Privacy Policy — National Finance PLC (Mobile App)

Last updated: 23 June 2026

National Finance PLC ("National Finance," "we," "us," or "our") operates the National Finance PLC mobile application (the "App", package ID com.eraai.nflmobileapps). This Privacy Policy explains what information we collect through the App, how we use and protect it, and the choices you have. By installing or using the App, you agree to this Policy.

1. Information We Collect

We collect the following categories of information to provide our financial services:

a) Identity & KYC information

* Full name, date of birth, gender, and other profile details

* National ID (NID) number and NID document images, which are submitted for electronic verification

* Mobile number and email address

* Residential and present address (division, district, upazila)

* Profession/occupation details

b) Biometric information

* A live selfie / facial image captured during onboarding, used for liveness detection and face matching against your NID photo to verify your identity. This is used solely for identity verification and fraud prevention.

c) Financial & account information

* Deposit account, loan account, and account statement data

* Loan applications, deposit-opening requests, repayment schedules, and service requests

* Bank and branch details you provide

* Payment and transaction information processed through our payment gateway when you make repayments or deposits

d) Authentication information

* Login credentials (username/mobile number and password) and one-time passwords (OTPs) used to verify your identity

e) Device & technical information

* Device type, operating system, app version, and basic technical/diagnostic data needed to operate the App and maintain security

2. Device Permissions

The App may request the following permissions, which you can grant or deny:

* Camera — to capture your NID document and selfie during account onboarding (e-KYC) and to update your profile photo.

* Photos / Storage — to select and upload images where applicable.

* Internet / Network access — required to communicate with our secure servers.

You may decline permissions, but some features (such as new-account registration and e-KYC) will not function without them.

3. How We Use Your Information

We use your information to:

* Create and manage your account and verify your identity (KYC), including NID verification, liveness checks, and face matching;

* Provide and operate our financial services (deposits, loans, statements, repayments, service requests);

* Process payments and transactions;

* Authenticate logins and secure your account (OTP, password);

* Communicate with you about your account, requests, and important notices;

* Comply with legal, regulatory, and audit obligations applicable to financial institutions in Bangladesh;

* Prevent fraud, abuse, and unauthorized access, and improve the App's reliability and security.

4. How We Share Your Information

We do not sell your personal information. We may share it only with:

* Identity-verification and AI service providers that perform NID verification, liveness detection, and face matching on our behalf;

* Payment gateway and banking partners to process transactions;

* Regulators and government authorities (e.g., Bangladesh Bank) where required by law or regulation;

* Service providers who host, maintain, or support our systems under confidentiality obligations.

All third parties are required to protect your data and use it only for the purposes we specify.

5. Data Storage & Security

We apply administrative, technical, and physical safeguards to protect your information, including encrypted transmission and restricted access controls. Information is stored on secured servers. While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

6. Data Retention

We retain your personal and financial information for as long as your account is active and as required to comply with legal, regulatory, accounting, and audit obligations applicable to non-bank financial institutions in Bangladesh. When no longer required, data is securely deleted or anonymized.

7. Your Rights & Data Deletion

You may:

* Access and update your profile information within the App;

* Request a copy of the personal data we hold about you;

* Request deletion of your account and associated personal data, subject to legal and regulatory retention requirements.

To request access or deletion, contact us using the details in Section 10. Certain records may be retained where the law requires us to keep them.

8. Children's Privacy

The App is intended for users 18 years and older and is not directed to children. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

10. Contact Us

If you have questions or requests regarding this Privacy Policy or your data, contact:

National Finance PLC,
Borak Mehnur (Level-19),51/B Kemal Ataturk Avenue,
Banani, Dhaka–1213,
Email: info@nfl.com.bd,
Phone: +88 09609016647
Website: https://nfl.com.bd