Privacy Policy
Last updated: 16 October 2026
Short version: your financial data never leaves your device — not even your name. FinMoat runs entirely inside your web browser. Your statements are read and stored on your device. We never receive them, and nobody else does either.
What never leaves your device
- Your CAS and bank statements (the PDF files) and their passwords.
- Your name, address, e-mail and phone number printed on them, your PAN, folio and account numbers.
- Every amount: units, values, purchase prices, transactions, gains, bank balances and your net worth.
- Your tax profile and every calculation, plan and report.
They are kept in your browser's storage on this device. Clearing your browser's site data for FinMoat deletes them; we have no copy. On iPhone and iPad, Safari may delete a website's saved data after 7 days without a visit — add FinMoat to your Home Screen to keep it.
No ads, no tracking
FinMoat has no advertising, tracking or analytics code and sets no cookies. No advertising agency or data broker is involved, and we never sell or share data.
What your browser downloads
Like any website, FinMoat has to download its code to your browser. These are downloads to you; nothing about you or your statements goes to them:
- The app itself, from our website (hosted by Cloudflare). While FinMoat is open it also checks a small version file now and then, to tell you when an update is ready.
- The calculation engine (Python for the browser and the screen layout), from jsDelivr, a free public network that serves open-source code.
- A few open-source Python packages (for reading PDFs and spreadsheets), from PyPI, the Python Software Foundation's package library.
As with any download, these services see your internet (IP) address and which files were fetched. None of them is an advertising company, and none of them receives anything from your statements.
Backup files (moving to another device)
Settings → Move to another device saves everything above, plus your Pro licence key, into one file locked with a password you choose (AES encryption; the key is made from your password). The file is downloaded to your device — it never passes through us, and we can't open it or recover the password. Anyone who has both the file and its password can see your statements, so keep the password separate.
What reaches our server (only if you use Pro)
- Your licence key, to check that it's valid.
- A scrambled investor code, so one licence isn't shared by many people. Your device makes it by mixing 4 characters of your PAN (the first two and last two) with your licence key. The code can't be turned back into your PAN. Your PAN and your name are never sent.
- The fund codes of the funds you hold, so we can send their latest holdings (for the overlap view) and today's prices. Our server learns which funds they are — never how many units, how much money, or whose.
- Your internet (IP) address, which every website's hosting sees when your browser connects. Our hosting provider, Cloudflare, uses it only for security. We don't use it to identify you.
If you choose to report a statement problem
If a statement doesn't read correctly, the app can make a masked outline of it so we can fix the problem without seeing your data: every number becomes 9, and every name, address, PAN, folio number and email becomes X's. Only common statement words (like "Closing Balance" or "SIP Purchase") and fund-house and bank names stay readable; fund codes keep only their first 3 characters. You see the whole outline on screen before anything else happens. The app never sends it — you decide whether to download it and email it to us yourself. We use it only to fix the problem and delete it once the fix is released.
Feedback by e-mail
Each tab has a "Was this clear?" link. It only opens an e-mail in your own mail app or Gmail, addressed to us, which you write and send. The app sends nothing; we receive only what you choose to send. Please don't include statement details, your PAN or amounts.
Payments
Payments are processed by Razorpay on its own secure checkout, under Razorpay's privacy policy. We receive the payment ID, amount and the email you enter at checkout (for your receipt and licence recovery). We never see your card, UPI or bank details.
Retention and your rights
Licence records (key, plan, expiry, scrambled investor codes, payment ID, email) are kept while the licence is valid and as required for tax and accounting law. You may ask us to delete your licence record at the contact below, in line with the Digital Personal Data Protection Act, 2023.
Terms · Privacy · Refunds & cancellation · Delivery · Contact
Operated by Karishma Pandey, Delhi, India · Contact: privacyfinanceapp@gmail.com