Privacy Policy

Last updated: March 2025

1. Introduction

Arth ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services ("Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service.

2. Information We Collect

We collect information you provide directly to us and information collected automatically:

  • Account information: Mobile number, email address, name, and profile photo.
  • Financial data: Transaction records, bill information, cash entries, and account balances you manually enter or connect.
  • Device information: Device ID, operating system, app version, and unique device identifiers.
  • Usage data: Features accessed, session duration, crash reports, and performance data.
  • Location data: Approximate location (with your permission) to auto-tag cash entries.
  • Camera/Photos: Only when you explicitly scan receipts or documents.

3. How We Use Your Information

  • To provide, operate, and maintain our Service
  • To send bill reminders, spending insights, and account notifications
  • To improve and personalise your experience using AI-powered insights
  • To authenticate your identity securely via OTP and biometrics
  • To comply with legal obligations under applicable Indian law
  • To detect and prevent fraud and unauthorised access

4. Data Sharing

We do not sell your personal data to any third party. We may share data with:

  • Service providers: Cloud infrastructure (Supabase), analytics, and crash reporting tools — bound by confidentiality agreements.
  • Legal requirements: When required by law, court order, or government authority in India.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, with prior notice to you.

5. Data Security

We implement 256-bit AES encryption for data at rest and TLS 1.3 for data in transit. Sensitive credentials are stored in device Secure Enclave / Keystore. We perform regular security audits. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. On account deletion, we delete your personal data within 30 days, except where retention is required by law (e.g., financial records under Indian regulations).

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request erasure of your data
  • Withdraw consent at any time
  • Nominate a person to exercise rights on your behalf

To exercise these rights, contact us at privacy@artha.app

8. Children's Privacy

Arth is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via app notification or email at least 7 days before the change takes effect. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or grievances:

Grievance Officer

Arth Technologies Private Limited

Email: privacy@artha.app

Response time: within 72 hours