This policy covers personal information handled through the Instant Cash Advance: FoxMoney app by STRONGHOLD CREDIT (“we”, “us”). It is written for people in the United States and sits alongside our Terms of Use. Words defined there, such as “Partner Lender”, mean the same thing here.
Four commitments
- We do not sell your personal information, and we do not rent it out for advertising.
- Your details go to one Partner Lender, to a short list of vendors who work for us, and to no one else unless the law demands it.
- Data is encrypted while it travels and while it is stored.
- You can ask to see, correct, or delete what we hold.
What we hold and where it comes from
| Category | Typical items | Comes from |
|---|---|---|
| Identity and contact | Legal name, date of birth, home address, email, mobile number, and a photo of a government ID when verification requires it | You |
| Credit-related | Social Security number, employment and income details, monthly obligations, bank account and routing number (account in your name), details of the loan request (e.g. loan principal, repayment terms, APR options, estimated installments) | You, and bank-verification services you authorize |
| Reports and checks | Credit-report data, identity-verification results, fraud-screening signals, and the Partner Lender’s decision and status updates | Credit bureaus, verification and fraud vendors, the Partner Lender |
| Device and activity | Device model, operating-system version, carrier, language, time zone, IP address (used for approximate location only), app version, screens viewed, taps, crash logs, diagnostics | Collected automatically |
| Messages | Whatever you send to our support team | You |
Giving us most of this is your choice. However, the Partner Lender cannot review an inquiry or determine loan approval without the details it needs, so leaving those out may mean we cannot process your request.
Why we use it
- To run the Instant Cash Advance: FoxMoney app and build the 24/7 loan inquiry you ask us to send.
- To confirm who you are and to spot fraud, abuse, and unauthorized access.
- To keep our systems and your data safe.
- To answer support requests.
- To study aggregated or de-identified usage so we can fix problems and improve the App.
- To send service messages and, only if you opted in, promotional ones.
- To meet legal duties such as record-keeping, anti-money-laundering, and consumer-protection rules.
Who gets to see it
| Recipient | What they receive | Why |
|---|---|---|
| Partner Lender | The identity, contact, financial, and credit details it needs, plus the loan you requested | To review your inquiry and, later, to make and service any loan. It operates independently under its own privacy notice, so read that before accepting an offer. |
| Vendors working for us | Only what each task needs: hosting, messaging, identity checks, bank-account verification, fraud screening, analytics, support tools | They act on our instructions under written confidentiality and security commitments. |
| Professional advisers | Lawyers, auditors, accountants, insurers | Strictly as needed for their engagement, under duties of confidentiality. |
| Authorities | Courts, regulators, law enforcement | When we believe in good faith that the law requires it, or to protect rights and safety or to stop fraud. |
| A successor business | Records that move with the business | In a merger, sale, or reorganization. Where the law requires, we will tell you in the App beforehand. |
We do not sell personal information for money, and we do not share it for cross-context behavioral advertising.
How long we keep it
| Data | Kept for |
|---|---|
| Account details | While the account is open, plus a short wind-down period afterwards |
| Inquiry and offer records | As long as financial-services law requires, generally up to five years after the inquiry closes |
| Audit and transaction logs | Up to seven years |
| Fraud and security signals | As long as it takes to investigate an incident and tune detection |
| Marketing records | Until you withdraw consent |
| Aggregated or de-identified statistics | No fixed limit, because they no longer identify anyone |
When data is no longer needed, we delete it or irreversibly strip out what identifies you.
How we guard it
We encrypt data in transit (TLS) and encrypt sensitive fields at rest. Staff see only what their job requires, and administrative tools need multi-factor sign-in. We monitor our systems continuously, commission independent security testing, keep a written incident plan, and train our people on privacy and security.
No system is perfectly secure. If a breach affects your information, we will notify you, and regulators where required, as the law says. You can help by choosing a strong, unique password, keeping your device updated, and telling us promptly about anything suspicious.
What you can do
| Right | What it means |
|---|---|
| Know and access | Find out whether we hold data about you and receive a copy, with the categories, sources, recipients, and purposes involved. |
| Correct | Have inaccurate or outdated information fixed. |
| Delete | Ask us to erase your information. We will, unless the law or a compelling need requires us to keep it. |
| Opt out and withdraw consent | Stop marketing messages and withdraw any consent you gave. This does not undo earlier use that was lawful at the time. |
| Portability | Where it applies, receive the data you gave us in a structured, commonly used format. |
| Equal treatment | Using these rights will not cost you service, a worse price, or any other penalty. |
| Appeal | If we decline a request, you may appeal where your state’s law provides for it. |
How to ask. Open the Help Center in the App and choose “Privacy request”. We confirm your identity first. An authorized agent may act for you with your written permission. We acknowledge requests within 3 business days and answer within 45 days, extendable once by up to 45 more where the law permits and with an explanation.
A few other points
Age. The App is for adults aged 18 and over. If we learn that we hold a minor’s information, we will delete it and close the account.
Cookies and SDKs. As a mobile app, Instant Cash Advance: FoxMoney does not use browser cookies. It does contain third-party SDKs supplied by analytics, diagnostics, and messaging companies, which gather the device and activity data listed above. You can adjust this in the App’s privacy settings and in your phone’s permission controls.
Where data lives. The App is meant for use in the United States, and data is stored and processed here. Where a vendor supports us from elsewhere, we take steps to keep the protection consistent with this policy.
Links. The App may link to outside sites or tools. This policy does not cover them; each has its own privacy terms.
Changes. Every version carries an effective date. For a material change, such as a new purpose, recipient, or category of data, we will show a notice in the App at least 14 days before it takes effect. Minor edits apply once published.
Contact. Questions or requests? Reach out to [email protected], use the Help Center in the App, or visit the support link on the App’s store listing.