Finsa Privacy Policy for Android

Last updated: 12 October 2026

This policy covers the Finsa app for Android, published on Google Play. Finsa is operated by Finsamudra Private Limited. In short: we fetch your credit report with your permission and explain it to you, and if you save in digital gold we share what SafeGold and Razorpay need to run your gold account and payments. The app does not offer loans and does not share your data with lenders. We do not sell your data, we do not send your identity to the AI, and you can delete your account from inside the app.

1. Who we are

Finsa is operated by Finsamudra Private Limited, a company registered in India, with its registered office at Simha Arcade, 3013, Mahakavi Kuvempu Road, Gayatrinagar, Rajajinagar, Bengaluru, Karnataka 560021, India.

Finsa for Android is a credit-report and digital gold savings app. It shows you your credit score and the loans and cards you already have, read from your own credit report, and lets you buy and save in 24K digital gold. Finsa is not a lender. You cannot apply for a loan in this app, and it does not pass your details to any lender.

This policy is about the Finsa app for Android. Our separate website privacy policy covers finsamudra.com itself.

2. What we collect

  • Email address, to create and sign you into your account.
  • Name and mobile number. The credit bureau needs them to find your report, and we use them to contact you about your account.
  • Your credit report from Equifax, to show you your score, your loans and cards, and what affects them.
  • Your PAN, date of birth and address, as they appear in your credit report, to identify you and complete your profile.
  • Your monthly income, if you choose to state it, to estimate how much of your income goes to EMIs. We never verify it.
  • Details of a loan you add yourself, if you add one that your credit report does not show: the lender's name, the amount outstanding, the EMI and, if you give it, the interest rate. These stay on your phone and are used to work out how saving in gold compares with that loan. If you save gold against one, only an internal reference to it is sent to us, so your gold can be labelled with it.
  • For digital gold: your PIN code, your purchase and savings history, and the bank account or UPI ID you add to receive the money when you sell.
  • Your Finsa AI conversations: the questions you ask and the answers given, kept with your account so you can see earlier chats, and any response you report to us.
  • Device information for payments. Razorpay's checkout, which runs inside the app when you pay for gold, can read information about your phone, which may include device identifiers and network details, to process the payment and prevent fraud. It is handled under Razorpay's own privacy policy.
  • A notification token for your phone, if you allow notifications. Your phone gives the app this token through Google's Firebase Cloud Messaging, and we store it with your account so we can send you notifications: when you save in gold or your daily saving goes through, when money is paid to your bank, reminders about your savings, and gold price alerts. The app sorts them into Transactions, Gold price and Savings tips, and you can turn each one off in your phone's settings. Notifications are optional: if you don't allow them, nothing else in the app changes. When you sign out we delete the token, and we stop using it when your phone tells us the app is gone.
  • Technical logs on our servers, such as request times and errors, to keep the service running. We do not write your report, PAN or contact details into them.

Payments are made through Razorpay's own checkout. We never see or store your card number, CVV or UPI PIN. The app does not read your contacts, messages, call logs, photos or location.

3. Your credit report

We request your credit information report from Equifax through our technology partner Deepvue, and only after you have given explicit consent inside the app and verified the request yourself with a one-time password sent to your mobile number.

This is a soft enquiry. It does not affect your credit score. Your first report can be fetched on any date. After that you can refresh once per calendar month, from the 10th of the month onward. Lenders report to the bureau during the first few days of each month, so an earlier refresh would return the same file.

We keep your credit report, and the analysis we derive from it, for as long as you have a Finsa account. When you delete your account, your credit reports are deleted.

4. Artificial intelligence

If you use Finsa AI, we send a de-identified summary of your financial position to Google Gemini to generate a plain-language explanation.

Before anything is sent, we remove your name (beyond your first name), PAN, mobile number, email address, postal address, date of birth, gender, and all account and card numbers. What is sent is figures: your score, balances, EMIs, interest rates and the analysis we computed.

All financial calculations are performed by Finsa, not by the AI. AI explanations are informational and are not financial advice. If a response is wrong, offensive or unhelpful, you can report it from the chat without leaving the app, and we review what is reported. Using Finsa AI is optional. The rest of the app works without it.

5. When we share your data

We share your personal data only in these situations:

  • With the service providers that run Finsa:
    • Deepvue, our technology partner for fetching your Equifax report.
    • Google, for Finsa AI, de-identified as described in section 4.
    • Supabase, which hosts our database.
    • Vercel, which hosts our application servers.
    • Fly.io, which hosts the service behind Finsa AI and the relay our servers use to reach SafeGold and Razorpay.
    • Expo, and Google's Firebase Cloud Messaging, which deliver notifications to your phone. They receive your notification token and the text of each notification, which can include your first name, amounts and how much gold you hold.
    • SafeGold, which provides and holds your digital gold. It receives your name, mobile number, email address and PIN code to open and run your gold account. SafeGold may require identity details, such as your PAN, under its own KYC rules.
    • Razorpay, which processes your gold purchases and UPI Autopay savings, and pays you when you sell. It receives your name, email address and mobile number, the bank account or UPI ID you add to receive the money, and the device information described in section 2.
  • When the law requires it.

We do not share your data with lenders, we do not sell it, and we do not share it for advertising. The app shows no advertising.

6. Where your data lives

We want to be precise about this rather than overstate it.

  • Your account, your credit reports and the analysis we derive from them are stored in a database hosted by Supabase, on Amazon Web Services servers in Tokyo, Japan.
  • The application servers that handle your requests are hosted by Vercel and currently run in the United States.
  • Finsa AI runs on servers hosted by Fly.io in Singapore. The summary it sends to Google, described in section 4, may be processed outside India, which is why we remove your identifying information first.
  • Notifications pass through Expo's servers and Google's Firebase Cloud Messaging on their way to your phone, and may be processed outside India.

7. Your rights

  • See your data. Your credit report and our analysis of it are visible in the app. For a copy of anything else we hold about you, email the Grievance Officer.
  • Withdraw consent at any time by emailing the Grievance Officer named in section 12, or by deleting your account.
  • Delete your account from Profile, then Delete account. This takes effect immediately. If you hold digital gold, you will be asked to sell it first so that it is not left without an owner. You can also ask us to delete it without the app installed.
  • Correct your data by emailing us. Corrections to the bureau report itself must be raised with Equifax, and we will tell you how.
  • Nominate someone to exercise your rights under the Digital Personal Data Protection Act, 2023 on your behalf in the event of your death or incapacity. To make or change a nomination, write to the Grievance Officer named in section 12.

When you delete your account, some records are kept because Indian financial record-keeping rules require it. Records of your gold transactions are kept, detached from your identity. Records showing that consent was obtained before a credit report was requested are kept in anonymised form.

8. Security

All traffic is encrypted in transit. Access to your data is restricted at the database level so that one account cannot read another's. Credentials for the bureau, the AI and our payment partners are held only on our servers and never in the mobile app. We do not write your report, PAN or contact details into our logs.

9. Children

Finsa is not for anyone under 18. We do not knowingly collect data from minors.

10. Changes

If we change how we use your data in a way that matters, we will ask for your consent again in the app rather than quietly updating this page.

11. Contact

support@finsamudra.com. Finsamudra Private Limited, Simha Arcade, 3013, Mahakavi Kuvempu Road, Gayatrinagar, Rajajinagar, Bengaluru, Karnataka 560021, India.

12. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Grievance Officer for Finsamudra Private Limited is Supreeth, Founder & Director, grievance@finsamudra.com.

If you have a grievance about how your personal data has been handled, or about a request you have made to us, write to the Grievance Officer at that address. We will acknowledge your grievance and respond within the timelines required under applicable law. More detail is on our Grievance Redressal page.