This is our short notice under section 5 of the Digital Personal Data Protection Act, 2023 and Rule 3 of the DPDP Rules, 2025. It stands on its own. Full details: Privacy Policy. हिन्दी: /hi/privacy-notice.
Data Fiduciary: Lokhande Ventures (proprietor: Shivhari Lokhande), Jalna, Maharashtra, India.
1. What personal data we process, and why (itemised)
| # | Personal data | Specific purpose | Basis |
|---|---|---|---|
| 1 | Email, mobile number, display name, account id | Sign in, recover your account, contact you about support | Consent |
| 2 | Plan, trial and subscription status (no card numbers) | Give you the features you paid for; billing records | Consent; legal obligation |
| 3 | Household membership, roles, invites, join requests (device name, key fingerprint) | Family sharing and access control | Consent |
| 4 | Guardian consent record for members under 18 | Proof of verifiable parental consent | Legal obligation (s.9) |
| 5 | Device id, public keys, push token, app version, platform, language | Encrypted sync, notifications, correct in-app notices | Consent |
| 6 | Encrypted family-sync messages (we cannot read them) | Delivering changes between your family's phones | Consent |
| 7 | Support tickets and attachments (numbers redacted) | Answering your requests | Consent |
| 8 | Security audit log (no financial values) | Security, fraud and abuse prevention | Legitimate use (s.7) |
| 9 | Feature analytics and job telemetry — off unless you opt in; shown only in groups of 50 or more | Improving the app | Consent (opt-in) |
We do not collect your transactions, balances, accounts, loans, investments, budgets, goals, net worth, forecasts, or SMS/email/receipt contents. These stay only on your phone, encrypted.
2. Withdrawing consent
You can withdraw consent at any time, as easily as you gave it:
- Analytics / telemetry: Settings → Privacy → switch off.
- Bank SMS: Android Settings → Apps → GharHisab → Permissions, or Capture settings.
- Gmail: Capture settings → Gmail → Disconnect.
- Everything: Settings → Export or delete data → Delete account.
Withdrawal does not affect processing done before it. Features that need that data will stop working.
3. Your rights and how to use them
Access, correction, completion, updating, erasure, nomination, and grievance redressal. Email shivhari.lokhande06@gmail.com or use Settings → Help & Support. We acknowledge within 48 hours and resolve within 30 days.
4. Complaint to the Data Protection Board of India
If you are not satisfied with our reply, you may complain to the Data Protection Board of India through its online (digital) office, after first using our grievance process (s.13(3)).
5. Where data is processed
Sign-in in Mumbai, India (AWS). App servers and operational database in Singapore (Render, Neon). Website and storage on Cloudflare; push via Google Firebase. Singapore is not a country restricted under s.16.
6. Retention
Account data is deleted when you delete your account, except billing records the law requires and security logs (minimum 1 year, default up to 7 years). Encrypted sync messages expire after 30 days.
Contact / Grievance Officer: Shivhari Lokhande · shivhari.lokhande06@gmail.com · Jalna, Maharashtra, India