FinLumiPrivacy Policy
Last updated: June 2026
FinLumiFinLumi operates on the belief that every person who trusts us with their data deserves a clear, honest explanation of how it is used. This Privacy Policy describes exactly what information our mobile application ("App") gathers, the reasons behind each collection, the safeguards we apply, and the control you retain over your own data at all times.
Continuing to use the App means you have read and agreed to this Policy. If you have reservations about any part of it, please uninstall the App. Reading this alongside our Terms of Service will give you the complete picture of how your FinLumi account works.
Operating a responsible credit service requires specific categories of data. Here is the full and unambiguous account of what we collect and why.
When you create a FinLumi account, we collect your full legal name, date of birth, mobile number, email address, and the details from your government-issued identity document. Every item is encrypted before leaving your device and stored only at: server.finlumi.co
Your device transmits technical details — including model identifier, operating system version, IP address, and Google Advertising ID — that we use exclusively to keep the platform stable and to identify security anomalies. These details play no role in credit decisions or advertising targeting.
To reduce the risk of fraudulent applications, the App may read the package names and installation status of other apps on your device. No data from inside those apps — messages, passwords, transactions, or browsing — is ever touched. Fraud prevention is the sole purpose.
Photographing identity documents for verification requires camera permission. Images are encrypted at the instant of capture and transmitted to server.finlumi.co. Once verification concludes, the original images are permanently destroyed. The camera activates only when you explicitly initiate an upload.
Where you grant permission, a coarse location reading confirms that FinLumi's service operates in your region. We never log precise GPS coordinates, and location data is entirely separate from credit scoring and advertising systems.
Aggregated, de-identified statistics about how the App is used — including navigation paths, session lengths, and error events — guide our engineering and design improvements. No individual user can be reconstructed from this data.
Every processing activity at FinLumi serves a specific, defined purpose. We use your information to:
Optional permissions can be withdrawn at any time through your device's settings. Withdrawing a permission may limit access to features that depend on it, but your core account and credit facility will continue to function. We do not access data from permissions you have not granted.
FinLumi does not sell, rent, or pass on your personal data to third parties for commercial purposes. The only circumstances under which data is shared are:
Each partner operates under a formal data processing agreement and is strictly prohibited from using your information for any purpose outside the scope of the services they provide to FinLumi.
Security at FinLumi is not an afterthought — it is woven into the infrastructure from the start. Our active controls include:
If you notice anything suspicious about your account, contact us at once at support@finlumi.co. We treat every security report as urgent and respond accordingly.
We hold personal data only as long as necessary to fulfil the purpose for which it was collected, or as required by law — whichever is the longer period.
Following account closure and expiry of any mandatory retention window, data is either permanently deleted from our systems or rendered permanently unidentifiable through technical anonymisation. The applicable retention period varies by data type and governing regulation.
FinLumi accounts are open exclusively to adults aged 18 and over. Our identity verification process includes checks designed to prevent underage applicants from opening accounts.
Should we establish that an account is held by someone under 18, we will close it without delay, reverse any pending transactions, and erase all related data. Please report any such case to support@finlumi.co and we will investigate immediately.
You have meaningful control over the personal data FinLumi holds about you:
Submit your request in writing to support@finlumi.co. We will verify your identity and respond within a reasonable period.
This Policy is reviewed periodically and updated to reflect developments in our services or the regulatory environment. Substantial changes will be communicated to you through the App or by email before they take effect.
Routine corrections that do not materially affect your rights take effect immediately without prior notice. The effective date at the top of this page identifies the current version. Continued use of the App following an update indicates acceptance of the revised Policy.
If you have questions about this Policy, would like to exercise a data right, or want to raise a concern about how we handle your information, our team is ready to assist.