Aoc Loan Android Privacy Policy

1. About this Policy

This Privacy Policy explains how MAXSERVE SUPPORT LTD handles information in connection with the Aoc Loan Android application and its lending services in Nigeria. It applies when you register, apply for a loan, use App features, or communicate with us.

By continuing to use Aoc Loan, you acknowledge this Policy. We process data in accordance with the Nigeria Data Protection Act 2023, other applicable Nigerian requirements, and relevant Android app-distribution privacy requirements where applicable.

Reading this Policy

The explanations below follow the information involved in your relationship with Aoc Loan, from registration and verification to repayment, support, and account closure. They describe both details you submit and technical information generated when the App connects to our services. The information required for each interaction depends on the feature you use and the purpose described here.

This Policy covers privacy matters. Loan terms and repayment information are presented separately. Where user permission or consent is required, we request it separately for the stated purpose and scope of access.

2. Company Details

Product: Aoc Loan
Company name: MAXSERVE SUPPORT LTD
Address: No. 33, Humani Street Agege, Lagos,100005 Nigeria
Email: maxserveng@max-serve.com

Use these contact details for questions about the handling of your information, requests to exercise privacy rights, or concerns about an account deletion request. State that your enquiry relates to Aoc Loan and briefly identify the issue so that we can understand the records or activity involved.

For your protection, do not include passwords, complete bank credentials, or unnecessary identity documents in an initial email. Provide enough account information for us to locate your request. If further verification is necessary, we will explain what is needed and how it should be provided. We use information supplied for a privacy enquiry to identify the requester and respond to that enquiry.

3. Information We Collect

Information you provide

Registration, identity verification, and lending may involve your name, phone number, email address, date of birth, gender, residential address, bank name and account number, BVN, and a selfie or facial photograph. We also receive information you submit with an application, feedback, or a support request.

Android device and connection information

We and the service providers described in Section 6 may process the device manufacturer and model, Android version and build, language, timezone, display characteristics, IP address, carrier, network type, and connection status. Identifiers may include Android ID and the Android advertising ID, also called AAID or GAID, where available and permitted. IMEI or a device serial number is processed only if lawfully available through supported Android interfaces and applicable access rights; access to these identifiers must comply with Android restrictions and applicable permission requirements.

Permission-related information

Subject to the limits in Section 4, information may include approximate location, relevant financial SMS and verification codes, the installed-application list accessible to the App, the device phone number, a selected referee or emergency-contact entry, and photographs you capture or choose to submit. Each category is processed only for its stated purpose and within the applicable consent requirements and access limits described in Section 4.

App activity and messaging information

We may record your interactions within Aoc Loan, such as feature use and application events, for service operation, risk assessment, fraud prevention, and troubleshooting. App usage information covers only your interactions within Aoc Loan and excludes activity records from other apps. Push delivery may involve the installation identifiers and registration tokens described in Section 6, together with the content of the service messages we send.

Loan relationship information

We keep records of applications, offers, loan amounts, repayment history, balances, interest, due dates, defaults, disputes, and related customer-service communications. Information supplied during a loan relationship helps us administer the agreement and respond to enquiries about it.

Relevance and accuracy

Account details distinguish you from other applicants. Bank information helps route approved funds and match repayments, while BVN and facial images support identity checks. Please provide accurate information and tell us when an important detail changes. Technical information helps us assess whether the App is functioning correctly and whether activity indicates a security or lending risk.

When submitting feedback, include only material relevant to the issue. A photograph provided for feedback should not expose unrelated information about another person. Contact information is limited to the entries you select or submit. Technical identifiers and SDK information are used only for the service purposes described in this Policy, with access limited to the data needed for those purposes.

4. Android Permissions and Device Access

Android access depends on your operating-system version, device controls, and applicable app-distribution requirements. Some functions require a system prompt, while others use access provided by Android without a runtime prompt. Where consent is required, we explain the purpose and obtain it before access. All access must comply with Android system restrictions and applicable distribution-platform rules.

Approximate location

With permission, we may use coarse location to check your declared address, detect fraud, assess regional service availability, and meet applicable obligations. We use only approximate location information, without collecting precise GPS coordinates or continuously tracking your real-time location.

Network data

Internet connectivity and network-state information enable the App to communicate with our services. IP address, carrier, network type, and connection status may be used for secure operation, fraud detection, and performance troubleshooting. Network data processing is limited to the connection information listed above. SMS access is handled separately under the purposes, authorisation requirements, and limits described below.

SMS and verification codes

Only where permitted by Android and applicable distribution rules, and after your explicit authorisation, SMS access may be used to identify finance-related messages, such as bank transaction alerts and loan notifications, for credit assessment and fraud prevention. It may also extract verification codes from relevant messages sent by banks or financial institutions to support identity verification and disbursement checks. Access is limited to these stated financial and verification purposes; it is not used to collect personal conversations, promotional messages, social messages, or other unrelated SMS. Any verification method remains subject to the access actually supported and permitted on your device.

Installed applications and App usage

Where access is permitted, we may process the installed-application list that Android makes available to Aoc Loan, together with usage information generated within Aoc Loan. These support credit and risk assessment, fraud detection, compatibility checks, and improvements to assessment processes. We access the installed-application list only within the scope permitted by Android.

Device phone number

If the number is available through a permitted Android interface and you authorise any required access, we may obtain the device phone number to help complete registration, verify the number used for SMS verification, and associate the account with the device. This access is limited to the device phone number and excludes call content and call history.

Camera and selected photos

With the relevant permission or photo-selection action, we may capture a facial image for liveness and identity verification or receive pictures you choose to submit through in-App feedback. We process only the images you capture or select for these functions and do not copy the full photo library or access unrelated media.

Selected contacts

Where permitted, you may select and authorise a referee or emergency-contact entry, or voluntarily provide a referral contact for the relevant feature. We collect and use only the contact entry you choose for the stated purpose. The rest of your address book is excluded from collection and upload.

Android advertising identifier

Where available and permitted, AAID or GAID may support campaign measurement, relevant in-App messages, and fraud prevention. We obtain consent where required and respect applicable advertising controls. You can manage or reset the advertising identifier through the controls available on your Android device.

Message notifications (push)

Aoc Loan may display account updates, loan status information, repayment reminders, and service notices through push notifications. On Android versions requiring notification permission, we request that permission before displaying notifications. Alerts, sounds, badges, channels, and previews depend on your device and notification settings. You can manage or disable notifications in Android Settings. Marketing notifications require any separate consent applicable to marketing.

Managing access

You can review or revoke permissions through Android Settings, and use feature-specific selection controls where available. We collect information in accordance with your current access choices. Refusing or withdrawing access may affect the function that relies on it. We respect your choice and do not use an unauthorised alternative route to continue collecting the same data. Camera verification, photo submission, contacts selection, SMS access, and notification delivery are separate activities.

Revoking a permission stops future access through that permission. Previously submitted information remains subject to the retention periods and deletion procedures described below. To request deletion, contact us or use the account deletion function.

5. How We Use Information

• To set up and manage your account and loan agreement.
• To complete identity verification, KYC, and anti-money-laundering checks.
• To process disbursements, repayments, reminders, and support requests.
• To prevent fraud, protect systems, and assess and manage lending risk, including through relevant financial SMS, permitted application information, and device data obtained within the access limits described in Section 4.
• To test and improve the App, services, and credit assessment processes.
• To send marketing communications where an appropriate consent applies.
• To meet legal, regulatory, audit, and record-retention duties.

Our legal grounds include consent, contractual necessity, legal obligations, and legitimate interests such as security, fraud prevention, risk management, and service improvement, where these interests are not overridden by your rights and freedoms.

How the purposes relate to legal grounds

Contractual necessity covers information needed to deliver the account and loan services you request. A legal obligation may require us to verify identity or keep relevant lending records even after a particular interaction ends. Where we rely on consent for optional processing, you can withdraw that consent without affecting processing that was lawful before withdrawal.

Legitimate interests are considered in relation to the particular activity, including whether the use is necessary and its effect on your rights. You may raise an objection using the contact details in this Policy. Loan administration and marketing are handled separately. We obtain any required marketing consent for the specific promotional purposes explained when we request it.

If a proposed use differs materially from the purposes explained here, we will provide the information required for that use and obtain any additional consent required by law.

6. Sharing and Service Providers

We may share only necessary data with identity-verification, cloud-storage, message-delivery, analytics, attribution, and other technical providers; banks and payment providers; credit bureaus where permitted; and regulators or authorities where lawfully required. A successor entity may receive information during a merger, acquisition, financing, or asset transfer, with notice where required.

Dyna.Ai processes facial photos and device information to support liveness detection, facial matching, and KYC.

AppsFlyer supports marketing attribution, campaign analytics, and fraud prevention; where permitted, it may process AAID or GAID, installation source, in-App interaction data, and events.

AWS (Amazon Web Services) securely stores facial photos used for liveness verification, photos you voluntarily submit through in-App feedback, application records, and backups.

Firebase Cloud Messaging supports delivery of the push notifications described in Section 4. The SDK may process Firebase installation IDs, FCM registration tokens, related technical configuration data, and the message content needed for delivery.

Limits on disclosure

Information is selected according to the service being performed. For example, the facial image used for a liveness check serves a different purpose from the installation identifier used by a messaging SDK. Each provider receives only the information needed to perform its service.

We limit disclosures to the relevant purpose and apply appropriate confidentiality and data protection requirements to providers handling information on our behalf. Where a legal request requires disclosure, the information supplied is assessed against the request and applicable requirements. The applicable privacy protections continue to apply to the information following a business transfer.

Firebase's technical messaging support and processing of associated identifiers are subject to the Android access limits described in Section 4. Advertising identifiers remain subject to the advertising controls and consent choices described there. You may contact us with questions about the recipients or purposes relevant to your information.

7. Security and Retention

We use safeguards including TLS/SSL encryption in transit, encryption of sensitive stored data, access controls, cloud-storage protections, and periodic security reviews. No method of transmission or storage is entirely secure.

At the end of the applicable period, data is deleted, anonymised, or archived as required by law.

Applying the retention periods

We manage records according to the purpose and retention period applicable to each category. The additional five-year period for account and identity records begins at account closure; the loan-record period runs from full repayment, and the support-record period runs from resolution of the relevant issue. Applicable legal requirements may affect when a record can be removed.

While identifiable information is retained, access remains limited to the purpose justifying that retention. Records retained to meet legal requirements are used for the purpose justifying their retention. Marketing processing remains subject to the separate consent requirements and choices described in this Policy. Where data is anonymised, the process must prevent it from identifying you. Information that remains stored is still subject to this Policy's retention and deletion requirements, even when it is no longer displayed in the App.

You can also help protect your information by keeping account credentials confidential, securing access to your device, and contacting us if you suspect unauthorised account activity. These user precautions work alongside the safeguards we remain responsible for applying to information we handle.

8. Your Rights and Choices

Subject to applicable law, you may request access, correction, deletion, restriction, portability, withdrawal of consent, or review of certain automated decisions. You may also complain to Nigeria's National Data Protection Commission. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. To make a request, email maxserveng@max-serve.com.

Making a privacy request

Explain the right you wish to exercise and the information or processing involved. For example, identify the detail you believe is inaccurate, the records you want to access, or the activity for which you wish to withdraw consent. A clear description helps us respond without seeking information unrelated to the request.

We may need to verify that a request comes from the account holder before disclosing, changing, or deleting personal information. Verification is intended to prevent another person from obtaining your records. Any response must also respect other people's privacy and applicable requirements to retain particular records.

If a request cannot be fulfilled in full, we will explain the relevant reason and the scope of any action taken, subject to legal restrictions. Where applicable, you may ask for human review of a decision based solely on automated processing that significantly affects you. You may complain directly to the NDPC.

9. Children and Policy Updates

Aoc Loan is not intended for anyone under 18. We do not knowingly collect children's data. Information may be processed in Nigeria and countries where approved service providers operate, subject to appropriate transfer safeguards. We may update this Policy when practices, technology, or legal requirements change; material changes will be communicated in the App or through an updated effective date.

Age eligibility

If you believe information about a person under 18 has been submitted to Aoc Loan, contact us so that we can review the circumstances and take appropriate action. Do not submit another person's information merely to bypass an age or identity check.

Changes to the notice

When we revise this Policy, we will explain material changes to the purposes, categories, recipients, or choices described in this Policy. For changes requiring new consent, we seek your consent separately for the revised processing. You can revisit this Policy within the App or contact us to ask about the terms applicable to your information.

10. Account Deletion and Contact

After signing in to Aoc Loan, you can request deletion of your account through the account deletion feature within the App. You can also submit a deletion request by emailing maxserveng@max-serve.com with the subject “Account Deletion Request.” We will verify your identity, start deletion within a reasonable time, and retain only information required by law.

For questions, requests, or complaints about this Policy, contact MAXSERVE SUPPORT LTD at maxserveng@max-serve.com. By using Aoc Loan, you confirm that you have read and understood this Privacy Policy.

What an account deletion request means

Submit a request through the in-App deletion feature or by email so that we can close your account and address the related personal data. Your account remains open if you only uninstall the App or sign out.

After verification, we assess which information can be deleted and which must remain for a lawful reason. Relevant loan, transaction, dispute, or identity records may still be subject to the retention periods described in Section 7. Existing repayment obligations continue after account closure, and records needed to administer them remain subject to applicable retention requirements.

We will communicate the outcome using your relevant contact information and explain any applicable retention, subject to legal restrictions. You may ask which categories remain and why. If you are unable to access the App, the email route remains available for your request and any follow-up enquiry.