Privacy Statement for Cash Advance - Holiday Money

Effective date: 2026-10-21

Dear user,

Applying for a loan means trusting someone with details you would not show a stranger, and we think that trust deserves a straight explanation. So here it is, in the form of a letter. We operate the Cash Advance - Holiday Money app, and we are writing to people in the United States. Read this next to the Terms of Use, since terms like “Credit Institution” carry the same meaning in both.

First, what we collect from you. To put your inquiry together we ask for your legal name, birthday, street address, email, and phone number, plus your Social Security number. When verification needs it, we also request a picture of an identity document. We ask about your work, your income, and what you owe, about the bank account (account and routing numbers) that is in your name, and about the loan you want. Messages you write to our support team are saved as well. You can skip some of it, but the Credit Institution has no way to evaluate an inquiry that lacks the information it needs.

Some information arrives without you typing anything. The app can see your handset model, system version, mobile carrier, chosen language, and time zone, a code that identifies this installation, your IP address (we use it only to guess roughly where you are), which screens and features you use, and any crash reports. Other sources add to the picture as well: credit bureaus supply your credit data, identity-checking and fraud-prevention services share what they find, and the Credit Institution reports back how your inquiry is going and how it ended.

You may wonder what we do with all of this. We use it so the app works and your inquiry can be assembled, so we can be sure you are really you and stop fraud, so we can forward your inquiry and bring you the reply, and so our systems stay secure. We also use it to answer you when you write and to send necessary service messages, to learn from combined, anonymized trends how to improve the app, to send you offers if (and only if) you agreed to receive them, and to obey obligations placed on us, like keeping records and preventing money laundering. What we never do is judge your creditworthiness; that call is the Credit Institution’s alone.

Who gets to see it? The Credit Institution does, and because it is a separate company with practices of its own, it is worth reading its policy before you accept any offer. A small set of service providers see parts of it, because they host our data, send our messages, verify who you are and what you bank with, watch for fraud, measure usage, or power our help desk, and each is held by its contract with us to confidentiality and safeguards. Professional advisers of ours, meaning legal, audit, accounting, and insurance people, may see some of it when their work calls for it. Courts, regulators, and police may see it if we sincerely think the law requires it or that handing it over could stop a fraud or a serious injury to someone. Last, should our business ever be merged or sold, the new owner would take over the data, and wherever the law asks, we would tell you in the app before that happens.

We want to be unmistakable on this point: we never sell your personal information, never rent it out to marketers, and never use it to target you with ads drawn from what you do in other businesses’ apps and sites.

As for how long we hold on to it, that depends on the kind of record. Basic account details remain while the account is active and for 30 days once it closes. Records of inquiries and offers are generally held up to five years because financial regulation expects it, and records that audits depend on may be held up to seven. Fraud and security signals remain just while an inquiry into them, or the adjustment of our screening, truly needs them. Marketing preferences last until you withdraw your consent. Combined, anonymized statistics can be kept without a time limit, since they describe no one in particular. After that, the data is either deleted or scrubbed of anything that could point to you.

Protecting it matters to us. Your data is encrypted as it moves and while it sits in storage; staff open only what their role needs; administrators must prove who they are with more than a password; our systems are watched day and night; independent experts are invited to test our defenses; a written plan guides us if something goes wrong; and our people go through training annually. Nothing digital is perfectly safe, so if a breach ever reaches your information, we will let you know, in the manner and within the time that law sets. You can lend a hand by choosing a long password you have not used elsewhere and by letting us know about anything that seems strange.

You also hold some say over your information. Depending on where you live, you may ask if we hold anything about you and receive a copy of it, have errors fixed, have your data erased (apart from what a legal obligation or a pressing need obliges us to retain), take back consent and stop promotional messages, obtain your data in a portable file, and contest our decision if we say no to a request. Asking will never cost you your service or raise your price. The privacy option inside the Help Center is where to begin. We will first confirm your identity, and a person acting for you needs written authorization from you. Within 3 business days we acknowledge a request, and we respond fully inside the period set by law, usually 45 days.

Just a few more things. The app is meant for people aged 18 and above; should we discover that a minor’s information reached us, we remove it and shut the account. Because it is a mobile app, it uses no browser cookies, yet it does include SDKs, small toolkits that analytics, diagnostics, and messaging companies provide and that collect the phone and usage facts listed earlier, and the app’s own privacy settings, as well as the permissions on your phone, let you limit what they gather. Your information is handled inside the United States, and any provider assisting from another country must offer similar protection. If the app sends you to someone else’s website, that website’s own policy governs what happens there.

Each version of this statement carries a date. When a change is important, for instance a fresh reason for using your data, another type of recipient, or an additional category of information, you will find an announcement inside the app no less than 12 days before it takes effect. If anything is unclear, write to us from the Help Center inside the app; and if the app will not even open, the support page reachable from its store listing will get your message to us.

With care,
The Cash Advance - Holiday Money team