Privacy Policy

01What we collect

• Account details: your name, email address, and password (stored only as a hash, never in readable form).
• Optional profile details you choose to add, such as your date of birth.
• Financial information you enter: holdings, transactions, income, expenses, goals, accounts, credit cards and loans.
• Technical data needed to run the Service, such as log and error information.

02Why we hold it

To provide the Service: to store your records, calculate net worth and returns, refresh prices, show your charts, and share data with a household member you have chosen. We do not sell your data, and we do not use it for advertising.

03Where it is stored

Your data is held in a managed Postgres database provided by Supabase, protected by row-level security so that records are only readable by your own household. Passwords are handled by the authentication provider and never stored by us in readable form.

04What is sent to the AI provider

The AI assistant needs context about your finances to answer usefully, so a summary of your data is sent to a third-party AI provider when you ask it something. That summary is anonymised first, deliberately:

• Names are replaced with “Person 1” and “Person 2” before anything is sent.
• Expense descriptions, income source names and goal names are removed.
• Your email, date of birth, account numbers and card numbers are never sent.
• Fund and stock names are sent, because a question about your portfolio cannot be answered without them.

05Document uploads & Ephemeral Processing

If you upload financial documents (such as PDFs or CSVs) to generate a dashboard, these files are parsed ephemerally. This means they are processed in memory to extract the required data and are deleted immediately thereafter. We do not store your uploaded documents.

06Other third parties

• Price and NAV providers, to refresh the value of your holdings. These receive a fund or ticker identifier only — never anything about you.
• Our hosting provider, which serves the application.
• We do not share your data with anyone else except where the law requires it.

07Household sharing and Joint Consent

If you join a household, the other member can see the financial data in it. This is the purpose of the feature, but it is worth stating plainly: sharing a household means sharing visibility of that data with that person.

Consent Architecture: You grant affirmative consent to share your data when you generate or accept a household invite code. Because joint data belongs to both users, deleting a joint household requires affirmative, cryptographic consent from both members before the deletion process even begins. Either member can cancel the deletion at any time during the grace period.

08How long we keep it

We keep your data for as long as your account exists. When you ask us to delete your account, it enters a 7-day grace period so you can change your mind. After 7 days, we permanently remove your personal data, except anything we are required to retain by law.

09Your rights

Under the Digital Personal Data Protection Act, 2023, you may ask us to:

• Confirm what personal data of yours we hold, and get a copy of it.
• Correct anything inaccurate or incomplete.
• Delete your personal data, subject to any legal retention we are bound by.
• Withdraw consent for processing, understanding that this may mean we can no longer provide the Service.
• Nominate someone to exercise these rights on your behalf if you are unable to.

10Security

Data is encrypted in transit. Access is restricted by row-level security so one household cannot read another’s records. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority as required.

11Children

The Service is not intended for anyone under 18 and we do not knowingly collect data from children.

12Changes to this policy

If this policy changes materially we will ask you to review it before you continue using the Service.

13Contact and grievances

For any question about your data, or to exercise the rights above, write to mysurpluss@gmail.com. If you are not satisfied with our response you may escalate to the Data Protection Board of India.