Privacy Policy

This policy covers the LendKhata Lender (app.lendflow.lender) and LendKhata Borrower (app.lendflow.borrower) Android apps and the LendKhata admin portal (together, "LendKhata").

What LendKhata is. LendKhata is loan-management and bookkeeping software. Independent lenders ("Lenders") use it to keep records of loans they have already agreed with their own customers ("Borrowers"): agreements, repayment schedules, payments and reminders. LendKhata is not a lender, does not offer, arrange or broker loans, does not decide who gets credit and does not set interest rates.

Each Lender decides what to record about its Borrowers and is responsible for that data (the data fiduciary / controller). LendKhata processes that data on the Lender's behalf to provide the service.

Data we collect

Lender accounts: business name, owner name, email, mobile number, address, GST/registration number, logo and brand colour.

Borrower records (entered by the Lender, or by the Borrower when completing their profile):

• Name, date of birth, gender, occupation, mobile number(s), email, postal address, and parents' names, occupations and mobile numbers.
• Identity details: PAN number, and Aadhaar number or VID. Aadhaar/VID are stored encrypted; only the last 4 digits are shown in the apps.
• Profile photo and documents the Lender or Borrower uploads (photos chosen from the device gallery or PDFs chosen from Files).
• Witness details (name, contact) and handwritten signatures drawn in the app for loan agreements.

Loan and payment records: loan amounts, terms, schedules, payments, penalties, disbursement references and proofs, and agreement PDFs.

Verification: one-time codes sent to a mobile number (via Google Firebase Authentication) or to an email address, to confirm contact details and sign in.

Device and app data: a push-notification token (Firebase Cloud Messaging) to deliver payment reminders; app version, Android version and an optional screenshot when you send in-app feedback.

We do not access your contacts, SMS, call logs, location, microphone or the rest of your photo library. Photos and files are only read when you pick them with the system picker. We do not use advertising or third-party analytics SDKs, and we do not sell or rent personal data.

How we use data

• To let Lenders record and manage loans, schedules, payments and agreements, and to show Borrowers their own loans.
• To send reminders and service notifications (push and email) about existing loans.
• To verify mobile numbers and email addresses and keep accounts secure.
• To provide support and fix problems reported through feedback.

LendKhata does not use Borrower data to make credit decisions, score users or market loans.

Sharing

Borrower data is visible only to the Lender that recorded it and to that Borrower. We use service providers that process data on our instructions: Supabase (database, authentication and file storage, hosted in the AWS Mumbai, India region), Vercel (web hosting), Google Firebase (phone verification and push notifications) and Google (Gmail) for sending emails. We disclose data if required by law.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Aadhaar/VID numbers are additionally encrypted by the app server. Access is restricted per Lender by database row-level security, and documents are kept in private storage served through short-lived links.

Retention and deletion

We keep data while the Lender's account is active. Loan and payment records may need to be kept by the Lender for legal or accounting reasons. You can ask us to delete your account and data at any time. See Delete your account. We act on verified requests within 30 days and tell the relevant Lender.

Your rights

You may access, correct or delete your personal data, or withdraw consent, subject to law. Borrowers can also contact their Lender directly. Contact: our request form.

Children

LendKhata is for adults (18+) only and is not directed to children.

Changes

We will post updates on this page and change the date above.