Privacy Policy

Smart Qarz (“Smart Qarz”, “we”, “us”, or “our”) operates a digital lending platform that lets users register, complete identity verification (KYC), apply for loans, and manage repayments. This Privacy Policy describes how we handle your information when you use our website and application.

By using Smart Qarz, you agree to the collection and use of information as described in this policy.

We collect only the information needed to provide our services:

• Account information: your full name, mobile number, and a password you set.
• Identity / KYC information: your CNIC number, photos of your CNIC (front and back), a selfie, date of birth, and address — used solely to verify your identity.
• Financial information: the loan package you select, payment confirmation screenshots you upload, and the account details you provide for withdrawals.
• Technical information: basic device and log data generated when you use the service.

• To create and manage your account.
• To verify your identity and meet Know-Your-Customer obligations.
• To process loan applications, payments, and withdrawals.
• To detect, prevent, and investigate fraud or misuse.
• To provide customer support and send you service notifications.
• To comply with applicable laws and lawful requests from authorities.

We do not sell your personal information. We may share it only:

• with trusted service providers who help us operate the platform, under confidentiality obligations;
• when required by law, regulation, court order, or a valid request from a government authority;
• to protect the rights, safety, and security of our users and our platform;
• with your consent, or at your direction.

We take the security of your data seriously. Passwords and security answers are stored as one-way encrypted hashes — never in plain text. Identity documents and payment screenshots are stored outside the public web area and are accessible only through authenticated, access-controlled requests. We restrict internal access to personal data to authorised personnel only.

No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

We keep your information for as long as your account is active and as needed to provide our services. We may retain certain records for longer where required to comply with legal, regulatory, tax, or fraud-prevention obligations. When data is no longer needed, we delete or anonymise it.

Subject to applicable law, you may:

• access the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your account and associated data;
• withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at info@smartqarz.pk.

We use a secure, signed session cookie to keep you logged in. This cookie is essential to the operation of the service and is not used for advertising or third-party tracking.

Smart Qarz is intended only for individuals who are 18 years of age or older. We do not knowingly collect information from anyone under 18.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be communicated through the app or by other appropriate means.

If you have questions about this Privacy Policy or how your data is handled, contact us at info@smartqarz.pk.