Privacy Policy

Last Updated: June 29, 2026

This Privacy Policy governs the collection, use, processing, storage, and disclosure of your personal data by PuhunanGo (the “App,” “we,” “us,” or “our”). PuhunanGo is a mobile application operated by OneScore Financing Corp., with SEC Registration No. CS201919986.

We are committed to protecting your privacy and personal data in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable rules, memorandum circulars, advisories, and guidelines issued by the National Privacy Commission and relevant regulatory authorities in the Philippines.

By installing, accessing, registering for, or using the PuhunanGo App and its services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, use, storage, and disclosure of your personal data as described in this Privacy Policy.

1. Definitions

• Personal Data means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained.
• Sensitive Personal Information refers to information defined as sensitive under applicable data protection laws, including information about age, marital status, health, education, government-issued identifiers, financial information, and other legally protected information.
• Processing refers to any operation performed upon personal data, including collection, recording, organization, storage, updating, modification, retrieval, use, consolidation, blocking, erasure, or destruction.

2. What Personal Data We Collect

To provide our services, process applications, verify identity, assess eligibility, manage accounts, prevent fraud, and comply with applicable legal and regulatory requirements, we may collect the following categories of personal data, subject to the permissions you grant and the information you provide.

A. Information You Provide Directly

• Identity Information: full name, date of birth, gender, nationality, marital status, and other profile details.
• Contact Information: mobile number, email address, residential address, and emergency or reference information where applicable.
• Government Identifiers: details from government-issued IDs, such as passport, driver’s license, UMID, SSS, TIN, or other valid identification documents for verification and Know-Your-Customer purposes.
• Financial and Employment Information: employment details, income range, source of funds, bank account or wallet details, repayment information, and other information necessary for loan disbursement, repayment, and account management.
• Application Information: requested amount, repayment period, loan application status, repayment history, and service interaction records.

B. Information We Collect From Your Device With Your Permission

To operate the App, verify identity, assess risk, protect account security, and prevent fraudulent activity, we may request access to certain device data. We collect such data only when permitted by you and only for the purposes described in this Privacy Policy.

• Contacts List: names and mobile numbers stored in your phonebook may be used for identity verification, credit scoring, risk assessment, and fraud prevention. We do not use this information for harassment, public disclosure, or unauthorized communication.
• Call Logs: call frequency, call duration, call time, and numbers contacted may be used to validate identity, support risk assessment, and detect potentially fraudulent behavior. We do not collect or record the content of your calls.
• Application List: information about applications installed on your device may be used to support risk assessment, detect suspicious activity, prevent fraud, and improve service security.
• Device Information: device model, operating system version, unique device identifiers, advertising ID, IP address, mobile network information, language settings, and technical logs may be collected for security, fraud prevention, troubleshooting, analytics, and service optimization.
• Camera and Image Access: camera access may be required for capturing ID photos, selfies, or other verification images as part of our identity verification and anti-fraud procedures.
• Location Information: where required and permitted, location-related information may be used for account security, fraud prevention, regulatory compliance, and service availability checks.

C. Information From Third Parties

We may receive information about you from credit bureaus, identity verification providers, payment partners, collection partners, service providers, publicly available sources, and regulatory or law enforcement authorities where permitted by law and necessary for our legitimate business, legal, or regulatory purposes.

3. How We Use Your Data

We process your personal data for legitimate, specific, and lawful purposes, including:

• Loan Application and Processing: to evaluate applications, verify identity, process approvals, disburse funds, manage repayments, and administer your account.
• Credit Scoring and Risk Assessment: to assess eligibility, creditworthiness, repayment capacity, fraud risk, and service suitability, including through automated or semi-automated processing where permitted by law.
• Verification and Compliance: to perform Know-Your-Customer checks, prevent identity fraud, comply with anti-money laundering requirements, and satisfy regulatory obligations.
• Communication: to contact you about application status, account updates, repayment reminders, customer support matters, service notices, and important policy updates.
• Debt Collection and Recovery: to manage overdue accounts and conduct lawful collection activities in accordance with applicable regulations and fair collection standards.
• Fraud Detection and Security: to detect, prevent, investigate, and respond to fraud, account misuse, unauthorized access, security incidents, technical issues, and illegal activity.
• Service Improvement and Analytics: to improve App performance, develop new features, analyze usage trends, troubleshoot errors, enhance user experience, and maintain service reliability.
• Legal and Regulatory Purposes: to comply with applicable laws, respond to lawful requests, establish or defend legal claims, and cooperate with regulators or competent authorities.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: when you agree to this Privacy Policy, grant device permissions, submit information, or otherwise consent to the processing of your personal data.
• Contractual Necessity: when processing is necessary to provide the services you request, evaluate your application, perform a loan agreement, or manage your account.
• Legal Obligation: when processing is necessary to comply with applicable laws, regulations, reporting obligations, court orders, or lawful requests from authorities.
• Legitimate Interest: when processing is necessary for fraud prevention, security, risk management, business operations, service improvement, or protection of our legal rights, provided that such interests do not override your fundamental rights and freedoms.

5. How We Share and Disclose Your Data

We do not sell your personal data. We may share or disclose your personal data only when necessary, lawful, and consistent with this Privacy Policy, including to:

• Service Providers and Processors: cloud service providers, SMS providers, verification vendors, analytics providers, customer support providers, payment partners, and technical service providers who process data on our behalf under appropriate confidentiality and data protection obligations.
• Credit and Verification Partners: credit bureaus, credit information providers, identity verification providers, fraud prevention providers, and risk assessment partners where permitted by law.
• Collection and Recovery Partners: authorized collection agencies, legal representatives, or recovery partners for lawful collection and account management purposes.
• Regulatory and Government Authorities: the National Privacy Commission, Securities and Exchange Commission, Anti-Money Laundering Council, courts, law enforcement agencies, or other competent authorities when required or permitted by law.
• Corporate Transactions: relevant parties in connection with a merger, acquisition, restructuring, financing, sale of assets, or other corporate transaction, subject to appropriate confidentiality and data protection safeguards.
• Affiliates and Business Partners: affiliates or business partners where necessary to provide, support, or improve our services and only in accordance with applicable law.

6. Data Security

We implement reasonable organizational, physical, and technical security measures designed to protect your personal data against accidental loss, unauthorized access, misuse, alteration, disclosure, or destruction. These measures may include:

• Encryption: data transmitted between the App and our systems may be protected using secure transmission protocols, and sensitive data may be encrypted where appropriate.
• Access Controls: access to personal data is restricted to authorized personnel, agents, and service providers who need such access for legitimate business purposes.
• Monitoring and Audit: systems may be monitored and reviewed to detect unauthorized access, misuse, security incidents, and technical vulnerabilities.
• Confidentiality Measures: employees, contractors, and service providers handling personal data are subject to confidentiality and data protection obligations.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is entirely secure. You are responsible for maintaining the confidentiality of your login credentials and for using secure devices and networks when accessing the App.

7. Data Retention and Disposal

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including service delivery, account management, legal compliance, dispute resolution, audit, accounting, and reporting requirements. We may also retain information for the period required under applicable laws and regulations.

When personal data is no longer necessary for the purposes described in this Privacy Policy, we will take reasonable steps to securely delete, anonymize, aggregate, or otherwise dispose of the data in accordance with our internal policies and applicable legal requirements.

8. Your Data Subject Rights

Subject to applicable law and verification of your identity, you may exercise the following rights under the Data Privacy Act of 2012:

• Right to be Informed: to be informed about the collection and processing of your personal data.
• Right to Access: to request access to the personal data we hold about you.
• Right to Rectification: to request correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure or Blocking: to request blocking, removal, or destruction of personal data under conditions provided by law.
• Right to Object: to object to certain processing activities, including processing based on consent or direct marketing.
• Right to Data Portability: to receive a copy of your personal data in a structured, commonly used, and machine-readable format where applicable.
• Right to File a Complaint: to lodge a complaint with the National Privacy Commission or other competent authority if you believe your data privacy rights have been violated.

To exercise your rights, please contact us through the contact details provided below. We may request additional information to verify your identity before processing your request.

9. Consent and Withdrawal of Consent

By clicking “I Agree,” granting device permissions, submitting information, or continuing to use the PuhunanGo App, you consent to the collection, use, processing, storage, and disclosure of your personal data as described in this Privacy Policy.

You may withdraw your consent at any time by contacting us or by managing permissions through your device settings. However, withdrawal of consent may limit or prevent your ability to use certain App features or services, including loan application, verification, approval, disbursement, and account support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Contact Us

If you have any questions, requests, complaints, or concerns about this Privacy Policy or the way we handle your personal data, please contact us:

© 2026 OneScore Financing Corp. All rights reserved.