Privacy Policy

To run SoyGunn we collect and store:

• Account details — your name, email address, and password (stored as a hash, never in plain text).
• Identity documents — a profile photo and a photo of your government ID, required before creating or signing a loan.
• Receiving details — for lenders, the bank, OnePay receiving ID, and optional bank QR image used to build repayment QR codes.
• Loan records — loan terms, repayment schedules, signed agreement PDFs (with your drawn signature), payment confirmations from bank callbacks, and transfer receipts you upload.

This data is used only to operate the service: documenting loans between you and your counterparty, generating repayment QR codes, reconciling payments, sending due-date reminders, and computing your repayment-history score. We do not sell personal data or use it for third-party advertising.

• Loans, schedules, agreements, and payment records are visible only to the two participants of that loan (and platform administrators for support and audit).
• A lender may view the identity documents of a borrower they have a loan with, and a borrower may view their lender's bank QR — in both cases only through short-lived signed links.
• Payment confirmations are received from the banking network (for example BCEL OnePay callbacks) to mark installments paid.
• We disclose data to authorities only where the law of the Lao PDR requires it.

Data is stored with our hosting and database provider (Supabase / PostgreSQL) with row-level security, so each user's records are isolated at the database layer. Identity documents, receipts, and contracts live in private storage buckets accessible only through expiring signed URLs. Signed agreements carry a SHA-256 checksum so tampering can be detected. All traffic is encrypted in transit.

Your data is kept while your account is active. If you ask us to delete your account, we remove your identity documents and personal details; records of loans involving another user may be retained in anonymized or minimal form where needed to preserve the other party's lawful records.

You can view and correct your profile details in the app at any time, and request a copy or deletion of your data by contacting the operator.

If this policy changes materially we will announce it in the app and update the effective date above.