Privacy Policy

Fluxus Forge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lending infrastructure platform, our mobile applications, and related services.

This Privacy Policy applies to the Fluxus Forge website, our lending and collections platform, and the following mobile applications operated by Fluxus Forge:

• Quikkred Collect (Android) — An Android app for collection agents to track allocations, log customer visits, capture receipts, and update recovery status in real time — powered by Fluxus Forge's Collection Suite.
• Quikkred Connect (Android) — An Android app for end-customers to apply for retail loans, complete KYC, track applications, and manage EMIs — powered by Fluxus Forge's Lending Platform.
• VIKAM (Android) — A money-management app for everyday savers — track income and expenses, set savings goals, run savings circles, never miss a bill, and watch your Paisa Score improve. Available in Hindi and nine other Indian languages. VIKAM is not a bank or NBFC and does not offer, broker, or disburse loans.

By installing or using any of these apps, you agree to the data practices described in this policy. The apps serve different audiences and collect different data. Where an app collects data unique to its purpose — location for field collections, KYC documents for loan applications, transaction SMS for expense tracking — that processing is described in its own section below and disclosed inside the app at the point of collection. Sections that apply to a single app are labelled with that app's name.

3.1 Information You Provide

• Contact information (name, email, phone number, company name)
• Account credentials
• Business information related to your lending operations
• Identity & KYC documents submitted via Quikkred Connect (PAN, Aadhaar, address proof, selfie/liveness, bank details) when applying for a loan
• Loan and EMI details, payment receipts, and visit notes captured via Quikkred Collect
• Money-management entries you create in VIKAM: income and expense records, bill reminders, savings goals, savings-circle contributions, and udhaar/khata entries (including names and phone numbers you type in yourself)
• Profile details you choose to add in VIKAM, such as employment type, income range, city and PIN code, PAN and date of birth, and assets you own
• Communications with our team

3.2 Automatically Collected Information

• Device and browser information (and, for our Android apps, device model, OS version, and app version)
• IP address and approximate location data
• Precise location, including in the background — i.e. when the app is closed or not in use (only in Quikkred Collect, with your explicit consent, while on duty with an active assignment; see Section 5)
• Financial transaction SMS on your device (only in VIKAM, only with your explicit consent, and only messages identified as financial; see Section 6)
• In-app activity used to compute your Paisa Score and rewards in VIKAM — check-in streaks, bills marked paid on time, savings-goal progress, and circle contributions
• Usage patterns and platform analytics
• Cookies and similar tracking technologies (web only)

We use the collected information to:

• Provide and maintain our lending platform services
• Provide money-management features in VIKAM — expense tracking, bill reminders, savings goals, savings circles, and your Paisa Score
• Operate rewards, streaks, referrals and draws, and detect abuse of them
• Process transactions and send related notifications
• Respond to inquiries and provide customer support
• Send marketing communications (with your consent)
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

We do not sell your personal data, and we do not use your financial data, SMS content, bank data, or credit data for advertising or ad targeting.

Quikkred Collect is a field-collection app used by loan-recovery agents (contractors). Because of its field-operations purpose it collects certain sensitive data, which we describe in detail here. All collection below happens only after you grant explicit in-app consent, and a prominent disclosure is shown inside the app before any system permission prompt appears.

5.1 Background Location

With your permission, Quikkred Collect collects precise location in the background — that is, even when the app is closed or not in active use. Background location is collected only while you are on duty with an active, accepted case, and collection stops when no case is active. We use it to:

• Verify field activity — confirm the agent reached the assigned borrower address
• Enable geofenced visit check-in
• Support agent safety and SOS while on an active assignment

An ongoing notification is shown while your location is being tracked. You can revoke location permission at any time in your device settings; doing so will limit field-verification features.

5.2 Audio Recording

During in-person, on-site collection visits, DRA-certified agents may record audio for regulatory compliance and dispute resolution. Recording is always started explicitly by the agent. Quikkred Collect does not record telephone or cellular phone calls — only audio of in-person field visits is captured.

5.3 Screen Recording

During recorded payment-collection visits, the app may capture the device screen using Android's media projection for regulatory compliance and dispute resolution. Screen capture is started explicitly by the agent, and Android's system consent dialog is always shown before any capture begins.

5.4 Photos & Camera

Quikkred Collect uses the camera to capture photos as proof of visit (for example, receipts and on-site documentation) and for KYC where applicable.

Location, audio, screen recordings, and photos collected through Quikkred Collect are stored securely, used only for the purposes described above, shared only with the relevant lender/operations team and the service providers listed in Section 7, and retained in line with applicable regulatory requirements.

VIKAM is a money-management app — it helps you track what you earn and spend, save toward goals, run savings circles with people you trust, and see a Paisa Score that reflects your money habits. VIKAM is not a bank or an NBFC. It does not offer, broker, promise, or disburse loans, and it does not decide whether anyone qualifies for credit.

To do its job, VIKAM can read certain sensitive financial data. Every item below is optional, off until you turn it on, and reversible. Before any Android permission prompt appears, VIKAM shows you a plain-language screen explaining what will be read and why. Nothing in this section is collected if you decline.

6.1 Transaction SMS (READ_SMS / RECEIVE_SMS)

With your explicit consent, VIKAM reads SMS messages on your device to build your spending ledger automatically, so you don't have to type in every transaction. This is a core feature of the app for users who choose it, and it is available on Android only.

• What we read: messages identified as financial — bank debit and credit alerts, card transactions, UPI confirmations, balance updates, EMI and bill notifications, and payment failure or bounce alerts.
• What we filter out: one-time passwords (OTPs), promotional and marketing messages, and personal messages. These are discarded on your device before anything leaves your phone, and filtered again on our servers.
• What we extract: amount, direction (money in or out), date, merchant or sender name, and account balance where present.
• What we do with it: build your expense and income ledger, spot missed or bounced payments, and update your Paisa Score.
• What we never do: read or transmit OTPs, send SMS on your behalf, read your message threads with other people, or use any SMS content for advertising.

To convert message text into structured fields, the financial messages we retain are processed by a third-party AI text-parsing service under contract, which may process them outside India. That service is permitted to use the text only to return the extracted fields to us.

You can turn SMS reading off at any time in VIKAM's settings or by revoking the SMS permission in your device settings. If you do, VIKAM keeps working — you can enter transactions manually or connect your bank instead (Section 6.2).

6.2 Bank Data via Account Aggregator

You can choose to connect a bank account through India's RBI-regulated Account Aggregator framework. If you do, you give consent inside the Account Aggregator's own flow, and we receive a read-only summary of your account activity — salary and other credits, balances, obligations, and bounced payments — for the period and purpose you approved. We never receive your bank login credentials, and we cannot move money. Consent is time-bound and you can revoke it in the Account Aggregator app or in VIKAM.

6.3 Credit Bureau Report

If you ask VIKAM to show your credit score, we fetch your credit report from a licensed credit information company through a regulated partner, using the PAN and identity details you provide. This happens only after you give separate, explicit consent for a credit check, and each fetch is recorded in your consent log. Declining does not restrict any other feature.

6.4 Identity Verification (KYC)

If you choose to verify your identity, VIKAM validates your PAN and, for bank verification, performs a penny-drop to confirm the account belongs to you, through a regulated verification partner. We store the verification result and masked identifiers, not full document images beyond what verification requires.

6.5 People You Add (Khata & Guarantor)

Khata and Guarantor let you record money you have lent or borrowed and ask people to vouch for you. VIKAM does not read or upload your device contact list. We store only the names and phone numbers you type in yourself, and we use them only to show you those records and to notify the person you asked to vouch.

6.6 Sharing with Lending Partners

VIKAM can share your financial profile with a lending partner so they can assess you for credit — but only if you give separate, explicit consent for that specific purpose. This consent is not bundled with sign-up and is not required to use any money-management feature. If you never grant it, nothing about you is shared with a lender.

When you do consent, the partner receives a structured packet containing your identity and KYC status, employment and income details, cash-flow summary, credit bureau summary, and Paisa Score. The lending partner — not VIKAM — decides whether to offer credit, on what terms, or at all. Every share is recorded in an audit log that lists exactly which fields were shared, with whom, and when; you can request a copy of that log at any time. You can withdraw this consent whenever you like, which stops all future sharing.

6.7 At a Glance

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our platform, including cloud hosting, SMS/OTP delivery, push notifications, and the AI text-parsing service described in Section 6.1
• Integration Partners: KYC and identity-verification providers, credit bureaus, Account Aggregators, and payment gateways as required for platform functionality
• Lending Partners: For VIKAM users only, and only with your separate explicit consent for that purpose, as described in Section 6.6
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We require every service provider to process your data only on our instructions and only for the purpose we engaged them for. We do not sell your data, and we do not share it with data brokers or advertisers.

We implement industry-standard security measures including:

• End-to-end encryption for data in transit and at rest
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Compliance with RBI data localization requirements
• ISO 27001 certified infrastructure

We retain your data for as long as necessary to provide our services and comply with legal obligations. Financial records are retained as per RBI guidelines. Personal data collected by our apps is stored on servers located in India, except where a service provider named in this policy processes it elsewhere on our instructions. You may request deletion of your data subject to our legal and regulatory requirements.

You have the right to:

• Access and receive a copy of your personal data — VIKAM users can download their full data bundle from within the app
• Correct inaccurate or incomplete data
• Request deletion of your account and data (subject to legal requirements)
• Withdraw any consent you have given, including consent to read SMS, connect a bank account, run a credit check, or share your data with a lending partner
• Object to processing of your data
• Withdraw consent for marketing communications
• Data portability where applicable

To delete your account and data, use the in-app deletion option or submit a request at fluxusforge.in/delete-account. Withdrawing a consent stops the related processing going forward; it does not undo processing already carried out lawfully, and some records may be retained where the law requires it.

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings. Essential cookies are required for platform functionality.

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, to exercise your rights, or to raise a grievance about how we handle your data, contact us at:

Email: [email protected]
Address: 1008, 10th Floor, Vikrant Tower, Rajouri Garden, New Delhi
Delhi NCR, India

We respond to privacy requests within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.