Yehulu Official App
For SACCO members — wallet, loans, voting, savings, and profile management.
Read Privacy Policy
Yehulu Official App
Privacy Policy for SACCO Members
Play Store: Host at yehulusaccos.et/privacy-policy and paste into Play Console → App content → Privacy policy.
1. Introduction
This Privacy Policy describes how Yehulu Savings and Credit Cooperative Organization (SACCO) collects, uses, stores, and shares information when you use the Yehulu Official App.
The App is intended for registered Yehulu SACCO members and provides wallet and savings services, cash collection requests, loan applications, board elections and voting, news, delegations, notifications, and profile management.
By downloading, installing, or using the App, you agree to this Privacy Policy.
2. Who This App Is For
The App is designed for SACCO members only. Access requires a valid membership account, phone number registered with Yehulu, and device registration.
3. Information We Collect
3.1 Account and identity information
| Data | Examples | How collected |
|---|---|---|
| Phone number | +251… mobile number | Login, OTP activation, device registration |
| Authentication credentials | PIN, password, OTP codes | Login and account setup flows |
| Profile information | Name, email, gender, age, member ID, branch | From your Yehulu account via the App |
| Delegation context | Acting-as representative permissions | When you use delegation features |
3.2 Financial and membership information
| Data | Examples | How collected |
|---|---|---|
| Account details | Account numbers, types, balances | Profile and wallet screens |
| Transaction data | Collection amounts, payment modes, transfers | Wallet or collection requests |
| Loan interest data | Loan product, amount, notes | Loan expression-of-interest flow |
| Voting data | Vote selections, manifesto text | Governance features |
| Uploaded images | Deposit receipts, payment proof | Camera or gallery |
3.3 Location information
When you request cash collection, the App collects GPS coordinates and a reverse-geocoded address while in use — to assign the nearest collection agent. We do not collect background location.
3.4 Device and app information
| Data | Purpose |
|---|---|
| Device identifier | Device binding and security |
| Platform & app version | Auth and push registration |
| FCM push token | Account notifications |
| Biometric enrollment | Public key + signatures only — not biometric templates |
3.5–3.7 Other data
Support feedback text via in-app form. We do not collect contacts, microphone, SMS content, ads IDs, or background location. Servers may receive IP address and request metadata for security.
4. App Permissions
5. How We Use Your Information
- Authenticate you and maintain your session securely
- Provide wallet, savings, collection, transfer, and loan services
- Process elections, voting, and delegation features
- Deliver push notifications about your account
- Assign collection agents based on your location
- Prevent fraud and unauthorized access
- Comply with financial and legal obligations
We do not sell your personal information.
6. How We Share Information
| Recipient | What is shared | Why |
|---|---|---|
| Yehulu backend systems | Account, financial, location, device data | Operate membership services |
| Authorized staff & agents | Location and contact for collections | Complete collections |
| Google Firebase (FCM) | Push token, platform metadata | Deliver notifications |
| Platform geocoding | Coordinates | Reverse geocoding on device |
| Legal authorities | As required by law | Legal compliance |
7. Data Storage and Security
On device: Encrypted secure storage for tokens and biometric keys. Local caches may hold profile and wallet data.
On servers: HTTPS transmission, token-based auth. Biometric templates never leave your device.
8. Data Retention
We retain data as long as necessary to provide services, meet regulatory requirements, and resolve disputes — per Yehulu retention policies and applicable law.
9. Your Rights and Choices
- Access and correct your personal information
- Request deletion subject to legal retention requirements
- Withdraw consent for biometric login or notifications
- Disable permissions in Android settings
10. Push Notifications
With your permission, we send alerts about collections, loans, votes, and security events. Disable anytime in device settings.
11. Biometric Authentication
Optional. Your device authenticates locally — we receive only cryptographic signatures, not fingerprint or face data.
12. Children's Privacy
Not directed to children under 18. Contact us if you believe a child provided information.
13. International Processing
Information may be processed on servers operated by Yehulu or technology partners, subject to appropriate safeguards.
14. Contact Us
Yehulu SACCO — Privacy & Data Protection
Email: contact@yehulusaccos.et
Phone: +251 937 999 995 or 9859
Website: yehulusaccos.et
15. Changes to This Policy
Material changes will be notified via the App, email, or other reasonable methods. Continued use means acceptance.
16. Google Play Data Safety Checklist
For Play Console → App content → Data safety form completion.
| Data type | Collected | Shared | Purpose | Optional |
|---|---|---|---|---|
| Name | Yes | Yes | Account management | No |
| Yes | Yes | Account management | No | |
| Phone number | Yes | Yes | Account, fraud prevention | No |
| Precise location | Yes | Yes | Cash collection | No |
| Financial info | Yes | Yes | App functionality | No |
| Photos | Yes | Yes | Receipt upload | Yes |
| Device IDs | Yes | Yes | Security | No |
Yehulu Collections
Privacy Policy for Cash Collection Agents
Play Store: Host at yehulusaccos.et/privacy-policy-collections and paste into Play Console.
Important: Location is collected periodically (~every 5 min) while logged in and active — not only during a single task.
1. Introduction
This policy covers the Yehulu Collections app for authorized cash collection agents (cash_collector role) — assignments, navigation, verification, evidence upload, and history.
2. Who This App Is For
An internal workforce tool for Yehulu field agents. Not for members or the general public. Requires agent credentials and authorized role.
3. Information We Collect
3.1 Agent account information
| Data | Examples | How collected |
|---|---|---|
| Phone & credentials | +251…, PIN, password, OTP | Login, device registration |
| Agent profile | Name, email, HR ID, branch, shift, availability | Agent profile API |
3.2 Location information
| When | Collected | Sent via |
|---|---|---|
| Logged in & active | GPS lat/lng + address | Socket.IO (~every 5 min) |
| Active visits | Location + collection request ID | Same real-time service |
| Create request | GPS + address | REST API |
3.3–3.7 Financial, member, device data
Collection amounts, deposit slip photos, OTP verification, member PII from server (name, phone, address), device ID, FCM token, biometric public keys. No contacts, microphone, SMS, or ads IDs collected.
4. App Permissions
5. How We Use Your Information
- Authenticate agents and enforce role-based access
- Assign and manage collection tasks
- Track agent location for operational oversight
- Verify collections via OTP
- Process bank deposit evidence
- Deliver push notifications for assignments
- Prevent fraud and comply with regulations
We do not sell personal information.
6. How We Share Information
| Recipient | Shared | Why |
|---|---|---|
| Yehulu backend | Agent, location, task, financial data | Collection operations |
| Supervisors | Agent location, task status | Workforce management |
| Google Firebase | Push token | Notifications |
| Google Maps | Coordinates | Navigation routing |
| Legal authorities | As required | Compliance |
7. Data Storage and Security
Encrypted secure storage for tokens. Local caches for tasks/history. HTTPS + authenticated socket for location. Biometric templates never leave device.
8. Data Retention
Retained for employment operations, financial reconciliation, and audit/regulatory requirements per Yehulu policies.
9. Your Rights and Choices
- Access and correct profile via HR/support
- Disable biometric login in settings
- Toggle availability to stop location when off duty
- Workforce monitoring may be required by employer policy
10. Push Notifications
Alerts for new tasks, assignment changes, and security events. Disabling may cause missed assignments.
11. Biometric Authentication
Optional. Only cryptographic signatures sent — not raw biometric templates.
12. Children's Privacy
Restricted to authorized adult agents only.
13. Contact Us
Yehulu SACCO — Agent Operations & Privacy
Email: contact@yehulusaccos.et
Phone: 9859 (short code)
Website: yehulusaccos.et
14. Changes to This Policy
Material changes communicated via App, employer notices, or other channels.
15. Google Play Data Safety Checklist
| Data type | Collected | Shared | Purpose | Optional |
|---|---|---|---|---|
| Name / Email / Phone | Yes | Yes | Account management | No |
| Precise location | Yes | Yes | Workforce management | No |
| Financial info / Photos | Yes | Yes | Collection operations | No |
| Other users' PII | Yes | Yes | Member details for tasks | No |
| Device IDs | Yes | Yes | Security | No |
Account deletion via supervisor or contact@yehulusaccos.et.