Privacy Policy

1Fi — Privacy Policy

Last Updated: 22 May 2026

This Privacy Policy explains how Fiquity Technology Private Limited ("1Fi", "Company", "we", "us", or "our") collects, uses, processes, stores, shares, and protects your personal data when you access or use the 1Fi mobile application, website, and related services (together, the "Platform").

1Fi acts as a Data Fiduciary in respect of the personal data it processes, and is committed to handling your data in accordance with:

  • The Digital Personal Data Protection Act, 2023
  • The Digital Personal Data Protection Rules, 2025
  • The Information Technology Act, 2000 and the rules made thereunder
  • Applicable directions of the Reserve Bank of India (RBI)
  • Other applicable Indian law

By using the Platform, you acknowledge that you have read and understood this Policy. Where we rely on your consent to process your data, we will obtain that consent separately, and you may withdraw it as described below.

1. Scope of this Policy

This Policy applies to personal data we collect through the 1Fi mobile application and website and in the course of providing our services.

1Fi operates as a Lending Service Provider and Technology Service Provider that facilitates loans against mutual funds offered by RBI-regulated banks and NBFCs ("Lending Partners"). 1Fi is not a lender.

This Policy does not cover the independent data practices of Lending Partners or other third parties, which are governed by their own privacy policies.

2. Information We Collect

We collect only the information that is necessary to provide our services, to facilitate your loan application, to enable the pledge of your mutual fund units, to operate any rewards programme, to keep the Platform secure, and to comply with legal and regulatory requirements.

Account Information

This includes:

  • Name
  • Mobile number
  • Email address
  • Residential address
  • Communication preferences

Identity and KYC Information

When you initiate a loan application, we collect identity and verification information required for financial services, which may include:

  • PAN
  • Aadhaar number (in masked form wherever possible)
  • Other government-issued identification
  • Photograph or selfie
  • Video KYC data where required
  • Date of birth
  • Electronic signature information

This information is collected and used strictly for identity verification, fraud prevention, and regulatory compliance.

Financial and Mutual Fund Information

To assess and process a loan against mutual funds, we collect:

  • Mutual fund holdings — scheme details, folio information, the units you choose to offer as security, their value, lien and pledge status, and related transaction and repayment information
  • Bank account details required for disbursement and repayment
  • Loan-related information such as sanction details, EMI schedule, interest amount, and repayment status from or in connection with the Lending Partner

Device, Technical, and Usage Information

We collect limited technical information such as:

  • Device model and operating system version
  • App version
  • IP address
  • Information about how you interact with the Platform

This is used for security, fraud prevention, analytics, and improving the Platform.

Information from Third Parties

We may receive information about you from verification agencies, MFCentral and the Registrars and Transfer Agents, payment service providers, and Lending Partners, in connection with your application and your use of the services.

3. Mobile Application Permissions

The 1Fi mobile application requests only the permissions needed to deliver its services, and uses them only for the purposes described below and with your consent.

  • Camera — used to capture photographs, selfies, or documents required for KYC and identity verification
  • Storage or media access (limited) — used to allow you to select and upload specific documents required for your application. Where supported, we use a document or file picker so that we access only the files you choose

We do not collect or access:

  • Phone contacts
  • Call logs
  • SMS or text messages
  • Photo gallery or media library
  • Precise device location

for the purposes of credit facilitation, collection, or recovery. We do not use device data to contact your friends, family, or other contacts.

You can review and change app permissions at any time in your device settings. Disabling a permission may limit certain features, such as completing KYC.

4. How We Use Your Information

We use your information to:

  • Create, authenticate, and manage your account
  • Pre-fill and submit your loan application and share the required information with the relevant Lending Partner
  • Enable the marking of a lien or pledge on your mutual fund units through MFCentral
  • Receive and display loan status, sanction details, EMI schedule, interest, and repayment information
  • Calculate and credit any applicable rewards, cashback, or no-cost or low-cost EMI benefit
  • Provide customer support and respond to your queries and grievances
  • Detect, prevent, and investigate fraud, security incidents, and misuse, and carry out risk assessments
  • Operate, maintain, analyse, and improve the Platform and fix issues
  • Comply with our legal and regulatory obligations

We use your information only for the purposes for which it was collected or for compatible purposes. If we need to use it for a materially different purpose, we will seek your consent.

5. Legal Basis and Consent

We process your personal data on the basis of your consent and, where applicable, for other lawful purposes recognised under the Digital Personal Data Protection Act, 2023, including:

  • Processing necessary to provide a service that you have requested
  • Processing required to comply with law

Before or at the time of collecting your data, we provide a notice describing the data collected and the purpose.

You may withdraw your consent at any time as described in Section 9, although withdrawing consent may prevent us from providing some or all of the services.

6. How We Share Your Information

We do not sell your personal data. We share your information only as described below.

With Lending Partners

We share your identity, KYC, financial, mutual fund, and application information with the relevant Lending Partner, and where applicable its partner NBFCs, strictly for evaluating, processing, disbursing, and servicing your Loan. The Lending Partner returns loan status, repayment, and interest information to us so that we can support your loan journey and calculate any applicable rewards.

With Infrastructure and Service Providers

We share information with:

  • MFCentral and the Registrars and Transfer Agents (such as CAMS and KFinTech) for lien marking and pledge processing
  • KYC and verification agencies
  • Cloud and hosting providers
  • Payment service providers
  • Communication providers
  • Analytics and security providers

who process data on our behalf under contractual confidentiality and data protection obligations.

With Regulators and Authorities

We may disclose information to the Reserve Bank of India, law enforcement agencies, courts, or other authorities where required by applicable law, or to detect, prevent, or address fraud, security, or legal issues.

In a Business Transfer

In the event of a merger, acquisition, restructuring, or transfer of business, your information may be transferred to the successor entity, subject to continued protection consistent with this Policy.

7. Data Security

We adopt reasonable security safeguards and industry-standard technical and organisational measures to protect your personal data. These include:

  • Encryption of data in transit and at rest
  • Storage in secure cloud environments
  • Role-based access controls
  • Multi-factor authentication for administrative access
  • Network monitoring
  • Periodic vulnerability assessments

While we take these measures seriously, no method of transmission or storage is completely secure. We encourage you to protect your credentials and to notify us promptly of any suspected unauthorised activity.

In the event of a personal data breach, we will follow the notification procedures required under applicable law.

8. Data Retention

We retain your personal data only for as long as necessary to:

  • Provide our services
  • Comply with legal, regulatory, audit, and tax requirements
  • Resolve disputes and enforce our agreements

Identity and KYC information collected for loan processing is generally retained for the period required under applicable financial regulations, which is typically up to twenty-four (24) months after the closure of the related loan account, and longer where a specific law requires it.

Account information is retained while your account is active. When your data is no longer required, we will delete or anonymise it in accordance with applicable law.

9. Your Rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access — a summary of the personal data we hold about you and the processing activities undertaken
  • Correction — seek correction, completion, or updating of inaccurate or incomplete data
  • Erasure — seek erasure of your personal data where it is no longer required and retention is not mandated by law
  • Withdraw consent previously given
  • Nomination — nominate another individual to exercise your rights in the event of your death or incapacity
  • Grievance redressal in respect of our handling of your data

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16. We will respond within the timelines required under applicable law.

Some rights may be limited where retention or processing is required for legal or regulatory compliance.

10. Account and Data Deletion

You may request deletion of your 1Fi account and the associated personal data at any time:

On receiving your request, we will verify your identity and delete or anonymise your personal data, except for information that we are required to retain under applicable law or that is necessary in connection with an active Loan.

Important: Deleting your 1Fi account does not close any Loan or cancel any repayment obligation to a Lending Partner. Loan-related records may continue to be held by 1Fi and the Lending Partners for the period required by law and regulation.

11. Cookies and Analytics

Our website and Platform use cookies and similar technologies to:

  • Support essential functions such as authentication and security
  • Remember your preferences
  • Understand and improve how the Platform is used

You can manage or disable cookies through your browser or device settings, though some features may not function properly as a result. We may use analytics tools to collect aggregated, non-identifying information about Platform usage.

12. Children's Privacy

The Platform is intended only for individuals who are eighteen (18) years of age or older. We do not knowingly collect personal data of children.

If we become aware that we have inadvertently collected personal data of a child, we will take reasonable steps to delete it.

13. Third-Party Links and Services

The Platform may contain links to, or integrations with, third-party websites and services, including those of Lending Partners and infrastructure providers.

These third parties operate independently and have their own privacy policies, which we encourage you to review. We are not responsible for the data practices of third parties.

14. Storage Location and Cross-Border Transfers

Your personal data is stored on secure servers. Where data is stored or processed, we do so in accordance with applicable Indian law, including any requirements relating to the localisation of certain categories of data and any conditions applicable to transfers outside India.

Where any processing takes place outside India, we will ensure it is carried out in compliance with applicable law and subject to appropriate safeguards.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our services, in applicable law, or in regulatory requirements.

The updated Policy will be posted on the Platform with a revised "Last Updated" date, and, where the changes are material, we will take reasonable steps to notify you.

Your continued use of the Platform after the updated Policy takes effect constitutes your acceptance of the changes.

16. Grievance Redressal and Contact

For any questions, requests, or grievances relating to your personal data or this Policy, you may contact our Data Protection Officer:

  • Officer: Pranav Aggarwal
  • Company: Fiquity Technology Private Limited (1Fi)
  • Email: [email protected]
  • Address: 1st Floor, Orchid Business Park, Sector 48, Gurugram, Haryana, India
  • Working Hours: Monday to Friday, 10:00 AM to 6:00 PM (excluding public holidays)

We will acknowledge your request or grievance and respond within the timelines required under applicable law.

If you are not satisfied with our response, you may have the right to escalate the matter to the Data Protection Board of India or other competent authority, as provided under applicable law.