Data Controller: Rizwan Gazi / thyrizwan.com
This Privacy Policy explains how ThyFin and thyrizwan.com, operated by Rizwan Gazi ("I", "me", or "my"), collect, use, store, and protect your personal data when you use my mobile application or website.
1. Information I Collect
Account Data
- Mobile phone number (required for registration and OTP verification)
- Full name (optional, provided in your profile)
- Email address (optional, provided in your profile)
- Profile preferences (language, timezone, date format, country, base currency)
Financial Data
- Income and expense transactions you record in the app
- Account balances and account names
- Categories, budgets, and financial goals
- Debt and investment records
This data is stored securely on my servers and synced across your devices.
Subscription & Payment Data
- Subscription plan and expiry date
- Payment transactions are processed by Razorpay — I do not store full card or bank details
Technical Data
- Authentication tokens stored securely on your device
- Device activity timestamps for session management
- Support ticket messages you send through the app
Website Data
- Basic analytics (page views, referrer information) through privacy-focused tools
- Contact form submissions (name, email, message)
2. How I Use Your Information
- To create and manage your account
- To deliver OTP verification messages via WhatsApp
- To sync your financial data securely across devices
- To process subscription payments via Razorpay
- To respond to support requests submitted through the app
- To send important account notifications (subscription expiry, security alerts)
- To improve the application and fix issues
3. Third-Party Services
I use the following third-party services to operate ThyFin:
- Meta (WhatsApp Cloud API): Used to deliver OTP verification codes to your mobile number. Meta processes your phone number to deliver the message. See WhatsApp Privacy Policy.
- Razorpay: Used to process subscription payments. Razorpay handles all payment card and bank details. I only receive payment confirmation and subscription status. See Razorpay Privacy Policy.
- Google Play Services: For app distribution, updates, and in-app billing infrastructure.
4. Data Storage and Security
Your account and financial data are stored on my secure servers. I implement the following security measures to protect your information:
- Encrypted data transmission over HTTPS/TLS for all API communication
- Authentication tokens stored in encrypted secure storage on your device
- OTP-based authentication — no passwords required
- Regular security updates and server monitoring
- Access controls limiting who can access production data
5. Data Retention
I retain your account and financial data for as long as your account is active. If you delete your account or request data deletion, I will permanently remove your data from my servers within 30 days. Payment records may be retained for up to 7 years as required by Indian financial regulations.
6. Your Rights
You have the right to:
- Access the personal data I hold about you
- Request correction of inaccurate data
- Request permanent deletion of your account and all associated data
- Export your financial data (available in-app)
- Withdraw consent and close your account at any time
To exercise these rights, see my Data Deletion page or email me at [email protected].
7. Children's Privacy
ThyFin is not directed to children under 13. I do not knowingly collect personal information from children under 13. If you believe I have collected such information, please contact me immediately and I will delete it.
8. Changes to This Policy
I may update this Privacy Policy from time to time. Material changes will be communicated via the app or email at least 14 days before taking effect. The "Effective Date" at the top of this page always reflects the latest version.
9. Contact Information
For any questions about this Privacy Policy or your data:
Email: [email protected]
Website: thyrizwan.com
This Privacy Policy is effective as of May 17, 2025.