What they may do · DPDP §6(4)
What KreditBee does with your data
Its lending app makes SMS monitoring and a full list of your installed apps mandatory, uses log and location data for advertisement and marketing, runs a Video KYC, shares data with lending partners for ad tracking, and keeps records for 6 to 10 years.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
KreditBee’s own policy says “We will share Your Information on a need-basis with the third parties including our regulated financial partners, vendors etc for facilitation of Digital Lending Services on the Platform.”
Our summary information is shared with Lending Partners, vendors and governmental or regulatory authorities; the Lending Partner purposes listed include analysing transaction behaviour, data analytics, and branding and marketing including ad tracking and campaigns.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
KreditBee’s own policy says “Your Log Information is collected (via the domain server through which the User accesses the Platform Search queries, IP address, crashes, date etc) for the purpose of improvising the Platform functionality, for Identity Verification and Fraud Prevention, App functionality*, Advertisement and Marketing, Data analytics.”
Our summary mandatory device and log data — search queries, IP address, crashes, dates — is listed as used for Advertisement and Marketing alongside data analytics; approximate location carries the same Advertisement and Marketing purpose.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
KreditBee’s own policy says “SMS and Installed apps Information – We collect, store and monitor SMS Information from your device. A list of specific installed applications’ metadata Information is collected, which includes the application name, package name, installed time, updated time, version name and version code of each installed application on Your device. This Information may be collected even when the application is closed or not in use.”
Our summary SMS is monitored and metadata for every application installed on the device is collected, expressly including when the KreditBee app is closed or not in use — activity outside KreditBee's own app. This is mandatory for the lending service.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
KreditBee’s own policy says “We retain Your Profile Data from the date of creation of Your account on the Platform (a) for period of 6 (six) years from the last date of submission of Information or inactivity (whichever is later) if You have registered on the Application but not availed any Services; and (b) for a period of 10 (ten) years from the last date of Services availed, or inactivity (whichever is later) if You have availed any of the Services on the Application.”
Our summary profile data is kept six years if you only registered and ten years from the last service availed or last activity if you used any service, and a deletion request is only actioned after every service is closed and the account deleted.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
KreditBee’s own policy says “Microphone permissions are requested to enable a two-way communication between authorised agents and You for the purpose of performing, completing Your Video KYC, customer grievance and App functionality*”
Our summary microphone access is mandatory for the lending service so an authorised agent can perform and complete a live Video KYC session, and separate mandatory consent is taken for completing video KYC. The policy never uses the words biometric, face or liveness.
What the policy does not mention
These are uses KreditBee’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Trains AI models on your content
KreditBee is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does KreditBee do with my personal data?
According to KreditBee's own privacy policy, read on 2026-08-14, it discloses 5 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, processes your face or other biometrics.
Can I withdraw my consent from KreditBee?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does KreditBee track me for advertising?
Yes — KreditBee's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one KreditBee declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy