Last Updated: August 11, 2025
Important Notice: Please read this Privacy Policy carefully before using the "KammaLoan" mobile application (hereinafter referred to as "the App") and related services. This Policy explains how we collect, use, store, process, and protect your personal data. By using the App, you agree to the practices described herein. If you do not agree with any term of this Policy, please do not use the App.
The App is operated and technically supported by KAMMA SOFTWARE INNOVATIONS PRIVATE LIMITED (hereinafter referred to as "we" or the "service provider"). All loan products offered within the App are provided by AROHAN FINANCIAL SERVICES LIMITED, a Non-Banking Financial Company (NBFC) certified by the Reserve Bank of India (RBI) (hereinafter referred to as the "loan provider"). The loan provider is responsible for reviewing your loan application, disbursing loans, and recovering repayments.
We highly value the security of your personal data and your privacy. We strictly comply with applicable laws and regulations in India and are committed to processing your personal information in a lawful, fair, and transparent manner.
We and the loan provider collect personal data that you provide directly to us, as well as data generated during the provision of services to you. This includes:
- Identity information: such as name, gender, marital status, occupation, phone number, Permanent Account Number (PAN), Aadhaar number, etc.
- Financial information: including personal income and expenses, household financial situation, payday, etc.
- Device and technical information: when you use the App, we may collect your device ID, IP address, operating system, and other related data.
- Approximate location information: with your explicit consent, we may access your general location to ensure services are limited to users in India and comply with geographical restrictions.
- Camera permission: images captured via camera (for KYC verification). We may request camera access to photograph identification documents or perform facial recognition to ensure the authenticity and accuracy of identity information.
- SMS permission: to assess your loan eligibility and creditworthiness, we may request access to your SMS. Please note that we only filter financial-related information for credit assessment and approval decisions to enhance service accuracy, reduce default risks, and ensure sound business operations.
We and the loan provider process your personal data only to the extent necessary to provide services and fulfill legal obligations, including:
- Providing core loan services: processing your loan application, conducting credit assessments and approvals, disbursing loans, managing your loan account, processing repayments, and providing customer support.
- Identity verification and fraud prevention: verifying your identity, address, and other provided information to prevent, detect, and investigate fraud, security threats, and other illegal activities.
- Service improvement and communication: analyzing data to enhance our products, services, and technologies; communicating with you on important matters related to your loan, such as repayment reminders and policy changes.
- Compliance with legal obligations: adhering to regulatory guidelines issued by the Reserve Bank of India (RBI) and other applicable Indian laws, such as anti-money laundering regulations and the DPDPA.
We share your personal data only under the following circumstances:
- With the loan provider (AROHAN FINANCIAL SERVICES LIMITED): to complete the loan approval, disbursement, and management process, we must share necessary information with AROHAN FINANCIAL SERVICES LIMITED.
- With service providers: we may engage third-party service providers (e.g., data storage, cloud services, analytics providers) to assist in our business operations. These providers will only access your data to the extent necessary to perform their services and are contractually bound to protect your data.
- To comply with legal obligations: we may disclose your information if required by law or in response to valid requests from government, judicial, or other competent authorities.
- To protect legitimate interests: we may disclose information when necessary to enforce our terms and conditions or protect the rights, property, or safety of our company, other users, or the public.
We do not sell your personal data to any third party for marketing purposes.
- Data storage: we will store your personal data for the period required by Indian law. In accordance with the DPDPA and related rules, some of your personal data may be stored on servers located within India.
- Cross-border transfer: Indian law permits the transfer of personal data to certain other countries under specific conditions. Any cross-border data transfer will strictly comply with the provisions of Indian law.
Under the DPDPA, you have the following rights regarding your personal data:
- Right to access: you have the right to request access to the personal data we hold about you.
- Right to correction and erasure: you have the right to request correction of inaccurate or incomplete personal data and, under specific conditions, request erasure of data.
- Right to withdraw consent: you have the right to withdraw consent previously given for the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to grievance redressal: if you have any concerns about how we process your data, you have the right to lodge a complaint with the Data Protection Board of India.
You may exercise these rights by contacting us using the details provided at the end of this Policy.
We and the loan provider are committed to protecting your personal data. We have implemented a range of reasonable technical and organizational security measures to prevent unauthorized access, disclosure, alteration, or destruction of your personal data. These measures include encryption, access controls, security audit logs, and regular reviews of our information security practices.
The App may use cookies and similar technologies to collect information about your device and usage to enhance user experience, analyze App traffic, and improve functionality. You can manage your preferences in your device settings.
Minors are strictly prohibited from using this App. We do not knowingly or intentionally collect any personal data from minors. If you are under the age of 18 as defined under relevant Indian laws, you may not register or use any features of this App. If we discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such data.
We may update this Privacy Policy from time to time to reflect changes in laws, technologies, or business practices. Any significant changes will be communicated to you via the App or email (where feasible). The revised version will indicate the new "Last Updated" date and take effect immediately upon publication. We recommend that you review this Policy periodically to stay informed about how we protect your information.
If you have any questions, comments, or requests regarding this Privacy Policy or our data protection practices, please contact us using the following details:
- Customer Service Email Address: help@kammasoftware.com
- Complaints Email Address: info@kammasoftware.com