Digital Lending Privacy Policy

1. Introduction

This Privacy Policy governs the collection, usage, storage, and sharing of personal and financial data collected via the Money मित्र Mobile Application ("App"), developed and managed by UDHAR FINTECH PRIVATE LIMITED, a company registered under the Companies Act, 2013.

This policy is in compliance with:

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• General Data Protection Principles (GDPR-inspired best practices)

2. What Data We Collect

We collect the following categories of data for verification, financial management functionality, and platform analytics:

a) Personally Identifiable Information (PII)

• Full Name (mandatory)
• Mobile Number (mandatory)
• Email Address (mandatory)
• Gender (mandatory)
• Date of Birth (mandatory)
• Occupation (mandatory)
• Financial Goal (mandatory)
• Country (mandatory)
• City (mandatory)

b) Transactional Data

• Expense History: Categories, amounts, dates, descriptions, and payment methods
• Loan History: Loan type, principal amount, interest rate, EMI details, lender information, repayment status
• Investment History: Investment types (mutual funds, stocks, FDs, etc.), amounts, returns, dates
• Income History: Income sources, amounts, frequency (monthly/annual), income categories
• Savings Targets: Target amounts, timelines, purpose, progress tracking

c) Device & Usage Data

• Device type, operating system
• IP address, session time, in-app activity

3. Purpose of Data Usage

We collect and use the data for:

• Identity verification
• Maintaining expense, loan, investment, and income records securely
• Providing personalized financial insights and recommendations
• Tracking savings targets and financial goals
• Enabling financial reports and analytics
• Ensuring compliance with RBI/Digital Lending guidelines
• Improving app functionality and user experience

We do not share this data with any lending institution or financial bureau for loan approvals or marketing.

4. Data Consent & User Rights

• Explicit consent obtained during registration
• All personal and financial details collected only with user permission
• Users may request account deletion at any time, which will result in removal of all personal data as described in Section 9
• Users can request a copy of their data by contacting moneymitrr@gmail.com

Note: The app requires the collected data to provide its core financial management features. Withdrawing consent by deleting your account will result in loss of access to all app services.

5. Data Storage & Security

• All data is stored in encrypted format on secure cloud servers.
• We follow ISO/IEC 27001-compliant security standards.
• Personal and financial information is not stored longer than necessary for the services provided.
• Regular security audits and penetration tests are conducted.

6. Third-Party Services & Integrations

We use licensed third-party services for:

• Authentication services (Firebase Authentication for secure login)
• Email verification services
• Cloud storage services (AWS/GCP/Azure)

These services are integrated through secure channels. No data is used for profiling, advertising, or third-party monetization.

7. Children's Privacy

Our services are intended for users above 12 years of age. We do not knowingly collect data from minors. If found, such accounts will be deleted upon verification.

8. Data Sharing and Disclosure

We do not share, rent, or sell user data to:

• Financial institutions
• Marketers or advertisers
• Credit bureaus (CIBIL, Equifax, etc.)

We may share data with:

• Regulatory or government authorities under lawful request
• Verified legal entities in case of court orders

9. Data Deletion & Retention

Users have the right to request deletion of their account and associated data at any time.

How to Request Account Deletion:

Visit our Account Deletion Request page or email us at moneymitrr@gmail.com with your registered email address.

What Gets Deleted:

• All personal information (name, email, phone number, date of birth)
• All financial records (expenses, loans, investments, income)
• Savings targets and financial goals
• Account settings and preferences
• Device information and usage data

Data Retained for Compliance:

• Anonymized transaction logs (without personal identifiers) for security audits - retained for 90 days
• Legal records if required by law or ongoing legal proceedings
• Aggregated analytics data (completely anonymized, no way to identify individual users)

Deletion Timeline:

• Confirmation: Email sent within 24 hours of request
• Account Deletion: Completed within 7 business days after email confirmation
• Backup Removal: All backups permanently removed within 90 days

10. Changes to This Policy

We reserve the right to update this policy in line with regulatory changes. Users will be notified via the app or email.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at: