Privacy Policy

1. Scope

This Privacy Policy applies to DISADECO M, including account registration, login, member profile, savings, share capital, time deposits, loans, loan payments, transaction history, notifications, chat, identity verification, password reset, security settings, and related support features.

It applies to members, applicants, authorized representatives, and other users who access DISADECO M.

2. Personal Data We Collect

DISADECO M may collect and process the following personal data:

• Account and membership details, such as name, client code or member ID, email address, contact number, address, birthday, gender, account status, and profile photo.
• Authentication and security data, such as login credentials, session tokens, M-PIN settings, biometric login preference, device identifiers, login attempts, security events, and password reset activity.
• Identity verification data, such as valid ID images, selfie or liveness capture, verification results, timestamps, and review notes.
• Cooperative and financial records shown in the app, including share capital, savings accounts, time deposits, account balances, loan applications, loan details, payment schedules, repayments, and transaction history.
• Communication data, such as notifications, service messages, support requests, chat conversations, attachments, and message delivery status.
• Technical and usage data, such as app version, device type, IP address, crash or error logs, API activity, and other diagnostic information needed to secure and improve the service.

3. How We Use Personal Data

DISADECO may use personal data for the following purposes:

• To register, verify, authenticate, and maintain your account.
• To show your cooperative accounts, balances, share capital, time deposits, loans, payments, notifications, and transaction history.
• To process identity verification, password reset, security authentication, loan applications, member requests, and support concerns.
• To send OTPs, service messages, account alerts, reminders, announcements, transaction notices, and other app notifications.
• To protect members, detect misuse, prevent fraud, investigate suspicious activity, and enforce account restrictions.
• To comply with cooperative, accounting, audit, regulatory, legal, and reporting obligations.
• To improve app reliability, performance, usability, security, and member service.

4. Identity Verification and Biometrics

DISADECO M may request valid ID images, selfie capture, liveness detection, or related verification data to confirm that a person registering, logging in, or requesting access is the rightful member or an authorized user.

Fingerprint or face unlock used for app access is handled by your device operating system. DISADECO M does not receive or store the biometric template used by your device for fingerprint or face unlock.

5. Sharing of Personal Data

DISADECO does not sell your personal data.

Personal data may be shared only when necessary and appropriate with:

• Authorized DISADECO officers, staff, administrators, reviewers, and support personnel.
• Technology service providers that help operate the app, servers, databases, chat, OTP, SMS, email, push notifications, security, hosting, backups, diagnostics, and related systems.
• Payment, financial, audit, or cooperative service partners, where applicable to the service requested.
• Regulators, auditors, courts, law enforcement, government agencies, or other authorities when required by law or lawful process.
• Other parties when you give consent or when sharing is needed to deliver the requested service.

DISADECO expects service providers and authorized recipients to protect personal data and use it only for legitimate and authorized purposes.

6. Retention

DISADECO keeps personal data only for as long as needed for the purposes described in this Policy, while your account is active, while requests or transactions are being processed, or as required for cooperative records, audit, legal, regulatory, accounting, dispute, and security purposes.

When personal data is no longer needed, DISADECO will delete, anonymize, archive, or securely restrict it according to applicable policies and law.

7. Security

DISADECO M uses reasonable administrative, technical, and physical safeguards to protect personal data. These may include authenticated sessions, access controls, password protection, M-PIN or biometric device prompts, restricted staff access, audit logs, secure transmission where deployed, backups, monitoring, and investigation of unauthorized activity.

No system is completely risk-free. Users are responsible for protecting their device, password, M-PIN, OTPs, and account access. Do not share your password, M-PIN, OTP, or device access with anyone.

8. Your Privacy Rights

Subject to applicable law and verification of your identity, you may have the right to:

• Be informed about how your personal data is collected and used.
• Access personal data that DISADECO holds about you.
• Request correction of inaccurate or outdated personal data.
• Object to certain processing where allowed by law.
• Request deletion, blocking, or restriction of personal data where allowed by law.
• Request data portability where applicable.
• File a complaint with the National Privacy Commission.
• Claim damages when provided by law.

Some requests may be limited by legal, regulatory, accounting, audit, security, or cooperative record-keeping requirements.

9. Your Choices

You may:

• Update certain account details through DISADECO or authorized support channels.
• Manage app notification permissions in your device settings.
• Disable fingerprint login or update security preferences in the Privacy & Security settings of the app.
• Contact DISADECO if you believe your account, password, M-PIN, OTP, device, or personal data has been compromised.

10. Children and Authorized Use

DISADECO M is intended for DISADECO members and authorized users. If an account involves a minor, representative, guardian, attorney-in-fact, or other special authority, DISADECO may require additional verification or authorization before processing requests.

11. Changes to This Policy

DISADECO may update this Privacy Policy to reflect app changes, operational requirements, legal obligations, or privacy practices. Material changes may be announced through the app, official channels, or other appropriate means.

Continued use of DISADECO M after an update means you acknowledge the updated Policy.

12. Contact

For privacy questions, correction requests, account concerns, or data-subject rights requests, please contact DISADECO through its official office, support, or administrator channels and ask to be referred to the Data Protection Officer or authorized privacy representative.