Privacy Policy
Last updated: 3 October 2026 · HisaabKittab is in private beta in India.
HisaabKittab helps you see your money in one place, using statements you upload and entries you make yourself. We do not read your SMS and we never ask for your bank login. This page explains, in plain language, what we collect and why, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. What we collect
- Your email address, when you join the waitlist or create an account.
- Account and transaction data that you enter or upload: bank or card statements, transactions, EMIs, SIPs, goals, categories and notes.
- Device and session information: device type, browser, IP address, and login/session records, used to keep your account secure.
2. Why we use it
- To run the app: show your spending, EMIs, SIPs and goals.
- To send you emails you need, such as waitlist confirmation, invites and login codes.
- To protect the service against abuse and fraud.
- To fix bugs and improve the product.
3. Legal basis: your consent
We process your personal data on the basis of your consent under the DPDP Act. You give it when you join the waitlist or sign up, and again separately for optional features such as AI. You can withdraw consent at any time; withdrawing may mean we can no longer provide the service.
4. AI features (optional)
If, and only if, you opt in to AI features, the data needed to answer your question may be sent to OpenAI to generate a response. If you do not opt in, none of your financial data is sent to OpenAI. You can turn AI off again at any time.
5. Where data is stored, and who else sees it
Your data is stored on our own server. We do not sell your data and we do not share it with anyone except the processors that help us run the service: Resend (to deliver email), Cloudflare Turnstile (a bot check on the waitlist form, which sees your IP address and browser signals) and, only if you opt in, OpenAI (for AI features). Where required by law, we may disclose data to authorities.
6. How long we keep it
We keep your data while your account is active. If you delete your account, we delete your account and financial data, except limited records we are legally required to keep or need briefly to prevent abuse. Waitlist emails are kept until you are invited, or until you ask us to remove them. Backups are overwritten on a regular cycle.
7. Your rights: export and deletion
You can ask us to export a copy of your data, correct it, or delete it, and you can nominate someone to exercise these rights on your behalf as the DPDP Act allows. Write to privacy@hisaabkittab.com and we will respond within a reasonable time.
8. Security
We use encryption in transit, access controls and login protections. No system is perfectly secure, so we also encourage you to keep your device and login secure.
9. Children
HisaabKittab is not meant for people under 18.
10. Grievance officer
For questions, complaints or to exercise your rights, contact our Grievance Officer at privacy@hisaabkittab.com. If we do not resolve your concern, you may approach the Data Protection Board of India.
11. Changes and governing law
We may update this policy and will tell you about material changes. This policy is governed by the laws of India.