Privacy

Last updated 9 November 2026

We collect as little as we can, under India’s Digital Personal Data Protection Act, 2023. The app keeps your money data on your own computer; our server only knows enough to run your account.

What our server keeps

• Your email, a hash of your password, and the two answers you gave at sign-up (investor level and risk comfort).
• Your plan: a Gumroad licence, or your Cashfree payments with their status, dates and amount, and the mobile number you gave at checkout.
• The computers you signed in on (a name and a random ID), and a one-way hash of each computer’s ID for the one-trial-per-computer rule.
• Short-lived IP-based counters that slow down abuse.

What we never receive

Your card number, UPI ID or bank details (Cashfree and Gumroad handle those), your broker keys or passwords, your holdings, your orders, your goals or your family’s details. Those stay on your computer.

Why we use it

To sign you in, check your plan, take payments, and send account emails such as password resets and payment receipts. We don’t sell your data, share it for advertising, or send marketing email.

Who else handles it

• Cashfree Payments processes ₹ payments under its own privacy policy. We send it your email, mobile number and the plan.
• Gumroad processes US$ payments under its own privacy policy and sends us the sale details.
• Our server is hosted in a data centre we rent; only we can sign in to it.

How long we keep it

While your account exists. Payment records are kept for as long as tax law requires, even after you delete your account.

Your rights

You can see your data on your account page and delete your account there at any time (“Delete my account”). That erases your email, password and signed-in computers. We keep payment records for tax law and the computer hash so a trial can’t be restarted. To correct anything else, or to raise a complaint, write to our grievance contact at support@purffle.com. We reply within 7 days.