Privacy Policy
Last updated: June 2026
Your privacy matters to us. This policy explains how TrackMyRupee collects, uses, and protects your information.
Table of Contents
1. Information We Collect
We collect information you provide directly to us when you create an account, input financial data, or interact with our platform.
- Account Information: Email & Username → Account identification and communication → Consent → Until account deletion.
- Financial Data: Manually entered transactions (incomes, expenses, budgets) → Dashboard processing and visualization → Consent → Until account deletion.
- Profile Preferences: Currency and theme preferences → Interface personalization → Consent → Until account deletion.
- Usage Data: Device & Browser Info, IP address → Verification of authentic sessions and bot prevention → Consent → Until account deletion.
- Payment Information: Payment details (handled by Razorpay) → Subscription processing → Contractual necessity → 5 years as required by Indian tax law.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services.
- Provide the TrackMyRupee dashboard, expense tracking, and financial reports.
- Process and visualize your financial data.
- Send important notifications, such as password resets or account alerts.
- Analyze usage patterns to fix bugs and improve performance.
- Prevent abuse and enforce our Terms of Service.
3. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.
Google Analytics
We use Google Analytics to monitor and analyze the use of our Service. Google Analytics involves the use of cookies to collect information such as your IP address, browser type, and pages visited. This helps us understand user behavior and improve our platform.
You can opt-out of having your activity available to Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Google Analytics Opt-out Browser Add-on.
4. Information Sharing
We do not sell your personal information. We only share data in limited circumstances:
- Service Providers: With trusted third-party vendors (e.g., hosting providers, email services, analytics) who assist our operations.
- Legal Compliance: If required by law, regulation, or legal process to protect the rights, property, or safety of TrackMyRupee or others.
- Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
5. Data Security
We implement appropriate technical and organizational measures to protect your information.
- Passwords are securely hashed using industry-standard algorithms (PBKDF2) and are never stored in plain text.
- Secure HTTPS (TLS/SSL) for all data transmitted between your browser and our servers.
- Payment processing is handled entirely by Razorpay. We never store your card numbers, UPI IDs, or banking credentials.
- Access controls to limit internal access to personal data.
Note: Your financial data (expenses, incomes, categories) is stored in our database and is not encrypted at rest. While we take measures to protect our infrastructure, we encourage you not to enter highly sensitive information (such as bank account numbers or credit card details) into expense descriptions.
5a. Data Breach Notification
In the event of a personal data breach, TrackMyRupee will:
- Notify the Data Protection Board of India within 72 hours of becoming aware of the breach.
- Notify affected users by email within 72 hours describing what data was affected and what steps are being taken.
- Maintain an internal record of all breaches and our response actions.
6. Your Rights Under DPDP Act 2023
Under India's Digital Personal Data Protection Act 2023, you have the right to: (1) Access your personal data. (2) Correct inaccurate data. (3) Request erasure of your data. (4) Withdraw consent at any time by deleting your account from Settings -> My Data -> Delete Account. Withdrawal of consent will result in account termination as the service cannot be provided without processing your data. (5) File a complaint with the Data Protection Board of India at dpboard.gov.in.
Note on Erasure Requests: Payment records are retained for 5 years as required by Indian tax law and cannot be deleted on request.
7. Data Retention
We retain your information only as long as necessary to provide our services and comply with legal obligations.
- Active Accounts: Data is retained while your account remains active.
- Deleted Accounts: If you delete your account, your personal data is removed from our live databases immediately and from backups within 30-90 days.
- Exception for Payment Records: Payment records are retained for 5 years as required by Indian tax law and cannot be deleted on request.
8. Children's Privacy
TrackMyRupee is not intended for children under 13. We do not knowingly collect information from children. If we learn we have collected personal information from a child under 13, we will delete it.
9. Changes to Privacy Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page or sending you an email. Your continued use of the Service constitutes acceptance of the changes.
10. Contact Us & Grievance Officer
If you have questions about this privacy policy or our practices, please contact us at:
[email protected]
Grievance Officer
Grievance Officer: Omkar Pathak, TrackMyRupee, Email: [email protected]. We will respond to all grievances within 30 days.