2 months ago i took a loan from this app called z2p.
Later i removed the app from my phone hence forgot about the loan. They mention a condition in their email that they can send sms or call my whole contact list which they upload when i gave permission to let the app access all my contacts. But they never took my permission for this condition, this condition was never mention earlier, they sent it in the mail which i recieved after dispersment of the 3000rs loan. Now they have messeged all my contacts. Could i legally take any action against them?

I am several days behind on my loan from z2p
The best way they come with is not sending me sms or calling me
But to send sms to all my phone contacts which is embarassing for me but harassing for them.
Any action i can take apart form making the payment