Privacy Policy

• We only collect what we need to run the features you use.
• Product analytics is on by default and can be turned off here or in Settings. Gmail, SMS, AI tips and answers, and news emails are off until you say yes.
• We never sell your data or use it for other companies’ ads.
• Some of the companies that run parts of myFinGrid are outside India. Our database is in Australia. We list them all below.
• You can download all your data, or delete your account and everything in it, at any time.

myFinGrid (myfingrid.com) is run from India. Under India's Digital Personal Data Protection Act 2023 (“DPDP Act”), we are the “Data Fiduciary”: the organisation that decides why and how your personal data is used.

Features marked Beta feature are new. They follow this policy in full, but they may change, and their results may be wrong. Beta does not mean lower privacy protection.

We use your data on the basis of your consent, or for a purpose you gave it to us for (for example, the spends you type in, so we can show them back to you), as the DPDP Act allows. Product analytics is on by default and can be turned off below. Other optional features ask first.

These companies run parts of myFinGrid for us. They may only use your data to do that work.

Your records are stored in Australia, and several of the companies above work from the United States. The DPDP Act allows this, except to countries the Government of India restricts. If a country we use is restricted, we will stop sending data there.

A daily automatic job deletes things when their time is up. When you delete your account, your records are deleted at once; copies in our database backups are deleted as those backups expire. Plus invoices are kept as long as tax law requires.

• See your data: Settings → Privacy & data → Download my data gives you a file with everything we store about you.
• Correct it: edit anything in the app, or ask the Grievance Officer.
• Delete it: delete your account from your Profile page. This removes all your records, including sign-in codes, ends any Plus subscription and removes our Gmail access.
• Change your mind: withdraw any consent in Settings → Privacy & data. It is one tap, the same as giving it. Withdrawing does not affect what was done before.
• Choose someone to act for you: you can nominate a person to use these rights if you die or cannot act yourself. Write to the Grievance Officer.
• Complain: write to the Grievance Officer below. We resolve complaints within 90 days. If you are not satisfied, you can then go to the Data Protection Board of India.

Connecting Gmail is optional. If you connect it, myFinGrid asks for read-only access (gmail.readonly) for one purpose: to find bank and card alert emails and turn them into spends for you to check. Nothing is added until you approve it.

• We search only for bank and card alert emails. From each one we keep the amount, date, shop or payee, bank and the last 4 digits of the card or account, plus the email’s ID so we do not add it twice.
• We do not keep the email text. Gmail data is never sent to any AI service.
• Your Google access key is stored encrypted.
• Disconnecting Gmail, or withdrawing Gmail consent, removes our access at Google and deletes the key. You can also remove access in your Google Account.

myFinGrid's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Gmail data to provide the spend-finding feature you turned on.
• We do not transfer or sell Gmail data to third parties, and we do not use it for advertising.
• We do not use Gmail data to train AI models.
• People at myFinGrid do not read your Gmail data, unless you ask us to for support, it is needed for security or the law requires it, or the data is combined and made anonymous.

On Android, you can let the myFinGrid app read SMS to find spends. This is optional, and the app works fully without it: you can paste an SMS or add spends yourself.

• The app reads SMS from bank senders only. Personal messages are never read.
• Each SMS is read on your phone. The message text never leaves your phone; only the amount, date, shop or payee, bank and last 4 digits are sent to us.
• You can turn this off at any time in Settings → Privacy & data, or in your phone’s settings.

In Plus you can upload a consolidated account statement (CAS) from CAMS or KFintech. We read the file once to pick out your holdings, then discard it. The PDF and its password are never stored.

• Home tips and goal suggestions come from our built-in rules. If you allow AI, Groq, in the United States, rewords them; we send monthly totals, category names and your goals.
• AI answers and the monthly review in Plus run on Groq, in the United States, and only if you allow AI. For the review we send only its plain summary lines.
• We send your question, totals worked out from your data and the names of your investments. We never send your name, email, phone, PAN, bank, card or folio numbers, or the text of any email or SMS.
• The card assistant (signed in, if you allow AI) also runs on Groq. It sends what you type, with card numbers, phone numbers, emails and your name hidden. It only asks questions: our calculator ranks the cards, and nothing is used until you confirm the amounts.
• When the insurance assistant launches, it will run on Groq only if you allow insurance AI. It suggests answers you can change and explains the policies we found. Health answers need their own yes to be sent, and another to be saved; health answers you don’t save are left out of the saved chat. You check anything it reads from a quote or PDF. PDFs and passwords are never saved or sent to Groq.
• We use Groq’s setting that stops it keeping what we send. Your chats with the planner and the card assistant are kept for 90 days, and you can delete them sooner.
• AI answers are for planning and learning. Not investment advice. myFinGrid is not a SEBI-registered investment adviser.

Some credit card results link to the bank's site. These links are labelled Ad, and we may earn a fee if you apply. Fees and reviews never change the order of results: it comes only from your spending and each card's terms. When you click a link we count only the card, where the link was and the day. We do not record who clicked. Insurance results never carry paid links.

All traffic is encrypted (HTTPS). Google access keys are encrypted in our database. Only the people who need to run the service can reach your data, and we follow reasonable security practices under the Information Technology Act 2000.

If your data is exposed in a security incident, we will tell you without delay, and in any case within 72 hours of finding out. We will say what happened, which data was involved, what we are doing about it, what you can do, and who to contact. We will also report it to the Data Protection Board of India, as the law requires.

myFinGrid is intended for adults aged 18 or older. Setup does not collect an age declaration. If we learn that an account belongs to someone under 18, we will review it under our eligibility policy.

If we make an important change, we will tell you in the app or by email before it applies. If a change affects something you consented to, we will ask you again.