and ensure app stability, we integrate the following third-party services. These providers may collect certain device information or usage data in accordance with their privacy policies:

1.AppsFlyer

  • Purpose: Attribution analysis, ad performance measurement, fraud prevention.
  • Information collected: Device identifiers (e.g., Advertising ID), IP address, app installation and interaction events, device model, OS version.
  • Privacy Policy: https://www.appsflyer.com/legal/privacy-policy/

2.Facebook (Meta)

  • Purpose: Ad targeting optimization, audience analytics, conversion tracking.
  • Information collected: Device information, ad interaction data, in-app events (e.g., registration, purchase), Facebook user ID (if logged in).
  • Privacy Policy: https://www.facebook.com/privacy/policy/

3.Google Firebase

  • Purpose: App stability monitoring (crash reporting), performance analytics, user behavior tracking, remote configuration.
  • Information collected: Device identifiers, usage data, crash logs, performance metrics, custom events.
  • Privacy Policy: https://policies.google.com/privacy

Data Note: The above information is generally device-level or anonymized and does not directly include personally identifiable information (such as name, phone number). Some data may be shared among providers for ad targeting and optimization purposes.

User Controls:

  • You may reset your Advertising ID in device settings to limit tracking.
  • Manage ad preferences via https://www.facebook.com/adpreferences .
  • Control personalized ads via https://adssettings.google.com/ .
  • To request access to or deletion of your data, contact us at [support@floan.co].

7. Your Rights

Under Zambian laws and regulations, you have the following rights regarding your personal information:

  • Right of Access: To view and obtain your personal information;
  • Right to Rectification: To correct or update your personal information;
  • Right to Erasure: To request deletion of your personal information;
  • Right to Withdraw Consent: To withdraw consent for the processing of your personal information;
  • Right to Data Portability: To request your personal information in a structured, commonly used electronic format;
  • Right to Lodge a Complaint: To file a complaint with the relevant data protection authority.

To exercise these rights, please contact us via the methods provided in Section 8.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When updated, we will post the revised policy in this Application and update the "Last Updated" date. Please review this Privacy Policy periodically to stay informed of changes to our privacy practices.

9. Contact Information

If you have questions, suggestions about this Privacy Policy, or need to exercise your rights, please contact us via:

  • Email: support@floan.co
  • Address: Plot 307, Lilayi Estate, Lusaka Province, Zambia
  • Phone: +260573402824

10. Applicable Law

This Privacy Policy is governed by relevant laws and regulations in Zambia. Any disputes shall first be resolved through friendly negotiation; if negotiation fails, they shall be submitted to the Financial Consumer Protection Department of the Bank of Zambia (BoZ) for resolution.

Back to top