“cash-flow data – such as records of transactions in and out of consumers’ deposit and card accounts – can improve risk prediction because it evidences how applicants manage their finances.”