Privacy Policy
RT Loans, operated by ResiliaTech. Last updated 26 August 2026.
RT Loans is a mobile app for members of a savings-and-lending fund. If your group,
SACCO or investment club runs on RT Loans, the app lets you manage the fund - loans,
contributions, the ledger, members and more - from your phone. This policy explains what we
collect, why, and what we never do.
The personal information of a fund's members and borrowers belongs to that fund.
The fund decides what is recorded and who may see it, and is the controller of that data.
ResiliaTech provides and operates the platform on the fund's behalf.
Who we are
ResiliaTech, Harare, Zimbabwe. Contact:
support@resiliatech.com.
Information we collect
- Account and identity. When you sign in, we process your name, email address
and username through your fund's identity service, to authenticate you and apply your role.
- Fund and financial records. Through the app you view and enter records that
belong to your fund - loans, contributions, the ledger, payments, and details of members and
borrowers, which can include names, phone numbers, email addresses, national ID numbers and
next-of-kin contacts. You only see the records your role allows.
- Notification token and device type. To deliver push notifications we register
a Firebase Cloud Messaging token for your device and record whether it is an Android or iOS
device.
- Security and activity logs. Sign-ins and actions taken in a fund are logged
for security and to provide the fund's audit trail.
The app contains no advertising, and no third-party analytics or tracking.
How we use it
- To provide the service - letting you and your fund manage loans, contributions, payments,
members and reports.
- To send notifications you would expect - approval requests, reminders and confirmations - in
the app, as push notifications, and (from our servers) by email or SMS.
- To keep the service secure, prevent misuse, and maintain the fund's audit records.
Who we share it with
We do not sell your information. We share it only with the service providers needed to run the
app:
- Google Firebase Cloud Messaging - receives your device token and the content
of a push notification in order to deliver it to your device.
- Our identity service - authenticates your sign-in.
- Email and SMS providers - used by our servers to deliver the notifications
described above.
We may also disclose information where required by law.
How it is stored and protected
- Data is held on ResiliaTech's servers. Access is restricted to your fund and enforced by your
role, so members of one fund cannot see another fund's data.
- Traffic between the app and our servers is encrypted in transit using HTTPS/TLS.
- Your sign-in session is stored in your device's secure keystore (Keychain on iOS, Keystore on
Android), not in ordinary app storage.
How long we keep it
We keep fund and financial records for as long as the fund uses the service and as needed for the
fund's record-keeping and any applicable legal obligations. Your notification token is removed when
you sign out on a device or when it becomes invalid.
Your choices and rights
- You can turn push notifications off in your device settings at any time.
- You may ask us to access, correct or delete your personal information by emailing
support@resiliatech.com, subject to the fund's
control over its records and to records we must keep by law.
- Because a fund controls its members' and borrowers' records, requests about those records may
be directed to, or need the agreement of, your fund's administrator.
Children
RT Loans is a financial-management tool for fund members and is not directed to children
under 18.
Changes to this policy
We may update this policy from time to time. When we do, we will change the date above and, for
significant changes, let funds know through the service.