Legal
Privacy Policy
Last updated: 13 November 2026
The short version
- You type in your loans, income, expenses and savings yourself. We never ask for bank logins, card numbers or SMS access.
- We use your data only to run DebtDash for you. We never sell it.
- You can export or delete everything at any time, in the app or by email.
1. Who we are
DebtDash ("DebtDash", "we", "us") is a personal finance tracking app for Android and iPhone, with this website at getdebtdash.com. DebtDash is operated from India. For anything about your data, email privacy@getdebtdash.com.
2. Scope
This policy covers the DebtDash app, getdebtdash.com and any email we send you. It is written to meet India's Digital Personal Data Protection Act, 2023 and its Rules, and it applies to users worldwide.
3. What we collect and why
| Data | Why we need it |
|---|---|
| Email address | To sign you in with a one-time code and to send service emails |
| Name and phone number | To personalise the app and help you recover your account. We do not send marketing SMS |
| Country and currency | To show amounts in your currency and set prices |
| Loans, EMIs, payments, income, expenses, savings, goals and family profiles you add | To give you the dashboard, reminders, reports and calculators. This is the core of the app |
| Documents you upload to the vault (Pro) | To store them for you. They are encrypted and only you can open them |
| Device and app information (model, OS version, app version, IP address, push token) | To send reminders, keep your account secure, block spam and fix crashes |
| Usage events (for example "loan added", "report opened") | To understand which features help people and improve the app. These never include your amounts or notes |
| Purchase status | To unlock Pro. Payments are handled by Google Play or the App Store; we never see your card details |
We do not collect your bank login, card numbers, SMS, contacts, photos (other than vault files you choose) or precise location.
4. Advertising
The free version shows ads from Google AdMob. Where the law requires it, we ask for your consent before personalised ads are shown, and you can change your choice any time in Profile → Privacy. AdMob may use your device's advertising ID. Your loan, income and expense data is never shared with advertisers. Pro users see no ads.
5. Services we use
We share data only with providers that help us run DebtDash, under contracts that limit their use of it:
- Amazon Web Services: servers, database, encrypted file storage and sign-in emails
- Cloudflare: website hosting, network security and email forwarding
- Google Firebase: push notifications, crash reports and anonymous usage analytics
- Google AdMob: ads in the free version
- RevenueCat, Google Play and Apple App Store: subscriptions and the free trial
- Sentry: error monitoring
Some of these providers store data outside India. We use them only where the law allows such transfers, and we protect your data the same way wherever it is stored. We may also disclose data if the law requires it.
6. How we protect your data
- All traffic is encrypted with HTTPS (TLS).
- Sensitive fields and vault files are encrypted at rest.
- Sign-in uses one-time codes, so there is no password to steal. Sessions can be ended from the app.
- Access to production systems is limited and protected with two-factor authentication.
- If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
7. How long we keep it
- While your account is active, we keep your data so the app works.
- When you delete your account, it is hidden at once and permanently deleted after 30 days. Backups are overwritten within a further 30 days.
- If you don't use DebtDash for 3 years, we will email you, then delete the account.
- We may keep limited records (for example, subscription receipts) where tax or other laws require it.
8. Your rights
You can:
- See and export your data: Profile → Export my data
- Correct anything: edit it in the app
- Delete your account: Profile → Delete account, or see getdebtdash.com/delete-account
- Withdraw consent for personalised ads or analytics: Profile → Privacy
- Nominate someone to act for you if you die or can't act yourself: email us
- Raise a grievance with our Grievance Officer at grievance@getdebtdash.com. We will reply within 30 days and in any case within 90 days. If you're not satisfied, you can complain to the Data Protection Board of India.
9. Children
DebtDash is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has signed up, email us and we will delete the account.
10. Changes to this policy
If we make important changes, we will tell you in the app or by email before they apply. The date at the top shows the latest version.
11. Contact
Privacy: privacy@getdebtdash.com · Grievance Officer: grievance@getdebtdash.com · Support: support@getdebtdash.com