Will the third parties have access to the whole data of users?
Me too interisuet this question. In general, the idea is interesting.
They will only be able to ask for users' approval to let them have the access - and this will yield users rewards in form of those very GCAT tokens which will have their fiat value in exchanges. However, those parties you're seeking loans or other financial services from, will naturally have access for free.