Details of Loan Provider Information
Cash Muna operates under the following legal credentials, ensuring transparency and compliance with regulatory standards:
- Corporate Name: Mali Lending Corp.
- SEC Registration Number: CS201907662
- Authorization Certificate Number: 2968
- Address: North Penthouse Unit, Marajo Tower 312 26th Street corner 4th Avenue, Fort Bonifacio Taguig, Metro Manila, 1630 Philippines
Updates to the Privacy Policy
The Data Controller retains the authority to revise this Privacy Policy from time to time to align with evolving legal frameworks, internal governance changes, shifts in data handling practices, or new service and product requirements.
Any such revisions will be made accessible to users via our official website. You may consult the most current version of this Privacy Policy by visiting https://api.cashmuna.com.
Last revised on: April 7, 2025.
Declaration on the Collection and Use of Personal Data
In alignment with the Data Privacy Act of 2012 (the ''Law'') and its associated implementing rules and regulations, Cash Muna, acting as the ''Data Controller'', wishes to formally inform you of the following: Any personal data you disclose—either directly or indirectly—will be regarded as confidential and handled according to prevailing Philippine legislation, as well as international and domestic standards concerning the safeguarding of personal data. As the data subject (the ''Owner''), the following information may be collected:
- Philippine Identification Number (PhilSys ID)
- Email address
- Residential or mailing address
- Facial biometric data used for identity verification via facial recognition technologies
- Current employment status
- Scanned image of your government-issued ID
- Marital status
- Tax Identification Number (TIN)
- Contact phone number
- Full name (as stated on official documents)
- Facial photographs or video used to verify that the user is a real individual
- Details related to your social network accounts, if access is granted by you
- Information regarding your living conditions
- Geolocation data captured from your device
- Basic identification and contact data
Cash Muna does not collect merely referenced personal data that the Owner may mention in the course of using any service or product. Instead, we require the Owner's clear and voluntary consent for processing Personal Data, which is gathered via our official website at https://api.cashmuna.com, our mobile application (the ''App''), or other digital channels such as electronic messaging, phone calls, video calls, or other electronic interfaces (''Electronic Means''). Such consent may be automatically registered during your interaction with these platforms.
The collection and processing of this Personal Data are strictly for the provision of the services and/or products offered by Cash Muna (collectively, the ''Services'') and for the specific purposes described within this Privacy Policy. Cash Muna assures all Owners that any data shared will be governed by the conditions stated in this policy.
Moreover, any party with authorized access to this information shall also be bound by confidentiality and data privacy obligations, in accordance with legal restrictions and applicable law within the jurisdictions where the data is collected, stored, processed, or transmitted. The collected personal information will never be exploited or processed for reasons beyond those expressly outlined in this document.
Handling of Personal Data and Required Permissions
Please be informed that all entities involved in processing your data are equally bound by strict confidentiality agreements and must comply with the applicable legal constraints in the jurisdiction where your data is gathered, stored, handled, or transferred. These obligations ensure that your personal data is managed with the utmost responsibility and in accordance with relevant laws.
The information collected includes various permissions necessary for the operation of Cash Muna, which may encompass access to: APP Use Information, Image Information, View Wi-Fi Connections, SMS, Files, Google Advertising ID (GAID), Calendar, Installed Applications, Device Information, Call Logs, Mobile Phone Code (IMEI) and Camera.
Rest assured, your personal data will not be utilized or processed for any reasons beyond those expressly outlined in this policy.
APP Use Information
To enhance the detection of suspicious behavior and reduce fraud risk, we collect usage data while you interact with our app. This includes information such as the package name, type of interval, session start and end times, number of app launches, most recent usage, and total time spent. These data points are encrypted during collection, synchronized, and securely uploaded to https://api.cashmuna.com for further analysis aimed at improving security and user trust.
Image Information
As part of our loan verification and fraud prevention processes, we collect images you intentionally take or manually upload. This includes photos provided for KYC and identity verification. We do not browse or access other photos stored on your device. Every image transmitted to https://api.cashmuna.com is encrypted and protected to ensure data integrity and privacy compliance.
View Wi-Fi Connections
Cash Muna gathers network-related data such as IP address, Wi-Fi connection details, and network type to evaluate potential security threats and detect abnormal behavior. These indicators help us secure your account and protect your transactions. All collected network information is encrypted and transmitted securely to https://api.cashmuna.com for fraud analysis and prevention.
SMS
To complete identity authentication and enable accurate loan processing, we request permission to read SMS messages that may contain verification codes or banking transaction alerts. Only relevant messages tied to your application are processed — unrelated SMS content remains untouched. All extracted data is encrypted and securely transmitted to https://api.cashmuna.com, where it is used strictly for verification and credit evaluation purposes.
Files
Permission to access files on your device allows us to help you upload required documents when applying for a loan. We only access files that you explicitly select, and we do not read, change, or interact with other files stored on your device. These uploaded documents are encrypted for security and transferred to https://api.cashmuna.com solely to support the loan application review process.
Google Advertising ID (GAID)
Cash Muna requests access to your Google Advertising ID to analyze ad interaction performance and improve personalization within advertising content. This identifier, once collected, is encrypted and sent securely to https://api.cashmuna.com. If you would prefer not to share this data, you can disable personalized ads through your phone's ad settings, which will prevent further collection of your GAID.
Calendar
With your prior approval, Cash Muna may access your device calendar to help you manage loan repayment dates. We only create or edit entries related to repayment schedules and do not view or interfere with any other personal events on your calendar. All data involved in this process is encrypted and stored securely at https://api.cashmuna.com. Your calendar data is never disclosed to third parties under any circumstances.
Installed Applications
To help us detect fraudulent usage patterns and improve transaction safety, we collect metadata about apps installed on your device. This includes application names, version details, timestamps of installation and updates, and whether they are system-level apps. The information is used strictly for risk evaluation and uploaded — in encrypted format — to https://api.cashmuna.com. Your app-related data is handled with strict confidentiality and will not be misused or shared.
Device Information
We collect a broad range of data about your mobile device, such as brand and model, operating system version, memory status, device identifiers (e.g., mobile ID or IMEI), software installation records, and user account information. Additionally, we analyze your network conditions, Wi-Fi status, screen dimensions, and mobile carrier info. These insights allow us to monitor device integrity, enforce anti-fraud protocols, and offer a more tailored user experience. The collected data is encrypted and transmitted securely to https://api.cashmuna.com.
Call Logs
Cash Muna requests access to your call history when you use the voice verification feature during login or registration. This enables us to confirm that the SIM card receiving the voice message is indeed inserted in your device, helping detect and prevent potential fraud. The data collected is encrypted and securely sent to https://api.cashmuna.com. Your privacy is our top priority — no call log data is ever shared with third parties.
Mobile Phone Code (IMEI)
We use your phone's IMEI (International Mobile Equipment Identity) to ensure continuity throughout the loan application and prevent identity fraud. We do not automatically collect your mobile number nor retain data from users who do not complete the loan process. Your IMEI is encrypted and uploaded to https://api.cashmuna.com. This data supports behavioral risk modeling, credit evaluation, and legal compliance checks when necessary.
Camera
When applying for a loan or undergoing live identity verification, we may request access to your camera. This enables us to perform real-time detection, verifying that the applicant is physically present and authorized. You will always be prompted to grant this access, and the camera will only function with your explicit consent. Captured images are encrypted and uploaded to https://api.cashmuna.com for authentication purposes only. You can revoke this permission anytime via your phone's settings.
Access to the Privacy Policy
You may review the Privacy Policy at any time, whether or not you have previously accepted it, by visiting our official website at https://api.cashmuna.com or through the application interface. This ensures transparency and allows you to stay informed about how your personal data is handled.
Use of Personal Data
This document from Cash Muna outlines the collection and use of Personal Data as follows:
I. Essential Uses
a. Fulfill the contractual obligations arising from your service request and/or agreement.
b. Authenticate and validate the identity of the Owner, as well as verify the accuracy of the data provided by you, your references, co-signers, or guarantors, as applicable according to the contracted service with Cash Muna.
c. Administer, operate, and supervise the services requested or contracted with Cash Muna.
d. Evaluate the information submitted by the Owner to assess risk levels, payment capability, transaction status, and any other evaluations mandated by law and regulatory standards for service delivery.
e. Officially establish the contractual relationship between Cash Muna and the Owner.
f. Integrate and maintain the data within our database, either directly or through third-party services.
g. Process requests made via our Electronic Media platforms and/or telephone communications.
h. Develop your user profile within the App and verify your creditworthiness.
i. Perform credit checks and investigations with credit information agencies deemed appropriate.
j. Provide offers to expand or enhance the contracted services.
k. Communicate updates related to Cash Muna.
l. Conduct commercial intelligence, market research, promote your activity within our Electronic Media, and monitor, evaluate, and improve our Electronic Media platforms.
m. Dispatch communications through our Electronic Media concerning the services you have contracted.
n. Carry out debt collection activities.
o. Implement quality assurance and customer satisfaction surveys regarding our services.
p. Deliver the products and services you have requested from Cash Muna.
q. Notify you of modifications to your current products or services, or introduce new products or services linked to those already contracted or acquired.
II. Non-Essential Uses
a. Send promotional offers, discounts, marketing materials, or special event notifications that may be relevant to the Owner.
b. Distribute newsletters containing news, offers, benefits, and services from our business partners.
Owners of Personal Data retain the right to opt out of processing for non-essential purposes by sending a request via email to . Please note that if no such request is received, it will be assumed that you consent to the use of your data for all purposes described above.
Disclosure of Personal Data
Cash Muna may disclose your Personal Data to the following parties: (i) its parent companies, subsidiaries, or affiliates under common ownership with Cash Muna, including any company within our corporate group that follows the same operational procedures and Internal Policies; (ii) relevant authorities when required by applicable laws; (iii) organizations or companies responsible for payment collection and administration; (iv) other entities in the event of corporate restructuring such as liquidation, division, merger, or similar processes involving Cash Muna; (v) third-party institutions, including financial organizations, in cases of credit portfolio assignment, discounting, endorsement, or other credit portfolio transactions; (vi) commercial partners contracted for marketing products and/or services for the benefit of the Owner; and (vii) any other situations outlined in Articles 10 and 37 of the Law.
Types of Personal Data Collected
Cash Muna may collect and process various categories of Personal Data, including but not limited to the following:
- Mobile phone number
- Copy of official identification
- Number of economic dependents
- Residential or mailing addresses
- Taxpayer Identification Number (TIN)
- Banking details
- Date of birth
- Marital status
- Personal references
- Complete name
- Philippine Identification Number (PhilSys ID)
- Identification, contact, and employment information
- Asset and/or financial information
- Address information
These Personal Data are collected through the Cash Muna application or via telephone communication.
Cash Muna requests this data when you:
- Register within the Cash Muna app to apply for a loan.
- Contact Cash Muna by phone.
Use of Cookies and Internet Security Measures
The Data Controller gathers information through the use of cookies on its website. Cookies are data files placed on the hard drive of the user's device upon visiting the Data Controller's site. These files may store details such as identifiers provided by the Owner or information related to the user's browsing behavior, including preferred pages and interaction patterns. The purpose is to enhance user experience and improve the quality of services while navigating the website.
Cookies are not capable of accessing data stored on the Owner's hard drive or reading cookies generated by other websites. Owners have the option to reject or manage cookie preferences through their browser settings.
Additionally, the Digital Platforms may contain external links that lead to third-party websites not operated or controlled by the Data Controller. The Data Controller assumes no ownership, responsibility, or liability for the content or privacy practices of those third-party websites.
How to Exercise Your Data Rights and Withdraw Consent
In accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), the Owner has the right to the protection of their Personal Data, including the right to Access, Rectification, Cancellation, and Opposition (collectively known as ''ARCO Rights''), as well as the ability to revoke previously granted consent.
To exercise these rights or to revoke consent, the Owner or their legal representative may submit a request by email to , including the following documentation and information:
- A valid government-issued ID of the Owner, or the legal representative's ID along with a power of attorney authorizing representation.
- Full name of the Owner.
- Current residential address.
- Contact telephone number.
- Email address.
- Customer ID and related product ID (if applicable).
- A clear statement indicating the specific right being exercised (access, correction, cancellation, or opposition), or the request to withdraw consent.
- A brief explanation justifying the request.
Upon receiving the request, Cash Muna will issue a response within twenty (20) days. If the request is deemed valid, the necessary actions will be completed within fifteen (15) business days from the date the response is communicated. If the submitted request lacks sufficient information or documentation, Cash Muna may ask for additional materials within five (5) business days. Once the required documents are received, Cash Muna will assess the request accordingly. For requests involving data correction, the Data Controller will evaluate and respond within ten (10) business days.
Failure to respond within the required timeframes will be interpreted as a non-submission of the request. Owners are responsible for maintaining the accuracy and completeness of their Personal Data and must notify the Data Controller of any updates or changes.
If the Owner is requesting access to their data, Cash Muna will deliver the relevant information via a document or email copy sent to the provided address.
Consent withdrawal must follow the same process outlined above. It will only be granted if permitted under the Data Privacy Act and its Implementing Rules and Regulations (IRR). Cash Muna reserves the right to deny any ARCO request under legally permitted circumstances.
If the withdrawal or modification does not interfere with existing legal obligations between the Owner and the Data Controller, consent may be withdrawn without retroactive consequences.
Options for Limiting the Use or Disclosure of Your Personal Data
The Owner may limit the use or disclosure of their Personal Data by following the procedures outlined in the section ''How to Exercise Your Data Rights and Withdraw Consent''. Such a request must include, at minimum, the following:
- Authorization for the Data Controller to process Personal Data in accordance with the terms established in this Policy.
- Consent for sharing the Personal Data with the Owner.
- Permission for the Owner to utilize the Personal Data to deliver the agreed services under this Policy, including any additional credit validation services that rely on big data analysis.
Data Retention Period
Cash Muna will retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of complying with any legal, regulatory, accounting, or reporting requirements under Philippine law. In general, we retain your data for a minimum of five (5) years after the end of your relationship with Cash Muna, or as required by applicable regulations issued by the Bangko Sentral ng Pilipinas or other competent authorities.
After the retention period, your Personal Data will be securely deleted, anonymized, or destroyed, unless its further preservation is required for the establishment, exercise, or defense of legal claims.
User Consent and Acknowledgment
By accessing and using our electronic platforms and/or services, you expressly acknowledge that you have read, understood, and accepted this Privacy Policy, including the purposes outlined herein. You further agree to comply with all the terms and conditions set forth.
If you have any questions regarding this Privacy Policy or related matters, please contact us at .