Your Privacy Matters
LoanPrep ("the App", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our iOS application.
Key Principles
- Your personal data stays on your device
- No cloud storage of personal information
- Transparent about advertising and data collection
- Full control over your data
- Compliant with global privacy regulations
LoanPrep is primarily a local tool application. Your personal financial information is stored locally on your device. However, the App includes advertising features and notification services as described in this Policy.
Information We Collect
LoanPrep is designed to operate locally on your device. We collect and process only the information necessary to provide our services:
Assessment Information (Stored Locally)
- Loan amount and purpose
- Monthly income
- Employment status and duration
- Credit history category
- Existing debts
- Collateral type and value (if provided)
App Usage Data (Stored Locally)
- Points balance and transaction history
- Daily check-in streaks
- Rewarded video watch history
- Checklist items and progress
- Assessment results and history
- App preferences (theme, currency, notifications)
Purchase Information
- Product purchased (single report or package)
- Number of reports included and used
- Apple transaction ID and product ID
- Purchase date
Advertising Data (Collected by Third Parties)
- Advertising identifier (IDFA) - only with your consent
- Device information (device type, OS version)
- Ad interaction data (impressions, clicks, video completion)
- Coarse location (country/region level)
Analytics Data (Collected by Firebase)
We use Google Firebase Analytics to understand app performance and user behavior. Firebase automatically collects:
- Device information (model, OS version, screen size, unique device identifiers)
- App usage data (screens viewed, session duration, app opens, feature interactions)
- Purchase events (transaction amounts, product IDs - no payment card information)
- In-app events (points earned, points spent, rewarded video completions)
- Approximate location (country/region level based on IP address)
- App performance data (crashes, loading times)
- Firebase does NOT collect your personal financial information (income, debts, loan details)
- Your financial data remains stored locally on your device only
- Firebase data is anonymized and NOT linked to your advertising identifier (IDFA)
- Firebase data is NOT used for personalized advertising
- No personally identifiable information (name, email, phone) is sent to Firebase
- Your name or email address
- Contact information (phone, address)
- Precise GPS location data
- Photos or media from your device
- Browsing history outside the App
How We Use Your Information
All personal data processing happens locally on your device. We use your information to:
Provide Core Features
- Generate loan preparation assessment reports using automated analysis
- Create preparation checklists based on your inputs
- Track your progress and activities
- Manage points and daily check-in features
- Process rewarded video completions for points
- Store your preferences and settings
Fulfill Purchases
- Track available report credits
- Maintain purchase history locally
- Verify entitlements for paid features
Display Advertisements
- Show banner advertisements within the App
- Display rewarded video advertisements (user-initiated)
- Show app open advertisements when returning to the App
Analyze App Performance (via Firebase)
- Monitor app stability and performance
- Understand which features users find helpful
- Identify and fix technical issues
- Improve user experience based on aggregated usage patterns
- Measure business metrics (user retention, feature adoption)
- Note: This analysis uses anonymized data only
We do NOT use your personal financial information for:
- Advertising or marketing profiling
- Sharing with third parties
- Cross-app tracking of personal data
- Building personal profiles on external servers
Data Storage & Security
Local Storage
All your data is stored locally on your device using iOS secure storage mechanisms (UserDefaults and local JSON files). Your data never leaves your device except as described below for purchases.
iCloud Backup
If you have iCloud Backup enabled, your iOS device may automatically backup LoanPrep data as part of your device backup. You can manage this in your iOS Settings → [Your Name] → iCloud → Manage Storage.
Security Measures
- We use iOS platform security features
- Data is protected by your device security (passcode, Face ID, Touch ID)
- No cloud servers storing your personal information
- Regular security reviews and updates
- Keep your device secure with a strong passcode
- Enable Face ID or Touch ID
- Keep iOS updated
- Be cautious when entering sensitive information
Your Privacy Rights
You have full control over your data. Depending on your location, you may have legal rights including:
Access & Control
- Access: View all your data within the app (Profile, History sections)
- Delete: Remove all data instantly via Profile → Data Management → Delete All Data
- Export: Contact us for data export assistance
- Correct: Edit your information directly in the app
California Residents (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we don't sell your data)
- Right to non-discrimination
European Users (GDPR)
- Right to access your personal data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Use the in-app Delete All Data feature or contact us at yumiao.dev@gmail.com for assistance.
Opting Out of Analytics
While Firebase Analytics helps us improve the app, we respect your privacy:
- Firebase data is already anonymized and not linked to your identity
- Your personal financial data is never sent to Firebase
- If you wish to opt-out completely, contact us at yumiao.dev@gmail.com
- Note: Opting out may limit our ability to diagnose technical issues for your device
Children's Privacy
LoanPrep is not directed to children under 13 years of age (or the minimum age in your jurisdiction, such as 16 in the EEA).
Our Commitment
- We do not knowingly collect personal information from children
- We do not market to children
- The app is designed for adult users preparing for loans
Parental Notice
If you are a parent or guardian and believe your child has provided us with personal information, please use the in-app Delete All Data feature and contact us immediately at yumiao.dev@gmail.com.
Users under 18 should use this app only with parental or guardian involvement.
Advertising & Tracking
LoanPrep includes advertising features powered by Google AdMob.
Types of Advertisements
- Banner Ads: Displayed at designated areas
- Rewarded Video Ads: Optional videos to earn points
- App Open Ads: May appear when returning to the App
App Tracking Transparency (iOS 14+)
On first launch, the App requests permission to track activity across apps. This helps deliver personalized ads.
- Allow tracking: Personalized ads based on interests
- Ask App Not to Track: Non-personalized ads only
Change setting: iOS Settings → Privacy → Tracking → LoanPrep
Rewarded Video Ads
- Entirely optional and user-initiated
- Earn 30 points per completed video
- Maximum 10 videos per day
- 10-second cooldown between videos
- Deny tracking permission when prompted
- Adjust iOS Settings → Privacy → Tracking
- Use iOS's "Limit Ad Tracking" feature
- Visit adssettings.google.com
App Store Privacy Labels
In compliance with Apple's App Store privacy requirements:
Data Used to Track You
- Identifiers (Advertising ID) - Only with your consent via ATT
Data Linked to You
- Purchases (Product IDs, Transaction IDs, Purchase history)
Data Not Linked to You
- Financial Info (User-provided loan details, income, debts)
- Usage Data (Points history, feature usage, screens viewed, app interactions)
- Identifiers (Locally generated IDs for assessments, anonymous device identifiers)
- Diagnostics (App performance data, crash logs, error reports)
- Product Interaction (In-app purchase events, feature usage patterns)
- Contact information (name, email, phone, address)
- Precise location data
- Contacts, photos, videos, audio
- Browsing history, search history
- Health & fitness data
Third-Party Advertising
Google AdMob may collect device identifiers, approximate location, and ad interaction data as described in their privacy policy.
Legal Basis (GDPR)
For users in the European Economic Area, United Kingdom, and Switzerland, our processing is based on:
Consent
- When you voluntarily enter information into the app
- For optional features you choose to use
- For advertising tracking (via App Tracking Transparency)
- For receiving notifications
- You may withdraw consent by deleting data or changing permissions
Contract Performance
- To fulfill in-app purchases you make
- To provide assessment reports you paid for
- To deliver services you requested
- To award points for rewarded video completions
Legitimate Interests
- Operating and improving the app
- Displaying non-personalized advertisements
- Securing the app and preventing fraud
- Understanding feature usage (locally only)
- Providing customer support
You have the right to object to processing based on legitimate interests.
Regional Privacy Notices
Depending on your location, additional privacy rights and protections may apply:
For California Residents (CCPA/CPRA)
In addition to the rights described above, California residents have:
- The right to know what personal information is collected, used, shared, or sold
- The right to request disclosure of the categories and specific pieces of personal information collected
- The right to request deletion of personal information
- The right to opt-out of the sale or sharing of personal information
- The right to non-discrimination for exercising privacy rights
- We do not sell or share your personal information for cross-context behavioral advertising
To exercise these rights, use the in-app Delete All Data feature or contact us at yumiao.dev@gmail.com.
For European Users (GDPR)
We process your data based on consent and contract performance. You have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate personal data
- Erase your personal data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
For UK Users (UK GDPR)
You have the same rights as European users under UK GDPR. You may lodge complaints with the Information Commissioner's Office (ICO) at ico.org.uk.
For Brazilian Users (LGPD)
Under the Lei Geral de Proteção de Dados, you have rights similar to GDPR including access, correction, deletion, and data portability.
For Chilean Users (Ley 19.628)
Under Chile's Law on Protection of Private Life (Ley 19.628), you have the right to:
- Access: Request information about your personal data we hold
- Rectification: Correct inaccurate or incomplete data
- Cancellation: Request deletion of your personal data
- Opposition: Object to the processing of your data
To exercise these rights, use the in-app Delete All Data feature or contact us at yumiao.dev@gmail.com.
For Mexican Users (LFPDPPP)
Under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), you have ARCO rights:
- Acceso (Access): Know what personal data we hold about you
- Rectificación (Rectification): Correct inaccurate or incomplete data
- Cancelación (Cancellation): Request deletion of your personal data
- Oposición (Opposition): Object to the processing of your data
To exercise your ARCO rights, use the in-app Delete All Data feature or contact us at yumiao.dev@gmail.com. We will respond within 20 business days as required by Mexican law.
For Malaysian Users (PDPA)
Under Malaysia's Personal Data Protection Act 2010 (Akta Perlindungan Data Peribadi 2010), you have the right to:
- Access: Request access to your personal data held by us
- Correction: Request correction of inaccurate, incomplete, misleading or out-of-date personal data
- Withdrawal: Withdraw consent for the processing of your personal data
- Limit Processing: Limit the processing of your personal data
To exercise your rights under PDPA, use the in-app Delete All Data feature or contact us at yumiao.dev@gmail.com. We will respond within 21 days as required by Malaysian law.
For Users in Other Jurisdictions
Your local privacy laws may grant you additional rights. We are committed to complying with applicable data protection laws in your jurisdiction. Contact us if you have questions about your specific rights.
Third-Party Links
LoanPrep may contain links to external websites or resources for:
- Educational content about loans
- Support documentation
- Financial institution information
- We are not responsible for third-party privacy practices
- Review their privacy policies before providing information
- External sites are not controlled by us
- Links do not imply endorsement
Changes to This Policy
We may update this Privacy Policy periodically to reflect:
- Changes in app features
- Legal or regulatory requirements
- Best practices in privacy protection
How We Notify You
- Material changes will be highlighted in the app
- Effective date will be updated
- Continued use constitutes acceptance
Your Options
If you disagree with changes, you may stop using the app and delete your data.
- January 29, 2026: Added Firebase Analytics disclosure and privacy details
- December 25, 2025: Updated contact email to yumiao.dev@gmail.com
- December 19, 2025: Updated policy date
- December 3, 2025: Updated policy date
- November 29, 2025: Added advertising, notifications, rewarded video sections
- November 27, 2025: Initial version
Contact Us
For questions, concerns, or requests regarding this Privacy Policy or your data:
yumiao.dev@gmail.comWe're Here to Help With
Privacy questions or concerns, data access or deletion requests, exercising your privacy rights, reporting privacy issues, general feedback
Response Time
We aim to respond to all inquiries within 30 days
Data Protection Officer
For GDPR-related matters, contact us at the email above with "Data Protection" in the subject line