Privacy Policy
Peso Online | HAPPYFUND LENDING INVESTORS INC. | Last updated: July 17, 2026
|
Item |
Details |
|---|---|
|
App / Platform |
Peso Online and related mobile, web, and digital services |
|
Corporate Name |
HAPPYFUND LENDING INVESTORS INC. |
|
Business Name |
Peso Online |
|
SEC Registration Number |
CS201840987 |
|
Certificate of Authority Number |
2814 |
|
Privacy Contact |
happyfundsupport@happyfundlending.com |
1. Scope and Controller
Who this policy covers: This Privacy Policy explains how HAPPYFUND LENDING INVESTORS INC. and its authorized service providers collect, use, store, disclose, and protect personal data when a person visits, registers for, applies through, borrows through, or otherwise uses Peso Online.
Role of the Company: For the processing described in this policy, HAPPYFUND LENDING INVESTORS INC. acts as the personal information controller, except where a partner or government body independently determines its own purposes and means of processing.
Acceptance: By using Peso Online, creating an account, submitting an application, or continuing to use our credit services, you acknowledge that your personal data will be handled as described in this policy and in any separate in-app disclosure presented before a permission or sensitive-data feature is used.
2. Personal Data We Process
|
Category |
Examples |
How we receive it |
|---|---|---|
|
Identity and contact information |
Full name, mobile number, email address, date of birth, gender, residential address, government ID details, and account identifiers. |
Provided by you during registration, identity checks, loan application, account update, or customer support. |
|
Application and credit information |
Employment information, income details, loan orders, repayment status, available credit limit, credit relationship history, and information needed to assess or service a revolving credit facility. |
Provided by you, generated through your use of the service, or obtained from lawful credit, verification, payment, or lending partners. |
|
Financial and payment information |
Disbursement account details, repayment records, transaction confirmations, outstanding balance information, fees, and payment-channel references. |
Provided by you or generated by payment processors, fund partners, collection partners, or the Platform during loan servicing. |
|
Emergency contact information |
Name, relationship, and contact number of references that you manually provide. We do not import your contact book. |
Entered by you during an application or account update. |
|
Identity-verification media |
ID document images, live selfie images, and facial-verification data submitted for authentication, fraud prevention, and dispute handling. |
Captured or uploaded only when you choose to submit the required verification material and provide consent where required. |
|
Device, app, and security data |
Device model, operating system version, app version, resettable advertising ID or app instance ID, IP-derived region, network status, crash logs, security events, and fraud-risk signals. |
Collected by the app or approved SDKs to run the service, protect accounts, prevent fraud, diagnose errors, and meet security requirements. |
|
Service communications |
Customer-support requests, call or message records with support teams, repayment reminders, security alerts, and complaint-handling records. |
Created when you contact us or when we contact you about your account, application, repayment, security, or regulatory notices. |
3. App Permissions and Sensitive Features
|
Feature or permission |
Purpose |
User control |
|---|---|---|
|
Camera / Photos / live capture |
Used to capture an ID document or selfie for identity verification, liveness checks, fraud prevention, and dispute resolution. |
Used only after you initiate the verification step and grant permission. You may deny permission, although we may be unable to complete identity verification. |
|
SMS |
With your explicit consent, the Platform may access only SMS messages related to financial transactions and identity verification, including one-time passwords (OTPs), repayment reminders, salary notifications, and bank transaction alerts. Personal conversations, social messages, promotional texts, and other unrelated SMS content are never accessed or collected. SMS data is used exclusively to verify your identity, enhance account security, prevent fraud, and support the loan application and risk assessment process. |
SMS access is optional and requires your explicit consent. All collected data is encrypted during transmission and storage and handled in compliance with applicable laws and platform policies. You may withdraw this permission at any time through your device settings, although doing so may affect certain services that rely on SMS verification. |
|
Location |
With your consent, the Platform collects your approximate location information only while the app is actively running in the foreground. Background location is not collected. Your approximate location is used solely to automatically populate address information and improve the accuracy and convenience of the application process. |
Location access is optional and can be enabled or disabled at any time through your device settings. Disabling this permission may affect features that rely on location-based address autofill. |
|
Installed Applications |
This information is used solely for fraud prevention, device security verification, and risk assessment. |
Access is optional and requires your consent. You may disable this permission at any time through your device settings, although doing so may affect security verification and risk assessment. |
|
App Usage |
Usage data is collected solely to improve user experience, optimize app performance, and enhance service quality. |
App usage data is collected only with your consent. You may manage or withdraw this permission through your device settings, although doing so may affect our ability to improve and personalize certain features. |
|
Push Notifications |
Notifications are used solely to support account management, provide important service information, and enhance your overall user experience. |
Push notifications are optional and can be enabled or disabled at any time through your device settings. Disabling notifications may cause you to miss important account or repayment updates. |
|
Phone Information |
This information is used solely for identity verification, device security, fraud prevention, risk assessment, and to recommend suitable credit products. |
Access is optional and requires your consent. You may manage or withdraw this permission through your device settings, although doing so may affect identity verification, risk assessment, and personalized service recommendations. |
|
Notifications |
Used for application updates, repayment reminders, account security alerts, transaction confirmations, service notices, and important policy updates. |
You may disable notifications through device settings or available in-app controls. |
|
Network and Wi-Fi state |
Used to check basic connectivity, app stability, security risk, fraud risk, and abnormal access patterns. |
The app does not use this to read messages, files, browsing content, or unrelated personal material. |
|
Advertising ID and app analytics |
Used for attribution, campaign measurement, fraud prevention, product analytics, and service optimization, subject to Google Play and advertising rules. |
You may reset or limit advertising ID use through your device settings where supported. |
|
Storage |
Storage access is used solely to support document uploads and complete the loan application process. |
Storage access is optional and can be enabled or disabled at any time through your device settings. Disabling this permission may prevent you from uploading the documents required for your application. |
4. Purposes and Legal Bases
|
Purpose |
How the data is used |
Legal basis |
|---|---|---|
|
Account creation and service delivery |
Register accounts, identify users, maintain records, process applications, manage loan orders, enable withdrawals, process repayments, restore available credit, and provide customer support. |
Contract performance, pre-contract steps requested by you, and legitimate business interests. |
|
Credit and revolving facility management |
Evaluate eligibility, set and adjust credit limits, re-evaluate account status, monitor repayment behavior, detect overdue accounts, and decide whether further withdrawals or loan orders may be offered. |
Contract performance, consent where required, legitimate interests, and compliance with applicable lending regulations. |
|
Identity verification and fraud prevention |
Confirm that an applicant is the account holder, validate submitted documents, perform liveness or biometric checks where enabled, prevent unauthorized applications, investigate suspicious activity, and maintain platform safety. |
Consent for sensitive personal information, legal compliance, legitimate interests, and fraud-prevention obligations. |
|
Payments, collections, and dispute handling |
Disburse funds, receive repayments, reconcile transactions, contact users about due dates, handle complaints, support lawful collection activities, and resolve errors or disputes. |
Contract performance, legitimate interests, and legal compliance. |
|
Regulatory, audit, and legal obligations |
Meet requirements under Philippine lending, credit-information, anti-money-laundering, tax, consumer-protection, data-protection, court, law-enforcement, or regulator requests. |
Compliance with legal obligations and legitimate interests. |
|
Product improvement and analytics |
Improve service quality, diagnose crashes, measure feature usage, enhance risk models, optimize user experience, and conduct aggregate reporting. |
Legitimate interests and consent where required by law or platform policy. |
|
Marketing communications |
Offer related financial services, product updates, promotions, or service announcements through permitted channels. |
Consent where required and legitimate interests for non-sensitive service communications. You may withdraw marketing consent at any time. |
5. Credit Evaluation and Automated Processing
Ongoing assessment: During the account and credit relationship, we may evaluate application data, repayment records, transaction patterns, device and security signals, fraud indicators, account activity, and service history to support underwriting, credit-limit management, fraud prevention, and compliance.
Model use: Automated or semi-automated tools may assist with scoring, eligibility checks, risk segmentation, and account monitoring. These tools help determine available credit, whether additional withdrawals may be allowed, and whether account restrictions are needed. Important adverse decisions may be reviewed manually where required by law or internal policy.
User impact: Risk evaluation may result in approval, rejection, lower or higher credit limits, temporary suspension, additional verification, collection follow-up, or termination of access to credit features where permitted by law and the applicable loan agreement.
6. Data Sharing
|
Recipient |
Reason for disclosure |
|---|---|
|
Authorized employees and affiliates |
Account administration, customer support, audit, risk control, compliance, and internal operations. |
|
Funding partners and lenders |
Application evaluation, loan funding, disbursement, servicing, repayment, and credit relationship management. |
|
Payment and disbursement partners |
Fund transfer, repayment processing, transaction reconciliation, error handling, and payment confirmation. |
|
Identity, biometric, and document-verification providers |
KYC checks, liveness checks, fraud prevention, authentication, and dispute handling. |
|
Messaging, call, and customer-service providers |
Repayment reminders, support communications, service notices, account alerts, and complaint resolution. |
|
Collection or post-loan servicing partners |
Lawful repayment follow-up, account servicing, dispute records, and overdue-account handling. |
|
Credit Information Corporation, credit bureaus, or authorized reporting agencies |
Credit investigation, credit reporting, credit scoring, and legally permitted credit-information exchange. |
|
Cloud, analytics, crash-reporting, and security service providers |
Hosting, encrypted storage, diagnostics, fraud prevention, app stability, and product analytics. |
|
Regulators, courts, law enforcement, or government bodies |
Compliance with lawful requests, investigations, reporting, or regulatory obligations. |
|
Business-transfer recipients |
Due diligence or transfer connected with merger, acquisition, financing, reorganization, or sale of assets, with legally adequate notice where required. |
No sale of sensitive data: We do not sell personal or sensitive user data. Service providers that process personal data for us are expected to use it only under our instructions and for the purposes described in this policy, unless they separately disclose and lawfully act as independent controllers.
7. Third-Party SDKs and Service Components
|
SDK / provider |
Purpose |
Data handled |
|---|---|---|
|
AppsFlyer |
Attribution, campaign measurement, app-event analytics, and fraud prevention. |
Resettable identifiers, install/open events, app events, device and network signals. |
|
Dyna.AI |
Facial recognition, liveness checks, identity verification, and anti-fraud review. |
Selfie images, face-verification outputs, identity-verification signals. |
|
Firebase |
Crash diagnostics, performance monitoring, app stability, and service improvement. |
Device and app technical details, crash logs, latency metrics, and app interaction diagnostics. |
|
Alibaba Cloud |
Secure upload and storage of user-submitted verification images and documents. |
Only files or images selected or captured by the user for verification or application support. |
SDK governance: Before integration and during operation, we review SDK data practices to support compliance with Google Play policies, Philippine privacy requirements, and our own service commitments. SDK data handling must be reflected accurately in the Google Play Data safety form.
8. Data Location and Cross-Border Processing
Storage and processing locations: Personal data may be stored or processed in the Philippines and in other jurisdictions where our cloud, verification, analytics, security, payment, or service partners operate.
Safeguards: Where personal data is transferred or accessed outside the Philippines, we use contractual, organizational, and technical measures designed to protect confidentiality, integrity, availability, and lawful use of the data.
9. Retention and Deletion
|
Data type |
Retention approach |
|---|---|
|
Loan, identity, credit, fraud, risk, compliance, payment, and account records |
Kept while the account or credit relationship is active and for up to five years after account closure, termination of the credit relationship, final settlement, or the last relevant transaction, unless a longer period is required or permitted by law. |
|
Marketing and behavior analytics data |
Kept for up to two years after collection, or deleted or anonymized earlier when you withdraw consent and no legal basis requires retention. |
|
Support, complaint, and dispute records |
Kept as needed to investigate, resolve, document, and defend claims or comply with legal and regulatory obligations. |
|
Data no longer needed |
Deleted, anonymized, aggregated, or securely archived when the retention purpose expires, subject to legal hold, fraud prevention, audit, or regulatory requirements. |
Account deletion: If Peso Online allows account creation, you may request account deletion through the in-app account-deletion feature and through the external account-deletion webpage entered in Play Console. You may also contact happyfundsupport@happyfundlending.com for help. When an account is deleted, associated personal data will be deleted unless retention is required for legal, security, fraud-prevention, dispute, accounting, or regulatory reasons.
10. Security Measures
Technical safeguards: We use reasonable technical safeguards, including HTTPS/TLS for transmission, access controls, logging, monitoring, encryption or protected storage where appropriate, and security review of critical service components.
Organizational safeguards: Access to personal data is limited to authorized personnel and service providers who need it for approved purposes. Personnel and partners are expected to observe confidentiality and data-protection obligations.
Breach response: If a personal data breach occurs and notification is required, we will notify the National Privacy Commission and affected data subjects within the period and in the manner required by Philippine data-protection rules.
No absolute guarantee: Although we work to protect personal data, no method of transmission or storage is completely risk-free. We therefore maintain safeguards, monitoring, and response procedures designed to reduce risk and address incidents promptly.
11. Your Rights and Choices
|
Right or choice |
What it means |
|---|---|
|
Access |
You may request reasonable access to personal data about you that we process. |
|
Correction |
You may ask us to correct inaccurate, incomplete, or outdated personal data. |
|
Objection or withdrawal |
You may object to processing or withdraw consent where processing is based on consent, subject to legal, contractual, or legitimate grounds for continued processing. |
|
Erasure or blocking |
You may request deletion, blocking, or removal where the law allows and no overriding retention basis applies. |
|
Portability |
Where applicable, you may request a copy of certain electronically processed personal data in a commonly used format. |
|
Complaint |
You may contact us first, and you may also file a complaint with the National Privacy Commission where you believe your data privacy rights have been violated. |
|
Marketing opt-out |
You may opt out of promotional messages through available unsubscribe methods, device settings, or by contacting us. |
How to exercise rights: Send your request to happyfundsupport@happyfundlending.com and include enough information for us to verify your identity, locate your account, and understand the request. We may ask for additional verification before acting on sensitive requests.
Effect of refusal or withdrawal: If you decline to provide information required for identity verification, credit assessment, legal compliance, loan servicing, fraud prevention, or repayment processing, we may be unable to provide or continue some or all services.
12. User Responsibilities
Accuracy: You are responsible for submitting true, complete, current, and non-misleading information and for promptly updating your account if information changes.
Third-party information: If you provide information about another person, such as a reference or emergency contact, you confirm that you have a lawful basis or permission to provide that information and that the person may be contacted for account, verification, or loan-servicing purposes where permitted.
Security: You should protect your device, login credentials, OTPs, and account information. Notify us promptly if you suspect unauthorized activity, account compromise, or an error in your transactions.
13. Changes to this Policy
Updates: We may update this policy to reflect changes in law, platform rules, product features, data practices, or security measures. The updated version will be posted on the Platform and will take effect when published unless a later effective date is stated.
Material changes: Where required, we will provide notice through the app, email, in-app message, website notice, or another appropriate channel before material changes affect your personal data.
14. Contact Us
Privacy inquiries: For privacy questions, access or deletion requests, suspected errors, unauthorized account activity, or data-protection concerns, contact happyfundsupport@happyfundlending.com.
Helpful details: When contacting us, include your name, account identifier or registered mobile number, date and time of the event, description of the issue, reference code if available, and your preferred contact method.