FinApp Privacy Notice

Powered and operated by CK Tech Solutions

Effective Date: 30 September 2026

Last Updated: 30 September 2026

Important: FinApp is a software platform provided to pawn-broking, gold-loan, and related businesses. Such businesses may use FinApp to collect and manage personal data relating to their customers and borrowers. This Privacy Notice explains how personal data is handled within the FinApp platform and the respective roles of CK Tech and FinApp customers.

1. About FinApp

FinApp is a software-as-a-service platform developed and operated by CK Tech Solutions.

FinApp provides functionality for pawn-broking and gold-loan businesses, including customer management, KYC information, loan management, pledge management, interest and payment management, transaction records, reports, communications, and related business operations.

CK Tech Solutions is operated by CHEMPUKUTTI E (Sole Proprietor).

2. Roles of CK Tech and FinApp Customers

FinApp customers are independent businesses that use the platform to manage their own customers, borrowers, loans, pledges, transactions, and related business activities.

Depending on the processing activity, the FinApp customer may determine why and how personal data relating to its customers is collected and used, while CK Tech provides the technology and services required to operate the FinApp platform.

FinApp customers are responsible for using FinApp in accordance with applicable laws and for providing appropriate notices and obtaining any consent or other lawful basis required for the personal data they enter into FinApp.

CK Tech processes information submitted through FinApp primarily for providing, maintaining, securing, supporting, and improving the FinApp service and as otherwise permitted or required by applicable law and contractual arrangements.

3. Personal Data That May Be Processed

Depending on the features used by a FinApp customer, the platform may process the following categories of personal data:

3.1 Customer Identification Information
  • Full name
  • Mobile number
  • Residential or communication address
  • Date of birth
  • Photograph
  • Nominee information
3.2 KYC and Identity Information
  • Aadhaar number
  • PAN
  • KYC-related information
  • KYC document information or copies uploaded by the FinApp customer
  • Other identity information entered by the FinApp customer

FinApp currently does not directly integrate with an external KYC verification provider. CK Tech may introduce KYC integrations in the future, subject to appropriate technical, contractual, legal, and privacy review.

3.3 Financial and Banking Information

Depending on the functionality used by the FinApp customer, information may include:

  • Bank account-related information
  • Loan-related financial information
  • Payment and collection information
  • Transaction information
  • Interest and repayment information

FinApp does not intentionally store complete card, UPI, or other payment-instrument credentials when payments are processed through supported payment providers.

FinApp may store transaction identifiers, payment references, payment status, and other information necessary to reconcile and manage transactions.

3.4 Gold, Pledge and Loan Information
  • Loan account information
  • Sanctioned and outstanding loan amounts
  • Interest and repayment information
  • Gold and jewellery details
  • Pledge information
  • Valuation and related collateral information
  • Loan renewal and repledge information
  • Customer transaction history
3.5 Customer Documents and Attachments

FinApp may allow its business customers to upload and store documents or attachments relating to customers, loans, pledges, KYC, or other business records.

The type and content of such documents depend on how each FinApp customer uses the platform.

4. Purposes of Processing

Personal data may be processed through FinApp for purposes including:

  • Creating and managing customer records.
  • Managing borrower and customer information.
  • Performing and recording KYC-related activities.
  • Creating and managing loan accounts.
  • Recording gold, jewellery, and pledge information.
  • Calculating and managing interest and repayments.
  • Recording payments and financial transactions.
  • Generating receipts, reports, statements, and business records.
  • Managing customer communications.
  • Sending authorised SMS, WhatsApp, and email communications.
  • Supporting mobile application notifications.
  • Providing customer support and troubleshooting.
  • Maintaining application security and reliability.
  • Detecting and preventing unauthorised access, misuse, or fraud.
  • Maintaining backups and business continuity.
  • Improving the performance and functionality of FinApp.
  • Complying with applicable legal requirements.

5. KYC and Aadhaar Information

FinApp may allow its customers to enter Aadhaar numbers and other identity information into the platform as part of their business processes.

FinApp currently does not directly perform Aadhaar authentication or integrate with an external KYC verification provider.

Where a FinApp customer chooses to collect Aadhaar or other KYC information from its customers, the FinApp customer is responsible for ensuring that such collection, use, storage, and disclosure is carried out in accordance with applicable law and the requirements applicable to its business.

CK Tech may introduce third-party KYC services in the future. Any such integration will be subject to appropriate technical, contractual, security, and privacy review before being made available for use.

6. Communication Services

FinApp may use third-party communication service providers to send authorised communications on behalf of FinApp customers.

Current communication services include:

  • SMS: MSG91
  • WhatsApp: MSG91
  • Email: MSG91
  • Push Notifications: Firebase / Firebase Cloud Messaging

Depending on the communication, information such as the recipient's mobile number, email address, message content, customer reference, transaction reference, or notification token may be processed by the relevant communication provider.

7. Payment Services

FinApp may integrate with supported payment service providers to enable payment-related functionality.

Current payment integrations include:

  • Cashfree
  • Razorpay
  • Federal Bank

FinApp is designed not to store complete card, UPI, or other payment-instrument credentials.

FinApp may store transaction identifiers, payment references, payment status, amounts, dates, and other information required for reconciliation and transaction management.

Payment processing may be subject to the respective privacy policies and terms of the relevant payment service provider.

8. Mobile Application

The FinApp mobile application may process information required to provide its application functionality.

The current FinApp mobile application does not intentionally collect:

  • GPS or precise location information
  • Contacts
  • Camera images for general application functionality
  • Files or documents from the device for general application functionality

The application may use a push notification token to deliver application notifications through Firebase Cloud Messaging.

9. Hosting, Infrastructure and Backups

FinApp is hosted using Amazon Web Services (AWS) infrastructure.

Current FinApp infrastructure is hosted in the AWS Mumbai region (ap-south-1).

FinApp uses cloud infrastructure and MySQL database technology to store and process application data.

CK Tech maintains backup and recovery mechanisms for FinApp infrastructure and database environments.

  • Infrastructure Backup: Backup of the relevant server/instance environment is performed daily.
  • Database Backup: FinApp database backups are performed at approximately 3-hour intervals.

Backup and recovery procedures are intended to support service continuity, data recovery, and restoration in the event of system failure, accidental data loss, or other operational incidents.

Access to production infrastructure, databases, and backups is restricted to authorised personnel based on operational requirements.

Backup retention periods may vary depending on the applicable infrastructure configuration, operational requirements, security considerations, and applicable legal or contractual requirements.

10. CK Tech Support and Administrative Access

Authorised CK Tech personnel may access FinApp customer or application data when reasonably necessary for:

  • Technical support
  • Troubleshooting
  • Application maintenance
  • Bug investigation
  • Security investigation
  • Data recovery or operational support
  • Other authorised service-management purposes

Administrative access is restricted to authorised personnel and should be used only for legitimate business or technical purposes.

11. Third-Party Service Providers

FinApp relies on selected third-party technology and service providers to operate certain features.

Current categories and providers include:

  • Cloud Infrastructure: Amazon Web Services (AWS)
  • SMS: MSG91
  • WhatsApp: MSG91
  • Email: MSG91
  • Push Notifications: Firebase
  • Payments: Cashfree, Razorpay, Federal Bank

These providers may process personal data only to the extent necessary for the services they provide to FinApp and its customers, subject to their applicable terms and contractual arrangements.

12. Future AI and OCR Processing

CK Tech is evaluating the use of AI-powered OCR technology to assist with document and data extraction within FinApp.

The planned OCR functionality may use third-party AI services, including Google Gemini or related Google AI services.

Such functionality is not currently represented as an active FinApp data-processing service under this notice.

Before introducing such functionality, CK Tech intends to assess the applicable privacy, security, contractual, data-processing, retention, and access requirements and update the relevant privacy information where necessary.

FinApp customers will be informed of material changes to processing where required by applicable law.

13. Data Security

CK Tech uses reasonable technical and organisational measures designed to protect FinApp data against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Depending on the environment and service, these measures may include:

  • Authentication and access controls
  • Role-based access controls
  • Restricted administrative access
  • Secure server configuration
  • Protected communication channels
  • Application and infrastructure monitoring
  • Logging and audit mechanisms
  • Backup and recovery mechanisms
  • Security updates and maintenance
  • Operational and administrative safeguards

No electronic storage or transmission system can be guaranteed to be completely secure. CK Tech nevertheless takes reasonable measures appropriate to the nature of the data and the FinApp services.

14. Data Retention

FinApp data retention periods may depend on the nature of the information, the requirements of the FinApp customer, contractual requirements, applicable legal or regulatory obligations, and legitimate business or security requirements.

CK Tech is currently formalising a standard data-retention and deletion process for FinApp customer environments.

When data is no longer required and there is no legal, contractual, security, or other applicable reason to retain it, CK Tech may delete, anonymise, or otherwise dispose of the relevant data in accordance with applicable requirements and the applicable customer agreement.

15. Customer Responsibilities

FinApp customers are responsible for:

  • Collecting personal data only where they have an appropriate legal basis to do so.
  • Providing appropriate privacy notices to their customers and borrowers where required.
  • Obtaining consent where consent is required for the relevant processing activity.
  • Ensuring that information entered into FinApp is accurate and lawfully obtained.
  • Using FinApp data only for lawful and authorised business purposes.
  • Managing user access within their FinApp account.
  • Responding to borrower/customer privacy requests where the FinApp customer is responsible for doing so.
  • Not uploading information that they are not legally authorised to collect or process.

16. Privacy Requests and Grievances

Individuals who believe that their personal data has been processed through FinApp may contact CK Tech using the details below.

Where the relevant processing is carried out by a FinApp customer for its own business purposes, CK Tech may refer the request to the relevant FinApp customer where that customer is responsible for the relevant processing activity.

CK Tech will cooperate with its FinApp customers as reasonably required for handling applicable privacy requests relating to personal data processed through the platform.

17. Withdrawal of Consent

Where processing is based on consent, the relevant FinApp customer should provide an appropriate mechanism for the individual to withdraw consent.

CK Tech may assist the FinApp customer with technically supported requests relating to data processing within the FinApp platform.

Withdrawal of consent does not affect processing that was lawfully carried out before withdrawal and does not require deletion where retention is required or permitted by applicable law.

18. Data Security Incidents and Breaches

CK Tech maintains processes for identifying, assessing, containing, investigating, and responding to security incidents affecting FinApp systems.

Where a personal-data breach or security incident occurs, CK Tech will take appropriate measures based on the nature and impact of the incident and applicable legal, regulatory, and contractual requirements.

Where notification to a FinApp customer, affected individual, or relevant authority is required, CK Tech will follow the applicable notification and incident-response requirements.

19. Changes to This Privacy Notice

CK Tech may update this Privacy Notice when there are changes to FinApp functionality, third-party service providers, processing activities, security practices, or applicable legal requirements.

Material changes will be communicated through appropriate channels where required by applicable law or contractual arrangements.

20. Contact and Grievance Redressal

FinApp Privacy Contact

Organisation: CK Tech Solutions

Proprietor: CHEMPUKUTTI E (Sole Proprietor)

Privacy / Grievance Contact: CHEMPUKUTTI E

Email: privacy@cktechindia.com

General Email: contact@cktechindia.com

Business Contact: 9489856907

Address: 46, 1st Street, Block AD, Anna Nagar, Chennai, Tamil Nadu, India

Working Hours: Monday - Friday, 9:00 AM - 6:00 PM IST

21. Governing Law

This Privacy Notice is governed by the applicable laws of India.

Any dispute relating to this Privacy Notice shall be subject to the jurisdiction of the competent courts having jurisdiction over CK Tech Solutions, subject to applicable law.

© 2026 CK Tech Solutions. All rights reserved.

Chat on WhatsApp