Anifund is in development. This website does not take loan applications and does not ask you to upload an ID, a selfie, contacts, or SMS. The practices below describe the app when it is offered. They are not a description of data this website is collecting today.
This Privacy Policy (“Policy”) explains how TIWALA LENDING INVESTOR, INC. (“Company”, “we”, “us”) handles personal information of users (“you”) in connection with Anifund (“App”), a mobile lending app. It is written for Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules. If you download, register, or use the App after it opens, you acknowledge this Policy. The Terms & Conditions apply together with it.
1. Philippine data privacy law
We will process personal data fairly, lawfully, and only as far as a stated purpose requires. The governing ideas are transparency, legitimate purpose, and proportionality.
2. Data Protection Officer
The Company will name a Data Protection Officer before the App asks for personal information. That person’s email, phone number, and office address will be published on this page. Until those details are published, do not send identity documents or loan information through this website. There is no form here for that purpose.
3. Information the App is built to collect
3.1 Information you provide
- Full name, date of birth, gender, civil status, and nationality
- A government ID, such as SSS, GSIS, PhilHealth, passport, driver’s license, UMID, or voter’s ID
- Residential and permanent address
- Mobile number and email address
- Employment details: employer, position, income, and length of employment
- A bank account or e-wallet in your name, for disbursement and repayment
- Loan details you enter: purpose, amount, and preferred term
3.2 Information collected from the device
- Device model, operating system, and resettable device identifiers
- IP address, mobile network, and approximate location if you allow it
- App usage and diagnostic logs
- SMS data only if you grant that permission, and only for the purposes in section 4.1
3.3 Information from other organizations
- Credit reports, including from the Credit Information Corporation where the law allows
- Identity-verification providers
- Payment partners that move loan funds or repayments
4. Permissions on your phone
Each permission is requested on its own, with a short explanation. You can refuse or turn a permission off in your device settings. Refusing a permission may mean the App cannot finish a review or a security check.
4.1 SMS
The mobile number you enter may be used to send service messages that are not advertising. Those messages can include one-time passwords, security alerts, application updates, disbursement or repayment notices, repayment reminders, and customer-service messages.
If you give a separate, explicit permission, the App may read SMS from a limited recent period that is relevant to an application: sender number and name, message content, time, and messages tied to income, bills, repayments, or account security. That read is for identity checks, credit assessment, fraud prevention, account security, and legal duties.
SMS data is not used for advertising, is not sold, and is not shared with an unrelated third party unless you consent or the law requires it. You can withdraw the permission in your settings. A request to delete personal data will be handled after we can verify it, except where a law, a loan record, a dispute, or a regulator requires us to keep it.
4.2 Camera
The camera is for know-your-customer checks: a photo of a government ID, a selfie or liveness check, matching the applicant to the ID, and blocking impersonation or duplicate applications. The camera is used only when you start that step. The App is not built to run the camera in the background, to record unrelated audio or video, or to open your photo library or other files.
4.3 Approximate location
The App is not built to collect precise GPS tracks or to follow your location in the background. It may use the address you type, the rough region of your IP address, and network information you allow, to see whether the service is available and to spot irregular applications. That information is not for advertising.
4.4 Installed applications
If you allow it, the App may read the names, package names, versions, and install or update times of applications on the device. The purpose is to detect fraud tools, cloned devices, emulators, and other account risks. The App is not built to read chats, files, photos, or account contents inside other apps. This information is not for advertising and is not sold.
4.5 Emergency contacts
The App may ask for two references: name, relationship, and phone number. You type and confirm those details. The App is not built to upload your full address book or any contact you did not submit. You should have a proper basis for sharing another person’s number. Reference details are for identity checks, application review, account security, fraud prevention, repayment reminders, or other contact the law allows. They are not for advertising.
4.6 Device status
The App may collect device model and brand, operating-system and app versions, language, network type, carrier, IP address, crash logs, and login or security events. It is not built to collect IMEI, IMSI, or SIM serial numbers. This information is for running the App, securing accounts, spotting duplicate or unusual applications, support, and legal compliance. It is not sold and is not used for unrelated advertising.
5. Why the data is used
- To receive and assess a loan application, including credit scoring
- To verify identity and reduce fraud
- To disburse an approved loan and collect repayment
- To answer support requests and send service messages
- To meet reporting duties to regulators, including the SEC where those duties apply
- To maintain and improve the App
- To send marketing only where you have given a separate consent
6. Sharing
We do not sell personal information. When the App is operating, data may be shared with:
- Credit bureaus and the Credit Information Corporation, where the law requires or allows it
- Providers who host systems, move payments, check identity, or send SMS, under a written processing arrangement
- Collection agents, only under a strict processing arrangement and in line with SEC Memorandum Circular No. 18, series of 2019
- Regulators, courts, and law enforcement when the law requires it
- A buyer or successor of the business, if the Company is merged or reorganized
7. Collection conduct
Collection, when a loan is overdue, will follow SEC Memorandum Circular No. 18, series of 2019, and Republic Act No. 11765. In particular:
- We will not contact people in your phone’s contact list to collect a debt
- We will not send threatening, harassing, or abusive messages
- We will not publish your debt or your personal information
- Collection will be done by identified, authorized staff
- You may complain to the SEC about abusive collection
8. How long data is kept
- Records of a loan that was granted: for the life of the loan and up to five years after it is fully paid
- Applications that are declined: up to two years
- Identity records: for the period required by know-your-customer and anti-money-laundering rules
- Marketing records: until you withdraw consent
After the relevant period, the data is deleted or anonymized, unless the law requires a longer hold.
9. Security
The Company will use access controls, encryption in transit and at rest, and a process for security incidents. If a breach is likely to affect your rights, the Company will notify the proper authority and affected people as the Data Privacy Act requires.
10. Your rights
Under the Data Privacy Act you may ask to be informed, to access your data, to correct it, to block or erase it where the law allows, to object to certain processing including direct marketing, to receive it in a portable form where that right applies, and to complain to the National Privacy Commission.
If a lending decision is made by an automated score, you may ask for a person to review it once the Data Protection Officer’s contact details are published. A response to a rights request is intended within fifteen business days.
11. Cookies and analytics
This website does not set advertising cookies. The App may later use an analytics tool to understand crashes and general use. That use will be described in the App before it is switched on, and you will be able to limit advertising identifiers in your device settings.
12. Children
Anifund is not for anyone under 18. We do not knowingly collect a child’s personal information. If you believe a child has sent us information, contact us once a published address exists and we will delete it.
13. Changes
We may update this Policy. A material change will be posted on this website, and in the App once the App is live, at least seven days before it takes effect. Using the App after that date means you accept the updated Policy.
14. Contact
Company: TIWALA LENDING INVESTOR, INC.
App: Anifund
The Data Protection Officer’s email, phone number, office address, and the Company’s registration details will be added to this page before the App collects personal information. This Policy is published in English.
Last updated: 22 October 2026.