Privacy Policy

INFINITUM EQUINOX ENTERPRISE ("we", "us", or "our") operates the Mukisa application and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services. We collect only the information necessary to provide and improve our loan services. Your personal data is encrypted and stored securely. We do not sell your personal information to any third party.

By using Mukisa, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our services.

Consent and Permission Disclosure. Before we request access to sensitive device permissions (such as SMS, approximate location, or camera), Mukisa will show you an in-app disclosure explaining what data is collected and how it is used. We will only collect such data after you take a clear affirmative action to grant permission. You may withdraw permission at any time through your device settings; however, doing so may limit or disable certain features, including loan application and identity verification. This Privacy Policy, together with our in-app disclosures, describes our complete data practices.

When you use Mukisa, we collect information that you provide directly and, with your permission, certain data from your device as described below:

During the loan application process, you will need to provide the following personal information for identity verification, credit assessment, loan approval, and account management:

• Mobile number: For account registration and communication
• Full name: For identification and account management
• National ID number: For KYC verification and compliance
• Account information: For loan disbursement and repayment processing
• Education level: To improve credit scoring models
• Marital status: For risk assessment and loan limit determination

All the information above is used only for the stated purposes, securely uploaded to our servers via encryption, and protected by industry-standard security measures.

With your permission, Mukisa uses your device camera to capture images in real time for identity verification (KYC). This may include:

• ID document images: Photos of your government-issued identification taken during the application process
• Facial verification: A live facial image to confirm that you match the ID information provided

We use the camera only at the moment you initiate verification. We do not access your photo gallery or other stored images on your device. Camera data is used solely for identity verification, fraud prevention, and regulatory compliance, and is transmitted and stored in encrypted form.

With your permission, Mukisa may access SMS messages on your device limited to financial-related content for credit and risk assessment. We may collect messages such as:

• Bank transaction alerts: To support account verification, repayment review, fraud prevention, and related service checks when required
• Loan and repayment notifications: To assess repayment behaviour and loan history
• Mobile payment records: To support fraud detection and credit risk analysis

We do not collect personal SMS unrelated to financial activities, such as private conversations with friends or family. SMS data is used solely for credit assessment, fraud prevention, and security auditing, transmitted and stored in encrypted form, and is not shared with third parties for advertising. You may revoke SMS permission at any time in your device settings; however, loan application features may be limited without it.

With your permission, Mukisa may collect your device's approximate location (coarse location only). We do not collect or use precise GPS location. This information helps us:

• Account security: Verify login and application activity for unusual patterns
• Fraud prevention: Detect potentially fraudulent loan applications and protect your account
• Risk control: Support safer credit assessment and platform security

Location data is used only for the purposes above, transmitted and stored in encrypted form, and is not shared with third parties for advertising. You may disable location permission at any time in your device settings; however, some features may not function properly without it.

To ensure stable app operation, compatibility, and security, Mukisa may collect basic device information, such as:

• Device model and manufacturer: To support app compatibility and troubleshooting
• Operating system version: To maintain service stability and security updates
• Device identifiers: Such as device or app instance identifiers for fraud detection and account security
• Network and app status: Such as network type and basic runtime information needed for secure service delivery

We collect only the device information necessary for the purposes above. We do not use device information for advertising, and we do not link persistent device identifiers (such as IMEI or serial numbers) to your personal data. All data is securely uploaded to our servers via encryption.

With your permission, Mukisa may check whether certain financial-related applications are installed on your device. This is limited to apps such as:

• Banking apps: To understand financial service usage relevant to credit assessment
• Payment apps: To support repayment behaviour analysis and fraud detection
• Lending apps: To identify overlapping loan exposure and unusual credit risk patterns

We do not collect a full inventory of all apps on your device, and we do not access the content or data within those applications. Installed app information is used solely for credit assessment and risk management, transmitted and stored in encrypted form, and is not used for advertising or any unrelated purpose.

We use your personal information solely for the purposes outlined below. We collect only the minimum data necessary and process it in accordance with applicable privacy laws in Uganda.

We use your information for the following purposes:

• Account Registration and Management: To create and maintain your account, verify your identity, and manage your loan applications
• Identity Verification and KYC: To verify your identity using ID documents, facial recognition, and other verification methods to prevent identity theft and comply with regulatory requirements
• Credit Assessment: To evaluate your creditworthiness and determine loan eligibility, including analyzing financial behavior patterns from SMS and device data
• Risk Control and Fraud Prevention: To detect and prevent fraudulent activities, assess device security risks, and protect both you and our platform from malicious behavior
• Loan Disbursement and Repayment: To process loan disbursements to your account and manage repayment schedules
• Customer Support: To respond to your inquiries, resolve issues, and provide technical assistance
• Service Improvement: To analyze usage patterns and improve our services, including troubleshooting and enhancing user experience
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities

We may use automated decision-making processes, including algorithms and credit scoring models, to:

• Assess your creditworthiness for loan eligibility
• Determine loan amounts and terms
• Detect potentially fraudulent applications

These automated decisions help us process loan applications efficiently. If you disagree with an automated decision, you may request human review by contacting us through the details provided in Section 9.

We also adhere to the principle of data minimization. We only collect and process personal information that is:

• Necessary for the purposes described above
• Adequate but not excessive for those purposes
• Accurate and kept up to date

We will not use your personal information for any purpose other than those disclosed in this Privacy Policy without your consent, unless required by law.

Your personal information is stored on our secure servers. We will not share your personal information with any third party except in the following circumstances:

• Legal Requirements: When required by law, regulation, or government authority.
• Security Purposes: When necessary to prevent fraud, illegal activities, or to protect user safety.

We do not sell your personal information and there is no form of information trading.

Mukisa employs industry-standard security measures to protect your personal information:

• Transmission Encryption: All data is protected using encryption protocols during transmission to prevent interception or tampering.
• Storage Encryption: Your personal information is stored on controlled secure servers and secured using strong encryption algorithms.
• Access Control: Only authorised personnel with a legitimate need may access your data, and all access is logged.

We retain your personal information for the following periods:

• Active Accounts: While your account is active or as needed to provide services
• Closed Accounts: We will delete or anonymise your personal information within 30 days of account closure, unless required by law to retain it longer
• Legal Compliance: We may retain certain information for longer periods if required by applicable laws, regulations, or legal processes

After the retention period, we will securely delete or anonymise your information.

Under applicable privacy laws, you have the following rights regarding your personal information:

• Right of Access: To confirm whether we hold your personal information and to know the source, processing purpose, and recipients of the information.
• Right to Rectification: To request correction of inaccurate, incomplete, or outdated information.
• Right to Erasure: In certain circumstances (e.g., when the information is no longer necessary or exceeds the purpose of use), to request deletion of your personal information.
• Right to Object: To object to the processing of your personal information based on your particular situation.
• Right to Withdraw Consent: To withdraw your consent to processing that is based on consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Restrict Processing: In certain circumstances, to request that we restrict how we process your personal information.
• Rights Related to Automated Decisions: Where we use automated decision-making (see Section 2.2), to request human review of a decision that significantly affects you.

Please note that limiting or withdrawing certain permissions may affect the normal functioning of Mukisa features, including the loan application process.

To exercise any of these rights, please submit a request to service@infinitumequinox.com or using the contact details in Section 9. We will respond promptly, and in any event within 30 calendar days of receiving a valid request, or within the timeframes prescribed by applicable law in Uganda, whichever is shorter.

Mukisa is intended for adults only and is not directed at children. You must be at least 18 years old to use our services. We do not knowingly collect personal information from anyone under 18.

If we learn that we have collected information from a user under 18, we will delete that information and close the associated account as soon as possible.

If you are a parent or guardian and believe your child has provided information to us, please contact service@infinitumequinox.com with the registered mobile number. We will review and take appropriate action after verification.

This Privacy Policy is publicly available so that you can review how we handle your personal information at any time. We encourage you to read it carefully before using Mukisa and to check back periodically for any updates.

• In the Mukisa app: Open Mine and select "Privacy Policy".
• On our website: https://www.infinitumequinox.com/privacy.html

We may update this Privacy Policy from time to time to reflect changes in our services, data practices, technology, or applicable legal requirements in Uganda and other jurisdictions where we operate.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Publish the revised policy on our website

Your continued use of Mukisa after the updated policy takes effect constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using our services and contact us to request account deletion as described in Section 8.

This Privacy Policy is effective as of 22 July 2026. If you would like a copy of a previous version of this policy, you may request one by emailing service@infinitumequinox.com.

If you have created a Mukisa account, you may request deletion of your account and associated personal data at any time. Temporary account deactivation or freezing does not qualify as account deletion.

To request deletion of your account and associated personal data, please email service@infinitumequinox.com with the subject line "Account Deletion Request" and include the mobile number registered to your account. We will verify your identity before processing the request.

Prefer a guided request? Open the Delete Account page.

Upon a valid deletion request, we will delete or anonymise your account profile, permission-based data collected from your device, and other personal data no longer required for the purposes described in this policy.

We may retain certain information where required by applicable law or for legitimate purposes, including:

• Outstanding loan or repayment records
• Records needed for security, fraud prevention, or dispute resolution

Such data will be kept only for the period required by law or for the specific purpose stated, and will not be used for everyday service operations.

We will process valid account deletion requests within 15 calendar days in most cases, and in any event within 30 calendar days where additional verification or legal retention review is required, consistent with our data retention practices in Section 4. After deletion, data we are legally required to retain will be securely isolated and protected.

Have a question about how we handle your data, or want to exercise your privacy rights? Our team is available to assist you with enquiries related to this Privacy Policy, your personal information, and Mukisa account matters.