PaisaPani

PaisaPani is operated by TunesPay Advertising Private Limited ("we", "us", "the app"). It helps you track spending and discover relevant financial offers. This policy explains what we collect, why, and your choices. The app is local-first: most of your data stays on your device.

1. Information we collect

• Account details — your name and mobile number (and optional email) provided at signup. Your mobile number is your account identifier. We store only a salted one-way hash of your MPIN, never the MPIN itself.
• Transaction data you import (bank/UPI statements) or that the app captures from your bank/UPI SMS and notifications, to track and categorise your spending.
• Imported files (PDF / Excel / CSV statements) you choose to import — read on your device to extract transactions; the file itself is not uploaded.
• PAN and name, only when you choose to check your credit score, and only with your explicit consent — used to fetch your score from a bureau partner.
• Lead details (name, phone, email) only when you choose to apply for a card, loan, or insurance offer — shared with the partner you selected.
• Anonymous usage analytics, which you can turn off in Settings.

We do not collect or store your biometric (fingerprint/face) data — biometric unlock is handled entirely by your device's secure hardware.

2. How we use it

To run your account, capture and categorise transactions, send reminders, show relevant offers, and (if you enable it) back up your data so you can restore it on another phone. We do not sell your personal data.

3. SMS & notification access

With your permission, the app reads only bank/UPI transaction alerts (from SMS and notifications) to auto-capture transactions. We do not read personal messages, OTPs, or chats, and this content is never sold or shared with advertisers. Both are optional — you can use manual import instead, and revoke access anytime in system settings.

4. Account & cross-device backup

If you create an account and enable backup, your transaction data is synced to our servers, tied to your account, over encrypted (HTTPS) connections — so you can sign in on a new phone and restore it. You can request deletion of this server-side data at any time (see "Your rights").

5. Sharing

• With offer partners (e.g. card/loan/insurance providers, credit bureau) only when you submit a request, limited to what's needed to process it.
• With affiliate networks (e.g. Cuelinks) for coupon attribution, via click tracking — not your personal financial data.
• When required by law.

6. Permissions we request

• Notification access — read bank/UPI transaction alerts (optional).
• SMS (read/receive) — read bank/UPI transaction SMS (optional).
• Notifications — show your payment reminders.
• Exact alarms — fire reminders at the right time.
• Biometric — fingerprint/face unlock (handled by your device).
• Run in background / ignore battery optimisation — keep capturing transactions reliably (optional).
• Internet — sync/backup and load offers.

Each permission is requested in context and is optional except Internet; the app works without the optional ones (e.g. via manual import).

7. Storage & security

Transactions are stored locally on your device; if backup is enabled they are also synced to our servers over HTTPS, tied to your account. Your MPIN is stored only as a salted hash. We apply reasonable safeguards but no method is 100% secure.

8. Your rights

You can view, edit, or delete your data in the app, withdraw consent, disable analytics, and uninstall to remove local data. To request deletion of your account or any server-side data, email us.

9. Children

PaisaPani is not intended for anyone under 18.

10. India / DPDP Act 2023

We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023. For any data grievance, contact our Grievance Officer, Sumit Pardeshi, at sumit@tunespay.in.

11. Changes

We may update this policy; the "Last updated" date will change accordingly.