Privacy Policy

Last updated: September 3, 2026

1. Scope

OpFin provides financial wellbeing, responsible credit, savings, protection, investment and peer-lending journeys. This policy explains how personal information is collected, used, shared, retained and deleted.

2. Information we collect

• Identity and contact information, including name, phone number and identity-verification evidence.
• Financial, employment, affordability, credit, transaction and repayment information supplied by you or permitted providers.
• Consent, security, support, device and service-usage information required to operate and protect the service.
• Information about savings, protection, investments or peer-lending relationships when those products are activated.

3. How we use information

• Provide and secure your account and requested financial services.
• Verify identity, assess eligibility and affordability, service obligations and provide customer support.
• Process payments through disclosed payment providers and reconcile transaction evidence.
• Meet legal, regulatory, accounting, fraud-prevention, credit-reporting and consumer-protection obligations.
• Improve service quality using information lawfully available for that purpose.

4. Sharing

Information is shared only where necessary with disclosed payment, identity, credit-reference, savings, insurance, investment, lending, infrastructure and professional-service providers, or with public authorities where required by law. OpFin does not sell personal information to advertisers.

5. Retention

Personal information is retained only for as long as required for the purpose for which it was collected and for applicable legal, regulatory, accounting, fraud-prevention, dispute and audit obligations. Different record categories can therefore have different retention periods. When a retention period ends, information is deleted or irreversibly anonymized according to the applicable retention schedule.

6. Your choices and rights

• Review or correct appropriate account information.
• Review and revoke purpose-specific consent where the law and product permit.
• Request access, restriction, deletion or other data-subject rights available under applicable law.
• Delete your OpFin account from the web or mobile application.

7. Account deletion

You can initiate account deletion in OpFin under More → Delete account. You must re-enter your current password and explicitly confirm deletion.

If there are no active regulated or financial obligations, the active account is deleted, optional customer context is removed, active consents are revoked and direct profile identifiers are anonymized. Records that must be retained for legal, regulatory, accounting, credit-reporting, fraud-prevention, dispute or audit purposes are isolated from active use and retained only for the required period.

If an active loan, savings position, protection policy, peer-lending position or other regulated obligation prevents immediate closure, OpFin records an account-deletion case and keeps the account available only as needed to service or close that obligation safely. The deletion request does not need to be submitted again.

Web account deletion

8. Security

OpFin uses access controls, encrypted transport, protected credentials, audit evidence and financial integrity controls designed to protect customer information and transactions.

9. International processing

Where a service provider processes information outside Uganda, OpFin applies the contractual, legal and technical safeguards required for that processing.

10. Contact

OpFin
Kampala, Uganda
Email: privacy@opfin.rotaryo.org