Privacy Policy

1. Introduction

Moneylix (“we,” “our,” or “us”) is a personal finance management application designed for freelancers, small business owners, and individuals in India. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website (moneylix.in), mobile applications (iOS and Android), and related services (collectively, the “Service”).

By using Moneylix, you agree to the collection and use of information in accordance with this policy. This policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable international data protection standards.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you register
• Financial Data: Income, expenses, transactions, categories, and receivable records you manually enter
• Business Information: Business names and categories you create within the app
• Payment Information: Subscription payments are processed by Razorpay; we do not store your card/UPI details

2.2 Information Collected Automatically

• Device Information: Device type, operating system, app version
• Usage Data: Features used, session duration, and interaction patterns (anonymized)
• Log Data: IP address, browser type, and access timestamps for security

2.3 Bank Sync Data (Optional, Future Feature)

If you choose to connect your bank account via Account Aggregator (AA) framework, we will access transaction data only with your explicit consent, for the duration you specify, and only for the purpose of auto-importing transactions. This data is processed locally and not shared with third parties.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process your transactions and display financial summaries
• Provide AI-powered investment recommendations (using anonymized financial summaries)
• Send transactional emails (plan upgrades, password resets)
• Process subscription payments via Razorpay
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations under Indian law

4. Data Storage & Security

• Your data is stored on secure servers hosted in India
• All data transmission is encrypted using SSL/TLS (HTTPS)
• Passwords are hashed using bcrypt and never stored in plain text
• Admin access is protected with bcrypt-authenticated credentials
• We implement access controls and regular security reviews

While we implement industry-standard security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• Razorpay: Payment processing for subscriptions (Razorpay's own privacy policy applies)
• Anthropic (Claude AI): Anonymized financial summaries for investment advice generation — no personal identifiers are sent
• Resend: Transactional email delivery
• Setu (future): Bank account sync via Account Aggregator framework, only with your explicit consent

We may disclose information if required by law, court order, or government regulation.

6. Your Rights (DPDP Act Compliance)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate data
• Erasure: Request deletion of your account and all associated data
• Withdraw Consent: Withdraw consent for data processing at any time
• Grievance Redressal: File a complaint with our Grievance Officer
• Nominate: Nominate another person to exercise your rights in case of death or incapacity

To exercise any of these rights, use the “Delete Account” option in your dashboard settings or contact us at the email below. We will respond within 30 days.

7. Data Retention

• Your account data is retained as long as your account is active
• If you delete your account, all personal data is permanently erased within 30 days
• Anonymized, aggregated analytics data may be retained indefinitely
• Payment transaction records are retained for 7 years as required by Indian tax law

8. Cookies & Local Storage

We use essential cookies and local storage for authentication (session tokens) and app preferences (theme, last-viewed business). We do not use third-party tracking cookies or advertising cookies.

9. Children's Privacy

Moneylix is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. The “Last updated” date at the top reflects the most recent revision.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights: