Lofti Technologies ("we," "us," or "our") operates LoSave, a Village Banking management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We are committed to protecting your privacy and ensuring the security of your personal information. By using LoSave, you consent to the data practices described in this policy.
Introduction
This Privacy Policy applies to all users of LoSave, including group administrators, members, and visitors to our website. It describes:
- What personal information we collect and why
- How we use and protect your information
- When and with whom we share your information
- Your rights regarding your personal data
- How to contact us about privacy concerns
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
Information We Collect
We collect information that you provide directly to us, information collected automatically, and information from third-party sources.
2.1 Information You Provide
When you use our Service, you may provide us with:
- Account Information
- Name, email address, phone number, password, and profile photo when you create an account.
- Group Information
- Group name, description, rules, meeting schedules, and member lists when you create or manage a Village Banking group.
- Financial Information
- Savings contributions, loan requests, repayment records, and transaction history within your groups.
- Payment Information
- Mobile money numbers and payment references when you pay for subscriptions (processed securely by our payment partner).
- Communications
- Messages, feedback, and support requests you send to us.
- Identity Verification
- Government-issued ID documents if required for verification purposes.
2.2 Information Collected Automatically
When you access our Service, we automatically collect:
- Device Information: Device type, operating system, browser type, and unique device identifiers.
- Log Information: IP address, access times, pages viewed, and actions taken within the Service.
- Location Information: General location based on IP address (we do not collect precise GPS location).
- Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies (see Section 8).
2.3 Information from Third Parties
We may receive information from:
- Authentication Providers: If you sign in using Google OAuth, we receive your name and email from Google.
- Payment Providers: Transaction confirmation and payment status from DPO Pay and mobile money providers.
- Group Members: Your group administrators may add you to a group and provide your email address.
How We Use Your Information
We use the information we collect for the following purposes:
3.1 Provide and Improve the Service
- Create and manage your account
- Process and track savings, loans, and financial transactions within groups
- Generate reports and statements for you and your group
- Send transactional notifications (e.g., payment confirmations, loan approvals)
- Provide customer support and respond to inquiries
- Improve and optimize the Service based on usage patterns
3.2 Process Payments
- Process subscription payments
- Send payment reminders and receipts
- Manage billing and account status
3.3 Communications
- Send service-related announcements and updates
- Send reminders for contributions, repayments, and meeting dates
- Respond to your comments, questions, and requests
- Send promotional communications (with your consent)
3.4 Security and Compliance
- Detect, prevent, and address fraud, security issues, and technical problems
- Enforce our Terms of Service and other policies
- Comply with legal obligations and respond to legal requests
- Protect the rights, property, and safety of our users and the public
Information Sharing
We Do Not Sell Your Data
We do not sell your personal information to third parties. We only share your information as described in this policy.
4.1 With Your Group Members
When you join a Village Banking group, certain information is visible to other group members, including your name, savings contributions, loan status, and attendance records. Group administrators have access to additional details for management purposes.
4.2 With Service Providers
We share information with third-party vendors who provide services on our behalf:
- Payment Processing: DPO Pay and mobile money providers process subscription payments.
- Cloud Hosting: Our servers and databases are hosted on secure cloud infrastructure.
- Email Services: We use email service providers to send transactional and marketing emails.
- SMS Services: Zamtel SMS gateway for sending notifications.
- Analytics: We use analytics tools to understand Service usage.
4.3 For Legal Reasons
We may disclose your information if required to:
- Comply with applicable law, regulation, or legal process
- Respond to lawful requests from government authorities
- Protect our rights, privacy, safety, or property
- Enforce our Terms of Service
- Investigate potential violations
4.4 Business Transfers
If Lofti Technologies is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
5.1 Security Measures
- Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS. Sensitive data at rest is encrypted.
- Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their duties.
- Authentication: We use secure password hashing and offer two-factor authentication (2FA) for additional account security.
- Regular Audits: We conduct regular security assessments and vulnerability testing.
- Secure Infrastructure: Our servers are hosted in secure data centers with physical and network security controls.
5.2 Your Responsibilities
You are responsible for maintaining the security of your account credentials. We recommend:
- Using a strong, unique password
- Enabling two-factor authentication
- Not sharing your login credentials
- Logging out from shared devices
- Reporting any suspicious activity immediately
5.3 Breach Notification
In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law.
Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy.
6.1 Retention Periods
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 2 years after deletion |
| Financial Records (Savings, Loans) | 7 years (legal/accounting requirements) |
| Transaction Logs | 7 years |
| Support Communications | 3 years after resolution |
| Security/Audit Logs | 2 years |
| Marketing Preferences | Until consent is withdrawn |
6.2 After Account Deletion
When you delete your account, we will delete or anonymize your personal information, except where we are required to retain certain data for legal, accounting, or security purposes. Financial transaction records within groups are retained for accounting purposes.
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
7.1 Access and Portability
You have the right to request a copy of the personal information we hold about you. You can download your data from your account settings or by contacting us.
7.2 Correction
You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings.
7.3 Deletion
You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal retention requirements, ongoing transactions). You can initiate account deletion from your account settings.
7.4 Restriction and Objection
You may have the right to restrict or object to certain processing of your personal information. Contact us to exercise these rights.
7.5 Marketing Opt-Out
You can opt out of marketing communications at any time by clicking "unsubscribe" in our emails or updating your notification preferences in account settings.
7.6 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@losave.app. We will respond to your request within 30 days.
Children's Privacy
Our Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.
International Data Transfers
Your information may be transferred to and processed in countries other than Zambia. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information.
Our service providers may be located in different countries. We ensure they provide adequate data protection through contractual obligations and security measures.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Post the updated policy on our website
- Notify you via email or in-app notification for significant changes
Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Lofti Technologies
Data Protection Contact
For general inquiries, you can also reach us at support@losave.app or visit our Contact page.
By using LoSave, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with our Terms of Service.