🔒 Privacy
Privacy Policy
Last updated: April 2026
🏦
No bank linkingYou enter data manually or import via broker files. We never connect to your bank or broker accounts.
🚫
Zero data sellingWe never sell, share, or monetize your financial data. Not to anyone, for any reason.
🔐
Your data, your controlExport everything or delete your account permanently at any time from Settings.
📥 What we collect
- Account info — your name and email address, from Google sign-in or email registration. Used only for authentication and identifying your account.
- Financial data you enter — asset names, values, quantities, purchase prices, broker imports, income, expenses, liabilities, goals, and any notes you add. This is data you choose to input. We never pull it from external sources.
- Live price lookups — when you click "Live Prices", your stock ISINs or ticker symbols are sent to our price-fetching function (Netlify serverless) to query Yahoo Finance and Firestore. No personal information is included in these requests.
- FX rates — we fetch live foreign exchange rates from open.er-api.com to support multi-currency tracking. No personal data is sent in these requests.
- Basic usage — anonymous technical logs (errors, load times) to keep the app stable. No personal identifiers.
🚫 What we do NOT do
- We never connect to your bank, demat account, or broker directly.
- We never sell, rent, or share your financial data with any third party.
- We never use your data for advertising, profiling, or marketing.
- We never store passwords in plain text — all passwords are securely hashed.
- We never collect PAN, Aadhaar, bank account numbers, or government-issued IDs.
- We never use tracking cookies, advertising pixels, or third-party ad networks.
- We never train AI models on your personal financial data.
- We never share data with employers, government, or financial institutions (unless legally compelled).
🔧 Third-party services we use
We use a minimal set of services. None of them receive your financial data:
| Service | Purpose | Data shared |
|---|
| Firebase (Google) | Authentication and database storage | Name, email; your financial data stored here encrypted |
| Netlify | Hosts the app and serverless price-fetch function | Standard server logs only — no financial data |
| Yahoo Finance | Live stock prices for Indian equities and ETFs | ISIN or ticker symbols only — no personal info |
| open.er-api.com | Live FX rates for multi-currency support | None — public rate request only |
| Google Fonts | Sora typeface for the UI | Your IP address (standard CDN request) |
| EmailJS | In-app feedback/contact form | Only if you submit a message voluntarily |
🛡 How your data is protected
- Firebase Firestore with row-level security rules — your data is only accessible by your authenticated session.
- HTTPS everywhere — all data in transit is encrypted with TLS.
- Google OAuth or email sign-in with securely hashed passwords. Session tokens have expiry.
- Serverless price functions run on Netlify with no access to your account data.
- No third-party analytics — we do not use Google Analytics, Mixpanel, or similar trackers.
⚖️ Your rights
Access
All data you enter is visible to you in the app at all times.
Correction
Edit or update any of your data directly in the app anytime.
Export
Go to Settings to export all your data as JSON anytime.
Deletion
Settings → Danger Zone permanently deletes your account and all data. Immediate and irreversible.
Withdraw consent
Stop using Captix and delete your account at any time. We do not retain data after deletion.
DPDPA 2023
Your rights under India's Digital Personal Data Protection Act are fully respected.
🍪 Cookies
Captix uses a single session cookie from Firebase to keep you logged in. That is it. No tracking cookies, no advertising cookies, no third-party cookie services.
👶 Children's data
Captix is not intended for use by individuals under 18. We do not knowingly collect data from minors. If you believe we have inadvertently done so, contact us and we will delete it immediately.
🔔 Data breach notification
In the unlikely event of a data breach affecting your personal data, we will notify you via email and report to the Data Protection Board of India as required under the DPDPA 2023.
📝 Changes to this policy
If we update this policy, we will post changes here with an updated date. For significant changes, we will notify you via email. Our core promise — that we never sell, share, or monetize your data — will never change.
✉️ Contact
If you have questions or concerns about your data, use the feedback option in the app or contact Jasheer Ali Paravath directly. We aim to respond within 2 weeks.