Privacy notice

Version 2026-10-01. Written in line with the Digital Personal Data Protection Act, 2023.

What we collect and why

• Account data: your name, e-mail, a hashed password and your two-factor setup — to let you sign in securely.
• Plan data you enter: household members, dates of birth or ages, incomes, expenses, assets, loans, goals, notes — only to calculate and show your plan.
• Security records: sign-in sessions, consent records and an audit history of changes. IP addresses are stored only as salted hashes.

We do not ask for bank passwords, net-banking credentials, card PINs, OTPs or Aadhaar. We do not collect PAN. Account numbers are optional; if entered they are encrypted and only the last four digits are shown.

Information about other people

When you add family members, you are sharing their personal data. Please add only what is needed for planning and tell adult family members you have done so. Profiles can be marked restricted so that only owners and the person themselves see the details.

How data is protected

• Encrypted in transit (HTTPS/TLS) and at rest; sensitive fields are additionally encrypted by the application.
• Mandatory two-factor authentication, role-based access (owner / editor / view-only) and rate limiting.
• Logs are scrubbed of passwords, codes, PAN-like values and long account numbers.

Your rights

• Access and portability: download all your data as JSON or CSV at any time (Account → Your data).
• Correction: edit any record in the app.
• Withdraw optional consent (product e-mails) at any time.
• Erasure: delete your account. Households only you can access are deleted; your name is removed from other households' audit history.
• Grievances: contact the grievance officer listed by the operator of this deployment.

Sharing

We do not sell your data or use it for advertising. Data is shared only with people you invite into your household, with infrastructure providers that host the service under contract, and — only when an owner pays for Plus — with our payment partner Razorpay, which receives the payer's name, e-mail and the amount to process the payment. We never see or store card, UPI or bank details.

A small number of authorised Sampatti Plan support staff can see account and billing details — household name, the names and e-mail addresses of people with a login, how many people, goals and scenarios a household has, its plan and its payments — to provide support and billing. They cannot see your financial plan: incomes, expenses, assets, loans, goal details and notes are never shown to them. Any change they make is recorded in your household's audit history.

Retention

Data is kept while your account is active. Deleted accounts are removed from the live database immediately and from encrypted backups within the backup retention window. Payment records (amount, date, receipt number) are kept for as long as tax law requires, even after a household is deleted; they contain no financial plan data.