Privacy Policy

1. Introduction

This Privacy Policy explains how AiXpense, operated by Pratik Jadhav ("we", "us", "our"), collects, uses, stores, and protects your personal data when you use our AI-powered expense tracking application, available on the web at aixpense.in and as a mobile application on the Google Play Store. This policy complies with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data We Collect

We collect the following categories of data:

2.1 Account Information

• Full name
• Email address
• Profile picture (if provided via Google/GitHub login)
• Authentication provider details (Google, GitHub)

2.2 Financial Data (User-Provided)

• Expense and income descriptions and amounts
• Categories and tags assigned to transactions
• Budget configurations
• Recurring payment rules and schedules
• Chat conversations with the AI assistant

2.3 Voice & Audio Data

When you use the voice input feature, your device microphone is accessed to capture your spoken input. Audio is streamed to Sarvam AI's speech-to-text API for transcription. We do not store raw audio recordings on our servers. Only the resulting text transcript is retained as part of your chat history. Microphone access requires your explicit permission and can be revoked at any time through your device or browser settings.

2.4 Camera & Image Data

When you use the bill or receipt scanning feature, your device camera or photo gallery is accessed to capture or select images. These images are sent to our AI service (powered by OpenAI) for optical character recognition and data extraction. Images are processed transiently and are not stored permanently on our servers once extraction is complete. Camera and photo library access requires your explicit permission and can be revoked at any time.

2.5 Technical Data (Automatically Collected)

• IP address
• Browser or app version and type
• Device model and operating system (for mobile app)
• Usage patterns and session data
• Push notification token (mobile app, if notifications are enabled)

2.6 Payment Data

We do not directly store your credit/debit card numbers or UPI details. All payment processing is handled by Razorpay, our third-party payment processor. We only store transaction references, plan details, and subscription status.

3. Device Permissions (Mobile App)

The AiXpense mobile application (available on the Google Play Store) may request the following device permissions:

All permissions are optional where technically feasible. Denying a permission disables the corresponding feature but does not affect other app functionality.

4. Purpose of Data Collection

• To provide and maintain the expense tracking Service
• To process your voice inputs via Sarvam AI for speech-to-text transcription
• To process your natural language and voice inputs through AI for categorization
• To extract financial data from bill and receipt images via camera scanning
• To generate financial insights and analytics
• To manage recurring payment schedules on your behalf
• To process payments and manage subscriptions
• To send transactional emails (password resets, receipts, AI spending coach reports)
• To improve the Service and fix issues
• To comply with legal obligations

5. Third-Party Data Sharing

We share your data with the following third-party service providers, strictly for the purpose of delivering the Service:

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

6. Data Storage & Security

Your data is stored in encrypted MongoDB databases hosted on secure cloud infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Hashed passwords (never stored in plaintext)
• Secure authentication tokens
• Regular security reviews
• No persistent storage of raw voice audio or bill images

7. Data Retention

We retain your personal data for as long as your account remains active. When you delete your account, all your personal data, including expenses, budgets, AI conversations, recurring payment rules, and subscription records, is permanently and immediately deleted from our systems. This action is irreversible. Anonymized or aggregated statistical data that cannot be linked back to you may be retained for analytics purposes. We may also retain data where required by applicable law (e.g., for fraud prevention or legal claims).

8. Your Rights (Under DPDP Act, 2023)

As a data principal, you have the right to:

• Access - Request a summary of your personal data and processing activities
• Correction - Request correction of inaccurate or incomplete data
• Erasure - Request deletion of your personal data (subject to legal retention requirements)
• Withdraw Consent - Withdraw your consent for data processing at any time (this may affect Service availability)
• Revoke Device Permissions - Revoke microphone or camera access at any time via your device or browser settings
• Grievance Redressal - File a complaint with our Grievance Officer
• Nominate - Nominate another individual to exercise your rights in case of death or incapacity

9. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising trackers. No data is shared with ad networks.

10. Children's Data

AiXpense is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 7 days before they take effect. Continued use of the Service after changes constitutes acceptance.

12. Grievance Officer

In accordance with the IT Act, 2000 and DPDP Act, 2023, the details of the Grievance Officer are: