The Most Rewarding UPI with Credit Card

Privacy policy

Last updated on: [18th February 2025]

We are dedicated to keeping your data secure, safeguarding your private information private and maintaining transparency about our practices.
We follow the best industry practices to ensure the protection of the information collected from you.

Gokiwi Tech Private Limited, having its registered office at A-101, Tower 5, Plot 8P-T, T-5, Diero, Lodha New Cuffe Parade, Antop Hill, Mumbai – 400037 and its corporate office at 1st floor, 1515 Urban, 19th Main Road nearby Hustlehub, Vanganahalli, Bengaluru Urban, Karnataka – 560034(“Company” or “we” or “us” or "our"), owns and operates the website domain athttps://gokiwi.in/, https://getapp.gokiwi.in/, https://apply.gokiwi.in/ and https://kiwicard.co.in/ https://kiwicard.co.in/ and mobile application titled “Kiwi: Rupay Credit Card on UPI” available on the Google Play Store/Apple Play Store athttps://play.google.com/store/apps/details?id=in.gokiwi.kiwitpap&source=gokiwi and https://apps.apple.com/in/app/kiwi-rupay-credit-card-on-upi/id6449386307?source=gokiwi, respectively (collectively referred as “Platform”) and any service availed by Users (hereinafter referred to as “you”, “your” or “User”) through the Platform is conditioned upon your acceptance of the terms and conditions contained in Terms of Service as available on this Platform and this privacy policy (“Privacy policy”). This Privacy policy has been drafted and is published in compliance with The Information Technology Act, 2000, and applicable amendments, rules, regulations and guidelines enacted thereunder from time to time (" IT Act")with specific mention of regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive personal information) Rules, 2011 ("SPDI Rules"), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2023, and any other national and state laws which relate the processing of personal data.

This Privacy policy is an electronic record in terms of the IT Act and this electronic record is generated by a computer system and does not require any physical or digital signatures. Any new features and/or services that are added to our current services at any point in the future shall also be subject to the terms set out in this Privacy Policy along with any other future relevant legislations to be incorporated as per the laws of the land.

Introduction and applicability :
1. We are deeply committed to respecting your online privacy and understand the importance of appropriately protecting and managing any personal information / personal data we may collect, store or process.
2. The purpose of this Privacy policy is to establish a comprehensive framework that governs the collection, use, and protection of any personal and/or sensitive data collected by us. This Policy informs our Users and/or visitors about the processes and procedures we follow concerning the collection, use, storage, processing, disclosure, sharing and safeguarding of any personal data or sensitive personal data obtained through our platform.
3. This Privacy policy applies to all individual who visit, browse, use, or access the Platform or utilize any Services provided on the Platform. By accessing or using the Platform, or by continuing to access or use the Platform after changes to this Privacy policy have been made, you consent to the collection and processing of your personal data in accordance with the latest version of the Privacy policy. This data collection and processing enable us to provide and enhance our Platform and services.
4. Any reference made to Privacy policy in this document shall mean and refer to the latest version of the Privacy policy.
5. The latest version of the Privacy policy will always be available on our Platform, and we encourage you to review it periodically to stay informed of any updates. Your continued use of the Platform constitutes your acknowledgment of and agreement to any changes made to the Privacy policy.
Eligibility :
1. Our Platform and Services are intended for use only by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from anyone under the age of 18.
2. If you are under 18, please refrain from registering for our Services, accessing the Platform, or providing any personal information to us.
Your consent :
1. Please note that by providing the Information (as mentioned below), you provide your consent and authorize us to collect, use or disclose such Information for the purposes and as stated in this Policy, and as permitted or required by applicable law.
2. Moreover, you acknowledge and explicitly consent that the Information may be disclosed or shared with any third parties as well as other reasons mentioned below in this Privacy policy. By agreeing to this Privacy policy, you consent to such disclosures and sharing of you Information as required for these purposes, all while ensuring compliance with applicable laws.
3. This Privacy policy shall be enforceable against you in the same manner as any other written agreement. By visiting or accessing the Platform and voluntarily providing us with Information, you are consenting to our use of the Information, in accordance with this Privacy policy. If you do not agree with this Privacy Policy, you may choose to not provide us with any Information. Under such circumstance, we may be unable to render Services.

Types of Information and its purpose :We collect several different types of Information for various purposes to provide and improve our Platform to you.

Sr. No.	Information Category	Data collected	Purpose and limitations
1	Personal Identification Information	means and includes any Information that relates to a natural person through which an individual is identified, including: name, date of birth nationality father’s name and/or mother’s name gender age details of government ID cards such as PAN education details information regarding the User’s Guardian, such as their name, age, gender, mobile number, and their relationship to the User any detail relating to the above-mentioned points as provided to us for using the Platform	We use this data to onboard / register the User, to identify / carry out checks as required by our partners, and to prepare personalized offers for the User and to provide Services to the User including but not limited to grievance redressal.
2	Contact Information	means and includes any Information that can be used to contact a natural person such as: phone number residential address permanent address office Address email address	We use this data to onboard / register the User, to identify / carry out checks as required by our partners, and to prepare personalized offers for the User and to provide Services to the User including but not limited to grievance redressal.
3	Employment Information	means and includes: employer details job and designation permanent address salary detail employment status	We collect employment information to assess your eligibility for our partner lender’s financial product and our Services.
4	Financial Information	means and includes any Information which may concern the finances of a natural person such as: partial bank account details loan or credit history salary or income details tax records insurance records transaction history	We collect the information to enable us to provide you personalized and relevant products and services such as loan offers, insurance payment reminders, Spend analysis, usage behaviour etc.
5	Know Your Customer (“KYC”) Information and/or documents	means and includes: identity verification documents; and proof of address (utility bills, rental agreements).	We collect this information to share your details with our partner banks / lenders for them to assess your eligibility for their financial product.
6	Locational Information	means and include the information obtained through GPS or other means, such as the geographical location of the User.	Location information is used to offer personalized deals. This helps us send the right offers your way, ensure support is available when needed, and improve your experience with more relevant services, as well as help prevent fraud both during the application of the financial product but also while using the same, this is also required from a Statutory perspective if you raise any cyber complaints
7	Transaction Information	means and includes the following: purchase history refund request and history biller details spending habits usage patterns on the Platform	We collect these details to personalize your experience, improve our services, fraud detection, analyze user behaviour for service optimization
8	Non-Personal Information or Technical Information	means and includes any information that does not reveal your specific identity, but includes: Browser Information : details about the browser you are using, such as type and version. Cookie and Tracking Data : Information collected through cookies, pixel tags, web beacons and other technologies used for tracking and analytics. Device and Network Information : your computer or mobile device, including hardware model, operating system, CPU speed, apograph data, environmental variables, unique device identifiers, mobile network, Gokiwi application and clickstream data. Usage Data : Details regarding your interaction with the Platform, including click patterns, referring or exit pages, and internet protocol (IP) address, internet service provider (ISP). Demographic Information : General demographic details that do not identify you personally.	The Non-Personal Information allows us to: Facilitate, evaluate, and verify your use of the Platform, ensuring that it operates smoothly and without interruptions. Assess the performance of the Platform, including browser compatibility, speed, and responsiveness, to ensure an optimal user experience. Gather aggregate data on user interaction, usage patterns, and the Platform engagement. This helps us understand user behaviour, preferences, and trends, allowing us to make informed decisions on improving our services. Customize content, features, and recommendations based on your usage patterns and preferences, ensuring a more relevant and engaging experience. Monitor and maintain the security of the Platform, detect, and prevent fraudulent activities, and ensure that the Platform remains safe and operational. Diagnose technical issues, troubleshoot problems, and communicate important updates or changes regarding the Platform, including notifications about maintenance or security patches. We may aggregate Information and analyse it in a manner to further accentuate the level of Services that we offer to our customers.
9	Email and short message service (“SMS”) access	You may choose to provide explicit consent to connect/ integrate your one or multiple email accounts with the Platform by simply clicking on the authentication email sent by the Company to your registered email address or by following the process provided by the email service provider (e.g., Gmail) for providing the platform access to the email account. You may choose to provide us with access to your SMS’s. Such connection/integration/permissions will allow us to collect: your image to be uploaded on our platform for app functionality; details on credit card bill specifics such as total amount due, minimum amount due and due date, and other financial and transactional information; credit card rating, credit card statements, bank statements, details regarding other billers and utility bills; and other financial details of the above nature. Do note that we do not read any personal or direct messages sent to the user’s mobile number.	Email access: Email access helps us provide personalized services by tracking loan/credit card updates, Payment due dates, missed EMIs/Credit card bills, billing information such as current outstanding, available limit, last payment information etc and assessment of income, stability of cash flows, usage behaviours etc. It also aids in detecting fraud, sending important notices, and updating you on rewards, transaction summaries, and payment reminders. Additionally, it supports features like repayment tracking and bill management. This ensures a seamless and secure experience for you. We restrict our email access to emails on the financial data points and we do not access any personal emails of the User. SMS access: SMS access helps us enhance your experience by sending you personalized referral links, reminders about your EMIs, and updates on important financial alerts, like due dates or settlement offers which avoids defaults on your end and creates a strong credit profile. We use this data to better understand your preferences and offer additional services which might interest you. By analysing SMS patterns, we can offer more relevant services, detect potential fraud, and ensure we can reach you with important updates. Ultimately, this helps us serve you better with features like UPI linking and personalized repayment plans.
10	Camera and microphone access	means a one-time access taken for camera, microphone, location, or any other facility necessary for the purpose of on-boarding/ KYC requirements.	Such access shall be collected by Gokiwi to provide Lender Service Provider (“LSP”) services to the customer.
11	Communications and Feedback Data	means and includes: call recording and the personal information contained therein, chat transcript and the personal information contained therein, and email correspondence and the personal information contained therein, and survey responses.	We collect this information to improve customer support, resolve issues, enhance user experience, and gather insights for product and service improvements. This data helps us identify trends, address customer concerns efficiently, and optimize our platform for better service delivery. This is also required to be stored as required by our Lending/Banking partners from a regulatory perspective.

In addition to the reasons mentioned above, we will collect the Information to carry out various functions, including but not limited to:

Assessing the quality and performance of our personnel
Addressing any complaints you may have and ensuring the highest quality of service
Notifying you of any changes to our Platform
Analyzing data to enhance and improve the Platform
Monitoring and maintaining Platform usage
Sending system updates related to your booked services
Detecting, preventing, and addressing technical issues, fraud, or other risks
Sending reminders for payments or collections
Analyzing user behaviour and usage patterns
Enhancing your overall user experience
Running re-marketing campaigns through SMS, WhatsApp, email, and push notifications
Conducting targeted marketing campaigns and periodic follow-ups
Informing you about new services and features on the Platform
Evaluating and assessing for service delivery purposes
Using the data for business or research purposes, including improving and personalizing the Platform and services. We may also archive this information for future communications, updates, surveys or if required from a Legal / Statutory or regulatory perspective or as prescribed by our Lending / Banking Partners

Disclaimer :
1. Please be advised that any Information procured by us, shall be:
  1. processed fairly and lawfully for rendering the Services;
  2. obtained only for specified and lawful purposes, and not be used in any manner which is against the law or policy in force in India;
  3. adequate, relevant, and not excessive in relation to the purpose for which it is required;
  4. able to be reviewed by the User, from time to time and updated-if need arises; and
  5. not kept longer than for the time which it is required or the purpose for which it is required or as required by the applicable law.
2. WE SHALL NOT BE LIABLE FOR ANY LOSS OR DAMAGE SUSTAINED BY REASON OF ANY DISCLOSURE (INADVERTENT OR OTHERWISE) OF ANY OF YOUR INFORMATION AND DATA, IF THE SAME IS EITHER (A) REQUIRED FOR SHARING YOUR INFORMATION FOR LEGITIMATE PURPOSES; OR (B) WAS EFFECTED THROUGH NO FAULT, ACT, OR OMISSION OF THE COMPANY OR (C) WAS EFFECTED IN OFFERING OF OUR LAWFUL SERVICES OR (D) IS ATTRIBUTABLE TO THE NEGLIGENCE OF THE USER.
3. BY USING THE PLATFORM OR SERVICES, YOU EXPLICITLY ACCEPT, WITHOUT LIMITATION OR QUALIFICATION, THE COLLECTION, USE AND TRANSFER OF THE INFORMATION/ DATA IN THE MANNER DESCRIBED HEREIN.
4. PLEASE READ THIS PRIVACY POLICY CAREFULLY AS IT AFFECTS YOUR RIGHTS AND LIABILITIES UNDER LAW.
Disclosure and sharing of Information : Do note that we may share your Information in circumstances and for the purposes as specified hereunder:
1. We may disclose or share your Information with the third-party service providers/ vendors, to provide you with the Services or to improve the Services or to evaluate any possible business arrangement with third parties which may enhance the quality of Services being provided or to evaluate whether Services may be provided to you.
2. This disclosure or sharing of your Information with third parties is also required for purposes including, but not limited to, the following:
  1. assessing or evaluating your eligibility or suitability for the Services.
  2. facilitating the provision of Services directly through the Platform.
  3. collaborating with third-party providers for jointly developed or co-marketed services.
  4. processing payments, including billing and transaction verification.
  5. fulfilling orders, managing deliveries, and addressing queries related to your orders.
  6. offering customer service and resolving any issues you may face.
  7. implementing fraud detection and management systems to ensure secure transactions & applications
  8. conducting data analysis to improve service efficiency and user experience.
  9. supporting information technology systems that enable seamless functionality of the Platform.
  10. providing any additional services necessary to ensure smooth operation and delivery of the Services offered through the Platform.
3. We shall also share your Information with our partner lenders, storage providers, data analytics providers, SMS parsing services, consultants, lawyers, and auditors.
4. When compelled by law, we may disclose any Information provided by you on the Platform as may be deemed to be necessary or appropriate:
  1. under applicable law, including laws outside your country of residence
  2. to comply with the legal process
  3. to respond to requests from public, regulatory, legal enforcement and government authorities including public and government authorities outside your country of residence
  4. to allow us to comply with any judgement or decree or order issued under any law for the time being in force in India, or any judgment or order relating to claims of a contractual or civil nature under any law for the time being in force outside India
  5. to protect our operations or those of any of our affiliates
  6. to protect our rights, privacy, safety, or property, and/that of our affiliates, you or others
  7. to allow us to pursue available remedies or limit the damages that we may sustain
  8. to protect against legal liability
  9. to protect the personal safety of Users of the Platform
  10. to prevent or investigate possible wrongdoing in connection with the Platform
5. Merger or Acquisition: We may share Information prior to or upon merger or acquisition of Company with another company, which shall automatically acquire the rights and obligations mentioned in the Privacy policy.
6. With our service providers: We may share Information with other service providers on a need-to-know basis, subject to obligations of confidentiality for provision of Services. We hereby clarify that Company works with institutions, vendors, partners, advertisers, and other service providers, including (but not limited) to those who provide services such as credit based services to our Users, Contact Information verification, website hosting, data analysis, providing infrastructure, information technology services, auditing services and other similar services, in different industries and categories of business by virtue of lawful contracts instituted between such third parties and Company to improve our services. Accordingly, we may share your Information with such service provider as reasonably necessary to provide you with Services.
7. Employees and/ or agents of Company: We follow a strict confidentiality policy with regard to disclosure of confidential information to our employees or other personnel. There may be situations, where we may disclose the confidential information only to those of our employees and other personnel on a need-to-know basis. Any breach of confidential information by the employees, personnel within the Company is dealt with stringently by us.
8. Business Partners: We may share your Information with our present or future business partners to either provide you Services or to enhance the quality of our Services.
9. We may remove parts of data that can identify you and share anonymized data with other parties. We may also combine your information with other information in a way that it is no longer associated with you and share that aggregated information.
10. Except for the Information disclosed pursuant to sub-clause (a) to (i) of this Clause, Company may share Information only if you authorize us to do so.
11. Do note that we do not rent, sell, or disclose or share any information that we collect from you, with third parties, save and except in order to provide you with the Services.
Transfer of Information:
1. Your Information may be transferred to, and maintained on, computers located in India, and will be governed by the applicable laws.
2. If you are located outside India and choose to provide information to us, please note that we may transfer the data to India to process the Information.
3. Your consent to this Privacy policy followed by your submission of such information represents your unconditional agreement to that transfer or use.
4. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your data will take place to an organization or a country unless there are adequate controls in place including the security of your data.
Your rights :
1. You can always choose not to provide the requested information to us, it may however result in you not availing or having access to certain features, or the entirety, of our Services.
2. You retain several rights in relation to your Personal Data as provided under applicable law. These may include the rights to:
  1. receive Personal Information we hold about you in a portable format;
  2. object to or restrict any form of processing you may not be comfortable with.
  3. request for Delete of your personal data from the various systems, except the Logs as we need to store the same to service any requests by Legal / Statutory or Regulatory Authorities or by our banking / lending partners.
3. In order to exercise these rights, please Contact us at the email address service@gokiwi.in.
4. If you want to withdraw your consent or raise any objection to the use of your information for receiving any direct marketing information to which you previously opted-in, you can do so by contacting us at the above-mentioned email address. If you withdraw/object your consent, our use of your information before you withdrew/objected shall continue to be lawful.
5. Such an intimation to withdraw your consent can be sent to service@gokiwi.in. You understand that withdrawal of consent shall lead to suspension of your GoKiwi account as we shall not be able to provide the Services to you.
Retention of information:All Information provided by you, save and except upon withdrawal or termination, shall be retained in locations outside the direct control of Company (for instance, on servers or databases co-locates with hosting providers). We will delete Information based on a request received from you within a reasonable period and latest within 180 (one hundred and eighty days) of receiving a deletion request. However, we may retain such portion of Information and for such periods as may be required under applicable law. Notwithstanding anything contained herein, Company may retain data after account deletion for reasons including but limited to the following purposes: If there is an unresolved issue relating to your account, or an unresolved claim or dispute; If we are required to by applicable law; and/or in aggregated and/or anonymized form; or Company may also retain certain information if necessary for its legitimate business interests, such as fraud prevention and enhancing Users' safety and security. For purposes of loan servicing, Kiwi will only store minimal data as required for processing of the operations.
Cookies and other tracking technologies :Our Platform may utilize “cookies” and other Technical Information. “Cookies” are a small text file consisting of alphanumeric numbers used to collect the Information about Platform activity. The Technical Information helps us analyse web traffic and helps you by customizing the Platform to your preferences. Cookies in no way gives us access to your computer or mobile device. In relation to Cookies, you can deny access to the installation of the Cookies by modifying the settings on your web browser, however, this may prevent you from taking full advantage of the Platform. Our use of Cookies and Technical Information allows us to improve Platform and your experience of Platform and Services. We may also analyse Technical Information that does not contain Personal Information for trends and statistics.
Third party services :We may use your information to send you promotional content from third parties that we believe may interest you, provided you have given us your consent to do so. We shall not be responsible for any disclosure of Information due to unauthorized third-party access or other acts of third parties or acts or omissions beyond our reasonable control and you agree that you will not hold us responsible for any breach of security unless such breach has been caused as a direct result of our negligence or wilful default. Once you leave the Platform, we are not liable for any use/ storage/ processing/ collection of your information obtained by any third-party websites or payment facilitators or provided by you to these third-parties or payment facilitators. Such entities and their respective websites/platforms may be governed by their own “Privacy policy” and “Terms of Service”, which are beyond our control. For a list of third parties we engage with to provide loans, please click here.
Data security :You agree and accept that your Information may be stored in third-party cloud service infrastructure providers. While all reasonable attempts have been taken from our end to ensure the safe and secure storage of your data, we shall not be liable for any data breach on the part of the third-party cloud service infrastructure provider that was beyond our control. In addition to the security measures put in place by the third-party cloud service infrastructure provider for safe and secure storage of your Information, we use certain physical, managerial, technical, or operational safeguards as per industry standards and established best practices to protect the Information we collect. We use reasonable security practices and procedures and use secure servers as mandated under applicable laws for the protection of your Information. We review our Information collection, storage, and processing practices, including physical security measures to guard against unauthorized access to systems. However, as effective as these measures are, no security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that the Information you supply will not be intercepted while being transmitted to us over the internet. You accept the inherent security implications of data transmission over the internet and the internet cannot always be guaranteed as completely secure. Therefore, your use of the Platform will be at your own risk. If you have any concerns, please feel free to Contact us by emailing us at - service@gokiwi.in.

Please note that you alone will have the knowledge of your OTP. It is important for you to protect against any unauthorized access to your OTP, your contact details and your mobile phone. As a security measure, please ensure logging off from the Platform when finished. We do not undertake any liability for any unauthorized use of your account.
Changes and updates:We may modify or revise the Privacy policy from time to time and shall accordingly notify you of any changes to the Privacy policy by posting the revised Privacy policy on the Platform with an updated date of revision. We shall endeavour to review, revise, update, modify, amend or correct the Privacy policy on a regular and routine basis, especially whenever a significant update is made to the technology employed by us or the applicable laws. You must periodically review the Privacy policy for the latest information on our privacy practices. In the event you continue to use the Platform and our services after any update in the Privacy Policy, your use of the Platform shall be automatically subject to such updated privacy policy. Your continued usage of Services or access of the Platform post any amendment would deem to mean that you accept and agree to the revised Privacy policy. Further, we retain the right at any time to deny or suspend access to all, or any part of, the service to anyone who we reasonably believe has violated any provision of this Privacy policy.
Discrepancies and grievances:In case of any discrepancy or grievance with respect to all or any Information shared with Company, please feel free to contact our Grievance Officer:
Attention: Anthony Mathew S A
Email ID: greviance@gokiwi.in
Address: Opp BMTC Bus Depot Sector-1, Ground Floor, 1608, Urban Vault Hsr Layout, 7th Cross, Agrahara Village, Bengaluru, Bengaluru Urban, Karnataka, 560102.

We assure you that we shall ensure implementation of the Privacy Policy and shall make the Privacy policy available to Users. We will acknowledge each grievance that is received within 24 hours and put our best efforts to redress the grievances of the User expeditiously within fifteen (15) days from the date of receipt of the grievance. The User agrees and acknowledges that the Company shall address and attempt to resolve the complaint received in accordance with the standard policies and procedures adopted by the Company, the User’s disapproval/discontent with the outcome/mode of redressal shall not be deemed to mean non-redressal of the grievance by the Company. Any suggestions by Company regarding use of the Service shall not be construed as a warranty.

Please feel free to reach out to us by e-mail at service@gokiwi.in in case of any concerns, grievances, or questions relating to our privacy or data related practices.
Miscellaneous :The invalidity or unenforceability of any part of this privacy policy shall not prejudice or affect the validity or enforceability of the remainder of this privacy policy. This privacy policy does not apply to any information other than the information collected by us through the platform. This privacy policy shall be inapplicable to any unsolicited information you provide us through the platform or through any other means. All unsolicited information shall be deemed to be non-confidential and we shall be free to use and/ or disclose such unsolicited information without any limitations. The rights and remedies available under this policy may be exercised as often as necessary and are cumulative and not exclusive of rights or remedies provided by law. Rights under this policy may be waived only in writing. Delay in exercising or non-exercise of any such right or remedy does not constitute a waiver of that right or remedy, or any other right or remedy.
Governing laws and jurisdiction :This Privacy policy, the Platform, the Services and the use of it is governed by the laws of India and the courts in Mumbai in India shall have exclusive jurisdiction over any disputes connected to our Privacy policy, Platform or the Services and your use of it.
Your acceptance of these terms :By using or visiting this platform, you signify your agreement of this Policy. If you do not agree to any of these terms, please do not use our Platform or Services.