Privacy Policy

1. Overview

Group Savings Tracker ("the App", "we", "our", or "us") is a private mobile application operated by Digital Kalatari Private Limited. The App is used exclusively by a closed group of members to track collective savings contributions, investment portfolios, and group fund progress.

This Privacy Policy explains what personal information we collect, why we collect it, and how we protect it. By using the App, you agree to the practices described in this Policy.

2. Information We Collect

We collect only the information necessary to operate the group savings tracker:

• Account information — full name, phone number, and (optionally) email address, provided by the administrator when your account is created.
• Authentication data — hashed passwords and a 4-digit PIN stored locally on your device; we never store plain-text passwords or PINs.
• Contribution records — payment amounts, payment dates, and optional notes you or an administrator enter when recording contributions.
• Device data — a profile photo you optionally upload; stored locally on your device only and never sent to our servers.
• Usage activity — the date and time you log in (for session management only).

We do not collect location data, browsing history, advertising identifiers, health data, or any information unrelated to the group savings purpose.

3. How We Use Your Information

Your information is used solely for the following purposes:

• Creating and managing your account within the group
• Authenticating your identity when you log in
• Recording, displaying, and approving contribution payments
• Calculating group savings progress and individual member totals
• Sending in-app notifications and payment reminders from the administrator
• Displaying the investment portfolio summary to all members

We do not use your data for advertising, profiling, or any commercial purpose beyond operating the App.

4. Sharing of Information

We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes.

Limited sharing occurs only in these situations:

• Within the group: Your name, contribution history, and totals are visible to the group administrator and, in aggregate, to other members of your savings circle.
• Email delivery: If you provide an email address, we use it to send OTP verification codes via our email provider (SMTP). Your email address is not shared with any third-party marketing service.
• Legal requirement: We may disclose information if required to do so by law or in response to a valid legal process.

5. Data Storage & Security

Your data is stored on a private, password-protected database server. We implement the following security measures:

• All passwords are hashed using industry-standard algorithms before storage
• All data is transmitted over encrypted HTTPS connections
• Access to the database is restricted to authorised administrators only
• Authentication tokens are time-limited and signed with a secure secret key

While we take reasonable steps to protect your data, no system is 100% secure. Please keep your password and PIN confidential.

6. Data Retention

We retain your account and contribution records for as long as the savings group is active, or for as long as required for accounting and auditing purposes. If your account is deactivated, your historical contribution records are retained for the group's financial records but your account can no longer be used to log in.

You may request deletion of your personal information at any time by contacting the administrator (see Section 11). Note that financial contribution records may need to be retained for legal and audit purposes even after account deletion.

7. Your Rights

As a user of the App, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that incorrect data be updated
• Deletion — request removal of your account and personal data
• Objection — object to any use of your data beyond the stated purposes

To exercise any of these rights, contact us using the details in Section 11.

8. Children's Privacy

The App is intended for adults only. We do not knowingly collect personal information from anyone under the age of 18. Accounts are created only by the group administrator for verified adult members. If you believe a minor's information has been collected in error, please contact us immediately.

9. Third-Party Services

The App uses the following third-party infrastructure:

• Replit (hosting platform) — the App's backend server and database run on Replit's cloud infrastructure. Replit's own privacy policy applies to infrastructure-level data.
• SMTP email service — used solely for sending one-time password (OTP) codes to members who provide an email address.

No analytics SDKs, advertising networks, or social media trackers are embedded in the App.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we will notify group members via an in-app alert. Continued use of the App after any changes constitutes acceptance of the updated Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact: