Client Data Protection
StreetLoans is designed so core operations remain on the user's Android device. This guide explains security controls and realistic protection limits.
Local storage
The app stores customers, loans, payments, partial payments, late fees, and business profiles in the local database inside Android private app storage. Protection also depends on device lock, Android permissions, and operating system updates.
Protected backups
New backups use the SLB2 format with AES-256-CBC and HMAC-SHA256. The HMAC is verified before decryption to detect files that were modified, damaged, or protected with a wrong key.
Follow the Backups Guide to create, export, and restore backups. Once exported, store the file in a safe destination such as Google Drive or a protected computer. Only Google Drive on Android is documented for optional cloud backup at this stage.
Account recovery and device change
StreetLoans uses one account per device. Access is protected by your password and, if your phone supports it, by biometrics (fingerprint or face).
Recovery code
When you create your account, the app shows a recovery code in the SL-… format. Store it somewhere safe: it is the only way to recover your account if you forget your password. If you lose the code and forget your password, access cannot be recovered.
Resetting your password
From the sign-in screen, the Reset account option lets you set a new password in two ways:
-
With the recovery code — enter your username, the
SL-…code, and the new password. -
With biometrics — if your device has fingerprint or face set up, you can authorize the change without the code.
OTP verification
When you switch phones or reset access, the app may request a one-time password (OTP) sent to your registered contact (email or SMS) to confirm you are the account holder before continuing.
Field security practices
-
Configure a strong PIN, pattern, or biometric lock on the phone.
-
Keep Android and StreetLoans updated.
-
Do not share credentials with customers, borrowers, or unauthorized collectors.
-
Lock the phone after each collection.
-
Use strong passwords for exported backups.