1. Who we are
Arthiva is a personal finance app published by Arthiv Technologies (“we”, “us”). We decide why and how your personal data is processed in the app, so we are the Data Fiduciary for it under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).
This policy covers the Arthiva Android app, its cloud services, and this website. It does not cover Google Play, Google Sign-In or other services that have their own privacy policies.
2. What we collect
We only collect what the app needs to work. Specifically:
| Category | What it includes | Where it comes from |
|---|---|---|
| Account details | Your name, email address and profile photo link from your Google account, and an internal user ID. | Google Sign-In, when you sign in |
| Financial records you enter | Account names and types, balances, credit limits, bill and due days; transactions (amount, date, category, payment mode, notes); categories, tags and budgets; recurring entries; investment values. | You |
| Borrow & lend records | Names you give to people you lent to or borrowed from, amounts, interest and EMI terms, due dates, agreement notes and witness names. | You (see section 8) |
| Subscription details | Plan, status, renewal and expiry dates, Google Play order ID and purchase token. We never receive your card, UPI or bank details. | Google Play |
| Support requests | Subject, description, the email on your account and any order ID you include. | You |
| Optional AI features | Only when you turn AI on: the text you type for AI entry, category names, and summary figures for the advisor (see section 4). | You |
| Device and app data | Push notification token and an app installation ID; app usage events (screens opened, sign-in, the type of entry added, subscription events); crash reports and performance data (device model, Android version, app version). | The app, through Google Firebase |
We do not collect: your SMS messages, contacts, location, photos or files, net-banking passwords, card numbers, or your advertising ID. The app does not ask for those permissions.
3. How we use your data
- To run the app: sign you in, save and sync your records across devices, and calculate balances, budgets, Safe-to-Spend, net worth and summaries.
- To send the notifications you rely on, such as bill and due-date reminders, budget alerts and repayment reminders.
- To process and verify your Pro subscription with Google Play, and to restore it on a new device.
- To answer support requests and handle payment or refund issues.
- To provide optional AI features, only after you turn them on.
- To keep the app secure and reliable: detect abuse, fix crashes and improve performance. Usage analytics never include your amounts, notes or category names.
- To keep records the law requires, such as billing records for tax and accounting.
4. Optional AI features
AI entry, smart category suggestions and the AI advisor are optional. The app asks for your permission before the first AI request, and you can turn AI off at any time from the AI screen.
When AI is on, we send only what each feature needs to Google's Gemini API:
- AI entry: the sentence you type and your category names.
- Category suggestions: the transaction note and type, and your category names.
- AI advisor: your question, your category names, and summary figures: this month's income, spending and budget, your top spending categories, and a six-month income and spending trend.
We don't send your name, email or account balances, and we don't store your AI questions or answers. We keep only a monthly count of AI requests to apply your plan's limits. AI answers can be wrong; they are general information, not financial, tax or investment advice. Don't include passwords, card numbers or other secrets in AI text.
6. Where your data is stored and how it is protected
Your data is stored on Google Cloud servers in Singapore (Google Cloud asia-southeast1), so it is processed outside India. We do this as permitted under the DPDP Act and will follow any restrictions the Government of India notifies.
Data is encrypted in transit (HTTPS/TLS) and at rest. Access rules on our database let only your signed-in account read your records, and sensitive changes such as plan status can only be made by our servers. No system is perfectly secure; if a breach affects your personal data, we will notify you and the Data Protection Board of India as the law requires.
7. How long we keep data
| Data | How long |
|---|---|
| Your account and financial records | Until you delete them or delete your account. Account deletion removes them immediately. |
| Subscription and billing records | Up to 8 years after the financial year of the payment, in anonymised form (not linked to your name or email), as required by the Companies Act, 2013 and GST law. |
| Deletion record | Your internal user ID and the date you deleted your account, kept so a deleted account cannot be recreated by mistake. |
| Analytics and crash data | Kept by Google Firebase under its retention settings (at most 14 months for analytics, 90 days for crash reports). |
| Server logs | Up to 30 days, for security and troubleshooting. |
| Support requests | Until resolved and while your account exists; deleted with your account. |
Google Play keeps its own records of your purchases under Google's privacy policy.
8. Information about other people
Borrow & lend records can include the name of the person you lent to or borrowed from, a witness name and notes. Enter only what you need to keep track (a first name or nickname is enough), and only if you have a legitimate reason to record it. Don't enter phone numbers, ID numbers or other sensitive details about other people. That person can contact us to ask about or remove information about them.
9. Your rights and choices
Under the DPDP Act you can:
- Access a summary of your personal data and how we process it. Most of it is visible in the app, and you can export any account's history as CSV.
- Correct or update your data. Edit any record in the app, or ask us.
- Erase your data: delete individual records in the app, or delete your whole account (see Delete Account).
- Withdraw consent: turn AI off on the AI screen, turn notifications off in Android settings, or delete your account. Withdrawing consent doesn't affect processing done before it.
- Nominate someone to exercise your rights if you die or become incapacitated.
- Raise a grievance with us (section 12) and, if you are not satisfied, with the Data Protection Board of India.
To exercise a right, use Profile → Need Help? → Privacy & Data Rights in the app, or email contact.arthiva@arthiv.com. We may need to confirm it's you, and we will respond within the time the law requires, normally within 30 days.
10. Children
Arthiva is meant for adults. You must be at least 18 years old to use it. We don't knowingly process personal data of anyone under 18. If you believe a child has signed up, email contact.arthiva@arthiv.com and we will delete the account.
11. Changes to this policy
We will update this page when our practices change and revise the effective date above. If a change materially affects how we use your data, we will tell you in the app before it takes effect and, where the law requires, ask for your consent again.
12. Contact and Grievance Officer
For any question, request or complaint about your personal data, contact:
- Grievance Officer: [Name — to be published]
- Email: contact.arthiva@arthiv.com
- Phone: +91 98859 42665
- Arthiv Technologies, [Registered address — to be published]
We acknowledge grievances within 48 hours and aim to resolve them within 30 days.