Privacy Policy
Effective Date: May 17, 2025
Data Controller: Rizwan Gazi / thyrizwan.com
This Privacy Policy explains how ThyFin and thyrizwan.com ("we", "our", or "us") collect, use, store, and protect your personal data when you use our mobile application or website.
1. Information We Collect
Account Data
- Mobile phone number (required for registration and OTP verification)
- Full name (optional, provided in your profile)
- Email address (optional, provided in your profile)
- Profile preferences (language, timezone, date format, country, base currency)
Financial Data
- Income and expense transactions you record in the app
- Account balances and account names
- Categories, budgets, and financial goals
- Debt and investment records
This data is stored securely on our servers and synced across your devices.
Subscription & Payment Data
- Subscription plan and expiry date
- Payment transactions are processed by Razorpay — we do not store full card or bank details
Technical Data
- Authentication tokens stored securely on your device
- Device activity timestamps for session management
- Support ticket messages you send through the app
Website Data
- Basic analytics (page views, referrer information) through privacy-focused tools
- Contact form submissions (name, email, message)
2. How We Use Your Information
- To create and manage your account
- To deliver OTP verification messages via WhatsApp
- To sync your financial data securely across devices
- To process subscription payments via Razorpay
- To respond to support requests submitted through the app
- To send important account notifications (subscription expiry, security alerts)
- To improve the application and fix issues
3. Third-Party Services
We use the following third-party services to operate ThyFin:
- Meta (WhatsApp Cloud API): Used to deliver OTP verification codes to your mobile number. Meta processes your phone number to deliver the message. See WhatsApp Privacy Policy.
- Razorpay: Used to process subscription payments. Razorpay handles all payment card and bank details. We only receive payment confirmation and subscription status. See Razorpay Privacy Policy.
- Google Play Services: For app distribution, updates, and in-app billing infrastructure.
4. Data Storage and Security
Your account and financial data are stored on our secure servers. We implement the following security measures to protect your information:
- Encrypted data transmission over HTTPS/TLS for all API communication
- Authentication tokens stored in encrypted secure storage on your device
- OTP-based authentication — no passwords required
- Regular security updates and server monitoring
- Access controls limiting who can access production data
5. Data Retention
We retain your account and financial data for as long as your account is active. If you delete your account or request data deletion, we will permanently remove your data from our servers within 30 days. Payment records may be retained for up to 7 years as required by Indian financial regulations.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request permanent deletion of your account and all associated data
- Export your financial data (available in-app)
- Withdraw consent and close your account at any time
To exercise these rights, see our Data Deletion page or email us at [email protected].
7. Children's Privacy
ThyFin is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email at least 14 days before taking effect. The "Effective Date" at the top of this page always reflects the latest version.
9. Contact Information
For any questions about this Privacy Policy or your data:
Email: [email protected]
Website: thyrizwan.com
This Privacy Policy is effective as of May 17, 2025.