Privacy Policy – Creditera

This Privacy Policy explains how Good day Latvia, SIA (registration number 40203151430) (“we”, “us”, “our”) collects, uses, and protects personal data when you use the Creditera mobile application and its associated website and online services (collectively – the Service). By using the Creditera app, you confirm that you agree to this Privacy Policy.

1. Personal Data We Collect

Information you provide

  • Phone number – used for identity verification and secure login.
  • Email address – used for communication and account setup.
  • Profile details – such as name or preferences, if provided.

Information collected automatically

  • User ID – internal identifier stored as user_id.
  • Device ID – including device_id, OS version, and model.
  • Crash reports – collected via diagnostics tools.
  • Usage data – anonymized navigation and interaction logs.
  • Preferences – saved configuration such as theme or language.
  • Performance metrics – such as load_time or connection_quality.

We only collect data required to operate and improve the Service.

2. How We Use Your Personal Data

Service functionality

  • User authentication using your phone_number.
  • Feature enablement and personalized service flow.
  • Support and customer assistance.

Service improvement

  • Crash analysis using diagnostic_reports.
  • Performance tracking such as api_response_time.
  • Feature development based on aggregated data.

Communication

  • Send updates or important notices.
  • Marketing messages (only with explicit consent).

Legal compliance

  • Meeting regulatory obligations.
  • Providing information when lawfully required.

We do not sell personal data. We share data only with trusted partners (e.g., hosting, analytics) or when required by law.

3. Legal Bases for Processing

  • Your consent (e.g., enabling marketing_notifications).
  • Contractual necessity to provide the Service.
  • Legitimate interests, such as improving app performance.
  • Legal obligations.

4. Data Security

We use technical and organizational measures including:

  • SSL/TLS encrypted data transmission.
  • System security updates.
  • Access restriction and internal authorization.
  • Continuous monitoring for threats.

No online platform can guarantee 100% security, but we apply reasonable protection.

5. Your Rights

If applicable under GDPR or local laws, you may:

  • Access your data (data_access_request).
  • Request corrections.
  • Request deletion (data_deletion_request).
  • Restrict processing.
  • Object to marketing.
  • Withdraw consent.
  • Request data portability (.json or .csv).
  • Submit a complaint to a data authority.

To exercise rights, contact us at the email below.

6. Children’s Privacy

The Service is intended for users aged 18+. If data from a minor is detected, it will be removed.

7. International Data Transfers

Your data may be processed on servers outside your country. Transfers follow safeguards such as Standard Contractual Clauses (SCC).

8. External Links

External links may point to third-party platforms. Those platforms are not covered by this Privacy Policy. Always review their privacy_policy before using them.

9. Updates to This Privacy Policy

Updates may be made periodically. Changes are effective once published. Continued use of the Service means acceptance.

10. Contact Information

For questions or rights requests, contact us at:
[email protected]