Privacy Policy

CrediFy · Last updated: August 14, 2026

This Privacy Policy explains how Titan Collection and Credit Mgmt Inc. ("we", "us", or "our") collects, uses, and protects information when you use CrediFy (the "App"), a credit investigation and verification field reporting application for Android and iOS. CrediFy is used by authorised field investigators conducting verification work for our partner banks and lending institutions, and is also used internally by the Credit Investigation Department of Titan Collection and Credit Mgmt Inc. By using CrediFy, you agree to the practices described in this policy.

A work-issued tool, not a consumer app. CrediFy is issued to authorised personnel only. There is no public sign-up — accounts are created, assigned, and removed by system administrators through our web administration portal. We do not sell your personal information, we do not show advertising, and we do not track you across other companies' apps or websites.

1. Purpose

The purpose of this Privacy Policy is to explain how Titan Collection and Credit Mgmt Inc. collects, uses, and protects information within CrediFy. The App is designed exclusively as a field reporting platform for employees and authorised personnel who carry out residence, business, employment, and bank verification work. It is not intended for public use or open registration.

This policy covers two distinct kinds of information, and it is important to keep them apart:

Your information — the account, device, and activity data of you, the investigator or reviewer using the App.
Subject information — the personal and financial details of the people and businesses you are assigned to verify. This is company and client data that you collect on our behalf; see Section 3.

2. Information We Collect About You

Information you provide

Account information — your first, middle, and last name and suffix, your work email address, and authentication credentials, used to create and secure your account.
Work assignment information — your assigned role, company, client bank, and area of coverage, used to determine which assignments and records you may access.
Your electronic signature — a signature you draw once in the App, applied to the verification reports you submit.
Agreement records — the fact and date of your acceptance of the End User License Agreement.
Support communications — information you provide when you contact us for help.

Information collected automatically

Device and technical information — such as device model, operating system version, and app version and build number, used to operate, update, and troubleshoot the App.
Push notification token — a device identifier provided by Firebase Cloud Messaging and the Apple Push Notification service so we can deliver assignment and report-status notifications.
Audit trail — sign-ins and sign-outs, draft saves, report submissions, edits, and approvals are logged with your identity and a timestamp. These records are required because your submissions are relied on for lending decisions.
Location — precise location is read only at the moment you capture a photo for a report or tap a coordinates field, so that the visit can be evidenced. See Section 5.
Connection and sync metadata — limited information needed to synchronise your offline drafts and keep your account secure.

What we do not do

We do not sell your personal information.
We do not use your data for advertising or track you across other companies' apps or websites.
We do not track your location in the background or when the App is closed.
We do not scan, index, or upload your photo gallery. The App reads only the single file you select.
We do not access your contacts, messages, call history, or personal accounts.

3. Information About the People and Businesses You Verify

Verification reports contain personal and financial information about third parties — the subjects of an investigation — including names, addresses, employment and business details, photographs of premises and documents, GPS coordinates of the visit, and supporting attachments.

This information is collected under the instruction of our client banks and lending institutions, or of our own Credit Investigation Department, for the purpose of assessing a credit application. Titan Collection and Credit Mgmt Inc. processes it on behalf of, and under agreement with, those institutions. Users of the App collect and submit this information as part of their duties; they are not its owners and may not disclose, copy, or reuse it outside the App.

Subjects of a verification report who wish to exercise their rights over their personal information should contact the bank or lending institution they applied to, or write to us at the address in Section 13 and we will route the request appropriately.

4. How We Use Your Information

To provide and maintain the App — issuing assignments, generating verification forms, storing drafts, and syncing your work to our servers.
To authenticate you and enforce role-based access to records and assignments.
To send notifications about new assignments, endorsements, and report status changes.
To maintain an audit trail of activity for accuracy, quality assurance, and dispute resolution.
To deliver and verify app updates.
To provide support and respond to your requests.
To detect, prevent, and address misuse, fraud, and technical issues.
To comply with legal and regulatory obligations.

5. Device Permissions

CrediFy requests the following permissions only to provide specific features, and only at the moment the feature is used. You can manage these in your device settings at any time.

Permission	Why it is used
Camera	Capturing photo evidence for a verification report. Requested the first time you tap Capture Photo. The camera is never opened in the background.
Location (precise)	Stamping a GPS watermark on a photo you have just captured, and filling a coordinates field you tapped. Foreground only — never in the background or when the App is closed. You may decline; reports can still be submitted, but photos will carry no GPS watermark.
Photos	Attaching an existing image to an attachment field. The system photo picker returns only the single file you choose.
Notifications	Alerting you to new assignments, endorsements, and report status changes.
Storage	Saving a report image to your device gallery when you explicitly tap to do so (older Android versions only).
Install unknown apps	Android only, and only where the App is distributed outside the store: installing a verified app update you chose to download.

6. How We Share Information

We share information only as needed to operate CrediFy:

Client banks and lending institutions — completed verification reports and their attachments are delivered to the institution that requested the investigation.
Within our company — supervisors, reviewers, approvers, quality assurance staff, the Credit Investigation Department, and system administrators access reports and audit records as required by their role.
Service providers — we use trusted providers to deliver core functionality, including Supabase (authentication, database, and encrypted file storage), Google Firebase Cloud Messaging and the Apple Push Notification service (notifications), and Mapbox (static map imagery used in GPS photo watermarks). These providers process data on our behalf and are bound by confidentiality and data-protection obligations.
Legal reasons — we may disclose information if required by law, legal process, or to protect the rights, safety, and security of our users, our clients, and the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Data Retention

We retain your account information for as long as your account is active. Submitted reports, attachments, and audit records are retained by the company and its client institutions under their records-retention and regulatory obligations, which typically require them to be kept well beyond the life of an individual user account.

Drafts stored on your device remain there until they are synced and cleared. You can remove locally cached attachments at any time from Settings → Attachment Management; files already uploaded to our servers are unaffected.

8. Your Rights and Choices

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable law, you may have the right to be informed, to access, to correct, to object to processing, to erasure or blocking, to data portability, and to damages. You may update your own name details and password at any time from within the App under Settings. To exercise any other right, contact us at the address in Section 13.

Account deletion

Accounts cannot be deleted from within the mobile app. Because CrediFy accounts are company-issued and tied to work assignments and audit records, deletion is performed by our system administrators through the web administration portal. To request deletion, contact your supervisor or email it@titancollectioninc.com from your work email address.

We process deletion requests within 30 days. Deleting your account removes your profile and associated personal information from our systems and revokes your access to the App. Verification reports you submitted, together with their attachments and the audit records of your activity, are retained as company and client business records, as described in Section 7. Where those records are retained, your identity remains attached to them because they are formal records relied on for lending decisions and may be required for audit, regulatory, or legal purposes.

9. Security

We protect information using industry-standard safeguards, including:

Encryption in transit (TLS) for all data exchanged with our servers, and encryption at rest for stored data and attachments.
Role-based access control enforced at the database level, so you can reach only the assignments and records your role permits.
Screen capture protection — on Android, screenshots and screen recording are blocked inside the App to prevent report data from being copied out of it.
Verified updates — where updates are distributed outside the app stores, the downloaded package is checked against a published SHA-256 checksum before it can be installed.
Audit logging of sign-ins, submissions, edits, and approvals.

You are also responsible for keeping your device locked with a passcode or biometrics, keeping your credentials to yourself, and reporting a lost or stolen device to your supervisor immediately so your account can be revoked. No method of transmission or storage is completely secure, but we work continuously to protect your information.

10. Intended Users and Children's Privacy

CrediFy is an internal field reporting tool intended for use by employees and authorised personnel of Titan Collection and Credit Mgmt Inc. and its partner institutions who are 18 years of age or older. The App is not directed to, marketed to, or intended for use by children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us so we can remove it.

11. International Data Transfers

Your information may be processed and stored in countries other than your own, including by the service providers named in Section 6. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of CrediFy after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us:

Titan Collection and Credit Mgmt Inc.
Email: it@titancollectioninc.com
Address: Unit 1408 Jollibee Plaza Condominium, F. Ortigas Center, Pasig City

For help using the App, see our Support page.