Privacy Policy

1. Who We Are

LendTrack (“we”, “our”, or “us”) is a personal lending management application developed and operated by Agilecode, based in Nairobi, Kenya. The app is available on Android and on the web at lendtrack.agilecode.co.ke.

For any privacy-related questions, contact us at: sales@agilecode.co.ke

2. What Data We Collect

2.1 Account Data Collected at registration

• Full name — to identify your account
• Email address — for login, authentication, and account communications
• Phone number — for M-Pesa subscription payments

2.2 Loan & Financial Data Created by you

• Borrower names, phone numbers, email addresses, and national ID numbers you enter manually
• Loan details: principal amounts, interest rates, repayment schedules, due dates
• Repayment records: amounts paid, payment dates, notes

This data is your own records — we store it securely on our servers solely so you can access it across your devices.

2.3 Contact Data Optional — on-device only

When you use the “Import from Contacts” feature on the Add Borrower screen, the app reads your device contacts to pre-fill the borrower form. This data is:

• Never uploaded to our servers
• Only accessed at the moment you tap the import button
• Never stored beyond the form session

You will be prompted for permission before any contact access. You may deny or revoke this permission at any time; the app will continue to function normally without it.

2.4 Payment Data

When you subscribe via M-Pesa, the payment is processed directly by Safaricom using their Daraja API. We receive and store:

• M-Pesa receipt numbers
• Payment amount and date
• The phone number used for payment

2.5 Device Data Push notifications

We use a Firebase Cloud Messaging (FCM) token to send you payment-due reminders. This token is a random device identifier assigned by Google Firebase; it does not personally identify you. We do not collect analytics, crash reports, or usage statistics beyond what Firebase provides for message delivery.

2.6 Authentication Data

• If you sign in with Google, we receive your name and email address from Google. We do not receive your Google password.
• If you use biometric authentication (fingerprint / face ID), this is processed entirely on your device by the Android operating system. We never receive or store any biometric data.

3. How We Use Your Data

4. Data Storage & Security

• All data is stored on our servers at lendtrack.agilecode.co.ke.
• All communication between the app and our servers uses HTTPS (TLS encryption).
• Authentication tokens are stored in your device's secure encrypted storage (Android Keystore), not in plain-text.
• Access to loan data is strictly scoped to the authenticated account — lenders cannot see other lenders' data.

5. Third-Party Services

6. Data Retention

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data at any time within the app
• Delete individual loan records, borrowers, and repayments at any time
• Delete your account and all associated data — contact us at sales@agilecode.co.ke and we will process your request within 30 days
• Export your data — use the CSV export feature in the app to download your loan schedules, borrower list, and analytics at any time

8. Changes to This Policy

We may update this privacy policy when we add new features or as legal requirements change. We will notify you of significant changes via an in-app notification and by email to your registered address. The Last Updated date at the top of this page will always reflect the most recent revision.

9. Contact Us

If you have any questions, concerns, or requests regarding your privacy: