1) Information We Collect

We collect the minimum information necessary to deliver and improve Gudmoney. The exact data you share depends on the features you use.

• Account Identifiers: Name, phone number, and email address (when you sign up or link accounts).
• Expense Inputs (User-Provided): Receipts, images/PDFs, order confirmations, voice notes, and manual entries you send.
• Email Data (If You Connect or Forward): If you link an email account (e.g., Gmail) or forward receipts to a Gudmoney address, we access only the transactional communications needed to extract expense details.
• Derived Expense Metadata: Categories, merchants, amounts, currencies, timestamps, and tags we compute for insights and reports.
• Usage & Device Data: Log data (timestamps, feature usage), device/interaction info, and technical diagnostics.
• Support & Communications: Messages you send us (e.g., email or chat with support).
• Subscription & Payments (If Applicable): Transaction details via our processor (we do not store full card numbers).

We do not intentionally collect government IDs, precise geolocation, or sensitive personal attributes for the purpose of expense tracking.

2) How We Use Information

• Provide core features: capture expenses from WhatsApp, uploads, voice notes, and emails; generate daily/weekly/monthly reports and budgets.
• Extract, parse, and categorize transactions (including OCR for images/PDFs and transcription for voice notes).
• Improve accuracy, performance, and user experience (including debugging and analytics).
• Send service messages you opt into (e.g., reminders, summaries) via WhatsApp or email.
• Comply with legal obligations, prevent fraud/abuse, and secure the Service.

We do not sell your personal data. We do not use your WhatsApp message content for advertising.

3) How We Share Information

• Service Providers / Subprocessors: Vendors that host data, process analytics, deliver notifications, or provide OCR/transcription/AI classification strictly to operate Gudmoney under confidentiality and data protection terms.
• Legal, Safety, and Compliance: When required by law, regulation, or to protect rights, users, and the Service.
• Business Transfers: If we undergo a merger, acquisition, or asset sale, we will provide notice and your information may be transferred.

4) Channels & Integrations

Gudmoney is designed to work across multiple platforms and integrations. Depending on the channel you use, the type of data we process may vary:

• WhatsApp: We process messages you send to our official WhatsApp number to create and categorize expenses, and to send opted-in reminders or summaries. You can opt out by replying STOP anytime.
• Web & Mobile App: If you use our apps directly, we process the data you enter (e.g., manual expense entries, uploads).
• Email Integrations: If you connect an inbox (e.g., Gmail) or forward receipts, we only process relevant transactional emails to extract expenses.
• Third-Party Integrations: We may support partner platforms (e.g., e-commerce or billers). We will process only the transactional data required to deliver expense insights.

5) Legal Bases

Depending on your location, we process your information under one or more of the following bases:

• Performance of a contract (to provide the Service you requested).
• Consent (e.g., linking email, sending reminders on WhatsApp).
• Legitimate interests (e.g., product improvement, security) balanced against your rights.
• Legal obligations (e.g., tax, accounting, compliance).

6) Data Security

• Encryption in transit (HTTPS/TLS) and at rest for stored data.
• Principle of least privilege; access restricted to authorized personnel.
• Secrets management and monitoring for anomalous activity.
• Regular backups and disaster-recovery procedures.

No method of transmission or storage is 100% secure. We work to protect your data and maintain strong controls.

7) Data Retention

• Parsed Expense Data (transactions, categories, reports): Kept until you delete the data or your account, or as required by law.
• Original Uploads (files/images/PDFs): Retained only as needed to complete extraction/quality checks, then deleted within 30 days.
• Voice Recordings: Retained only as needed for transcription/QA, then deleted within 30 days.
• Email Content: For forwarded emails, raw messages are deleted after processing within 7-30 days. For linked inboxes, only extracted expense data is stored.
• Logs/Diagnostics: Retained for security and reliability (typically up to 90 days) unless required longer by law.

8) Your Rights & Choices

• Access/Portability: Request a copy of your data.
• Correction: Update inaccurate information.
• Deletion: Delete specific entries or your entire account. You can also email [email protected] with subject "Delete My Data - Gudmoney".
• Withdraw Consent: Disconnect email, stop reminders, or reply STOP on WhatsApp.
• Objection/Restriction: Object to or restrict certain processing where applicable.

9) Children's Privacy

Gudmoney is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided data, please contact us to delete it.

10) International Data Transfers

Your information may be processed and stored in India or other countries where we or our service providers operate. We implement appropriate safeguards consistent with applicable laws for cross-border transfers.

11) Changes to This Policy

We may update this Policy from time to time. We will change the "Effective Date" above and, when appropriate, notify you by in-app/WhatsApp message or email.

12) Contact & Grievance Officer