How ArthPulse protects your data
A money app only works if you can trust it. This page explains, in plain words, what ArthPulse reads, what it never touches, and what happens to your data. The legal detail is in our Privacy Policy.
What ArthPulse reads, and what it never touches
✓ Bank, card and UPI alerts
The transaction SMS your bank, card and UPI apps already send you. From them we keep the amount, date, merchant, category and the last 4 digits of the account or card.
✗ Your bank login
No net banking password, card PIN or UPI PIN, ever. There is no "connect your bank" step and no account aggregator.
✗ OTPs and personal messages
On the Google Play version, messages we identify as OTPs or as personal messages from an individual's number are dropped on your phone, before anything is uploaded.
✗ Full account or card numbers
We store the last 4 digits only. Never a full account number, never a full card number.
✗ Your precise location
No GPS and no location permission. We work out only an approximate city, region and country from your connection, on our own servers.
✗ Your money
ArthPulse can only read alerts. It cannot make a payment, a transfer, or any change to your accounts or cards.
Where your data goes
- Encrypted in transit. Everything moves between your phone and our servers over encrypted (HTTPS) connections.
- Hosted in India. Our application and database run on secure cloud hosting in India.
- Processed in-house. Reading your transaction messages and categorising your spending is done on our own systems. We do not send your financial data to third-party AI services. If that ever changes, our Privacy Policy will say so first.
- Only to your own account. Your transactions are visible to you, in your account, on your phone and on the web dashboard.
Who else sees it
- No advertisers, no data brokers. We never sell or rent your personal data, and never use it for advertising.
- No trackers in the app. The app contains no third-party advertising, analytics or crash-reporting SDKs, and crash logs stay on your device.
- A small set of service providers help us run the service (hosting and email), under confidentiality obligations and only for that purpose. Your message content, amounts and account details are not shared with them for any other use.
Your account
- Passwords are never stored, only secure one-way hashes of them.
- Passkeys: if you sign in with your fingerprint or face, only a public key reaches us. Your biometrics never leave your device.
- Access is logged, so unauthorised access can be detected and investigated.
- If a personal-data breach ever happens, we will tell you and the authorities, including CERT-In and the Data Protection Board of India, as the law requires.
You stay in control
- Delete everything, yourself. From the app (Settings → Delete account) or at arthpulse.in/delete-account. No support ticket needed.
- Correct anything. Fix any transaction, merchant or category, and ArthPulse learns from it.
- Your rights under India's DPDP Act, including access, correction, erasure and grievance redressal, are set out in our Privacy Policy.
Questions
Write to [email protected] for anything about your data, or see all the ways to reach us.