Privacy Policy

I. Specific Information Collected

1. Gaid: When you use ScoreNest, we collect gaid information to provide users with a personalized advertising experience and to protect your data security.
2. Contact List Information (No Access to Contacts): When you use ScoreNest's credit assessment function, to prevent malicious fraud, we will guide users to select emergency contacts, including contact phone numbers, contact names, and contact relationships, to verify your identity. Rest assured, we do not obtain this permission; we only select from your address book. Furthermore, this data will be encrypted and uploaded to our security center https://encyuh.remuneration-chioce.com/mailhandler/, ensuring information security.
3. SMS Information: When you use the ScoreNest application, we need to collect your financially relevant SMS messages, including message content, titles, sending and receiving records, primarily for assessing your financial situation. These messages will be encrypted and uploaded to the security center https://encyuh.remuneration-chioce.com/mailhandler/. We will not use this information for any other purpose without your authorization. Rest assured, we only collect filtered messages.
4. Call Records: When you log in/register to use ScoreNest's financial application services, we need to access your call records, including your phone number, call type, and call duration, for verifying your identity. This information will be used to prevent financial fraud and protect your transaction security. The collected information will be uploaded to our security center at https://encyuh.remuneration-chioce.com/mailhandler/ for encryption.
5. Application List: When you use ScoreNest's services, we will collect and upload information about the system applications installed on your device, including application name, installation time, update time, etc. This information is mainly used to analyze your behavioral preferences and provide you with personalized products. This information will be uploaded to the Security Center (https://encyuh.remuneration-chioce.com/mailhandler/) for secure encryption to ensure information security.
6. Location Information: When using the application's recommendation services, to provide you with services more relevant to your specific scenarios (such as nearby service recommendations, location-related function adaptation, etc.), ScoreNest needs to collect your permission for fuzzy location information (excluding specific privacy coordinate details). All information will be transmitted to the Security Center (https://encyuh.remuneration-chioce.com/mailhandler/) for storage and processing using encryption technology, strictly ensuring information security and will not be disclosed to any third party. If you have any questions, please refer to our privacy policy or contact customer service.
7. Personally Identifiable Information: When using ScoreNest application services, we collect user information including name, ID card number, mobile phone number, bank card information, email address, home address, and employment information. This information is primarily collected to help generate personalized credit reports for credit assessment analysis.
8. Financial Information: To help users understand their creditworthiness, we need to collect your financial data, mainly transaction records, debts, and assets. This information is primarily used to accurately assess your credit risk and provide personalized financial product recommendations.
9. Device Information: To ensure system security and improve user experience, we will collect your device model, system version number, device ID, operating system version, and device type. This data will be used for device identification, fraud prevention, risk control verification, and ensuring the normal operation of the application, providing you with more tailored services.
10. Image Information: During user identity verification, we will collect images from your device. However, you need to select and upload these images, such as financial documents or screenshots, primarily for fraud prevention and account security. (Please note that we cannot access or obtain your photo album through this method; we can only select the photos you specify). All selected image data will be uploaded and transmitted via a secure connection to https://encyuh.remuneration-chioce.com/mailhandler/. We implement stringent data security standards to comprehensively prevent unauthorized system access, information leakage, and misuse.
11. Social Media Account Information: When you use the ScoreNest credit assessment feature, we will obtain information related to your social media accounts to facilitate future product optimization. This information will be encrypted and uploaded to our security center: https://encyuh.remuneration-chioce.com/mailhandler/.
12. Camera Information: In scenarios requiring facial recognition, when users query their credit reports, we will perform biometric verification, primarily through camera access, to facilitate ID card scanning, facial recognition, and facial authentication. We will leverage biometric and facial verification technologies to build a security barrier, prevent various fraudulent activities, and protect account assets and information security.

II. How to Protect Data Security

We place great importance on the security of users' personal information and data, and have adopted reasonable and effective technical measures and management systems to prevent data leakage, tampering, loss, or unauthorized access during collection, storage, use, and transmission.

1. Technical Security Measures

   We employ industry-standard security technologies to protect user data, including but not limited to:

   • Using encryption technologies (such as SSL/TLS) to protect data transmission;
   • Encrypting or anonymizing stored data to prevent unauthorized access;
   • Establishing security mechanisms to prevent malicious attacks, viruses, and unauthorized intrusions;
2. Access Control and Permission Management

   We implement a strict permission management system for internal data access, authorizing only personnel who need access for business purposes, and recording and auditing access behavior to prevent data misuse.

3. Management Systems and Staff Training

   We have established a comprehensive data security and privacy protection management system, providing employees with regular data security and privacy protection training to strengthen compliance awareness and ensure that employees strictly fulfill their confidentiality obligations.

4. Security Monitoring and Emergency Response

   We regularly conduct system security testing, vulnerability scanning, and risk assessments, and continuously optimize our security protection capabilities. In the event of any incident that may affect user information security, we will take remedial measures promptly and fulfill our legal obligation to inform.

5. User Cooperation Suggestions

   Please safeguard your account information and do not disclose your mobile phone number or verification code to others. If you discover any abnormalities, please contact us immediately so that we can handle them as soon as possible.

   We always attach great importance to the data security and privacy protection of our users. The user information collected is only used to assist in user credit assessment and will not be provided, sold, or disclosed to any other unrelated third parties.

III. Third-party Data Sharing

We may share information with: legitimate financial service providers with whom we have partnerships; third-party service providers integrated into this application (such as SDK service providers); and affiliated companies and authorized personnel of this platform.

All of the above recipients are directly related to our business processes and are not unrelated third parties ("unrelated third parties" refers to any external individual or organization unrelated to the services of this platform).

We will only share user information with the aforementioned partners to the extent necessary to improve product services and optimize user experience, and we strictly comply with relevant laws and regulations to ensure the confidentiality and security of user data.

Third-party SDK integration details:

AppsFlyer (https://www.appsflyer.com): Used for ad attribution analysis, helping us evaluate the effectiveness of channel promotions.

We only share user information with the above partners to the extent necessary to improve product services and optimize user experience, and strictly comply with relevant laws and regulations to ensure the confidentiality and security of user data.

Data Sharing Notice: We will only share your data with designated partners when necessary to improve service quality and simplify loan processing procedures, and we will only share the minimum information required for business operations.

Except for the explicitly listed partners, we will never disclose your personal information to any other unrelated third parties without your explicit permission.

We guarantee to strictly comply with all legal regulations and use reliable technical means and management methods to fully protect your personal information from being leaked.

IV. How to Store Information

We store and manage user information securely and compliantly only to the extent necessary to achieve the product's functionality and service objectives.

1. Storage Method

   We centrally store user information in a secure server environment and employ multiple technical protection measures to ensure the integrity and confidentiality of information during storage.

2. Storage Location

   User information will be stored in data centers or servers that comply with applicable laws, regulations, and industry security standards, and appropriate security measures will be taken to prevent unauthorized access, disclosure, or tampering.

3. Storage Period

   We retain user information for the shortest period necessary to achieve the credit assessment-related service objectives. Upon expiration of the storage period or upon a user's legally requested deletion, we will delete or anonymize the personal information in accordance with relevant laws and regulations.

4. Data Processing Principles

   During information storage, we adhere to the principle of minimization, employing encryption, desensitization, or anonymization methods for sensitive information to reduce data security risks.

V. How to Use Information

We strictly adhere to the principles of legality, legitimacy, and necessity in using user information, and process it only within the scope of achieving product functions and service objectives.

We may use your information for the following purposes:

• To provide you with credit assessment and risk analysis services;
• For identity verification, user management, and customer service support;
• For risk control, fraud prevention, and system security;
• For optimizing product functions, improving service experience, and conducting data statistical analysis;
• For fulfilling obligations stipulated by laws and regulations or responding to regulatory requirements.

Without your explicit authorization, we will not use your personal information for purposes unrelated to the above. We will also not provide, sell, or disclose your personal information to unrelated third parties.

Where necessary, we may anonymize or de-identify information for data analysis and product optimization; such processing will not identify your personal identity.

VI. Purpose of Information Collection

We collect user information primarily for the following purposes, adhering to the principles of legality, legitimacy, and necessity:

• Providing Core Services: To complete credit assessment-related service functions;
• Identity Verification and User Management: For user real-name authentication, account security verification, and customer service support;
• Risk Control and Anti-Fraud: To identify abnormal behavior and prevent fraud risks;
• System Operation and Service Optimization: For system operation and maintenance, function optimization, data statistics, and performance analysis;
• Personalized Services and Notifications: To provide users with service-related reminders, information pushes, or product optimization suggestions, within the bounds of legality and compliance;
• Legal and Compliance Requirements: To comply with laws and regulations, regulatory requirements, or cooperate with relevant investigations.

We will not collect personal information unrelated to the above purposes, nor will we use the collected information for any purpose without user authorization or in violation of laws and regulations.

VII. User Rights and Obligations

1. User Rights

   Users have the right to know, access, correct, delete, and withdraw authorization regarding their personal information in accordance with the law. Users can query, modify, or delete their personal information, or apply to delete their account, through this application or official channels. Users have the right to withdraw authorization at any time for data processing based on their authorization, which may affect the normal use of some functions or services.

2. User Obligations

   Users shall ensure that the personal information they provide is true, accurate, and complete, and update relevant information in a timely manner. Users shall bear the corresponding responsibility for any deviations in evaluation results, service restrictions, or other consequences caused by providing false, incomplete, or outdated information. Users shall properly safeguard their accounts and login credentials and shall not transfer, lend, or provide their accounts to others. Users shall bear the relevant responsibility for any account or information security issues caused by their own reasons.

VIII. Account and Data Deletion

We respect and protect users' right to control their personal information. Users have the right to apply for account cancellation and deletion of their personal data at any time.

1. Account Cancellation

   Users can submit an account cancellation application through the methods provided in the application or through the official customer service channel wisdom@koperasisumber.com. After identity verification, we will process the account cancellation for the user. Once an account is cancelled, it cannot be recovered.

2. Data Deletion

   After account cancellation or a user's explicit request to delete personal information, we will delete or anonymize the personal data related to the account in accordance with the requirements of laws and regulations. Deleted data cannot be recovered.

3. Scope of Deletion

   The scope of data deletion includes information actively submitted by users during the use of this application, as well as relevant data collected within the scope of legal authorization. However, if otherwise stipulated by laws and regulations, or necessary to fulfill legal obligations, resolve disputes, or cooperate with regulatory investigations, we may continue to retain some information for a specified period.

4. Functional Impact Notice

   After account cancellation or data deletion, users will no longer be able to use the related services provided by this application. To use this application again, users need to re-register and submit relevant information.

IX. Protection of Minors

We highly value the protection of minors' personal information. This application primarily serves adults with full civil capacity and, in principle, does not provide services to minors under the legal age.

If you are under the legal age, please do not register or use this application. If we discover that we have collected or processed a minor's personal information without the explicit consent of their guardian, we will take timely measures to delete or cease such processing in accordance with the law.

If guardians have any questions, comments, or discover any related situations regarding the protection of minors' personal information, they can contact us through official channels. We will actively cooperate in handling the matter and protect the legitimate rights and interests of minors in accordance with the law.

X. Changes to the Privacy Policy

We may update this Privacy Policy from time to time in response to changes in laws and regulations, business adjustments, or service upgrades. When there are substantial changes to this Privacy Policy, we will notify you through in-app announcements, pop-up notifications, or other reasonable means, and will display the updated Privacy Policy in a prominent position.

The updated Privacy Policy will take effect from the date of its publication. Your continued use of this application and related services after the Privacy Policy change constitutes your acceptance of, having fully read, understood, and agreed to the updated Privacy Policy. If you do not agree to the changed terms, you have the right to stop using this application and may apply to cancel your account and delete your personal information in accordance with the relevant instructions in this Privacy Policy.

We recommend that you review this Privacy Policy regularly to stay informed of any updates to our personal information protection measures.

XI. Contact Us

If you have any questions about our privacy policy or any related matters, please feel free to contact us at:

Our customer service team will do its best to answer and satisfy all your product-related questions and provide reliable service support. Thank you for your attention and understanding.