Affordfy logo Affordfy

Affordfy — Privacy Policy

Last updated: 01/08/26 · Effective from: 01/08/26

1. Who we are

Affordfy ("Affordfy", "we", "us", "our") is a goal-first budgeting app that helps you plan purchases, set category spending limits, and understand when you can afford the things you want.

Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as the Data Fiduciary for the personal data described in this policy.

Contact for privacy matters: [email protected]

2. What this policy covers

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over your data. It applies to the Affordfy mobile app (iOS and Android), our website, and related services.

3. The data we collect

We collect the following categories of data. We limit collection to what we need to run the service.

3.1 Account and identity data

  • Name
  • Mobile number and/or email address
  • Profile details you choose to add

3.2 Financial and budgeting data

This is the core of what makes Affordfy work, and we treat it as sensitive.

  • Monthly take-home income you enter during onboarding
  • Category spending limits you set (Food, Rent, Groceries, Clothes, Health, Hobby, Investments, and any others)
  • Savings goals, target amounts, timelines, and amounts already saved
  • UPI payment details parsed when you scan a QR code or open a UPI link — including the payee's VPA, payee name, transaction amount, and transaction note
  • Your spending and transaction history within the app

3.3 Purchase-intent data

  • Goals you declare and products you indicate you want to buy, which we may use to surface relevant deals from affiliate partners

3.4 Account Aggregator data (only if and when you connect it)

  • If you choose to link financial accounts through the RBI Account Aggregator (AA) framework, we receive financial information you explicitly consent to share via a consent artifact. We access only the data covered by that consent, for the stated purpose and duration, and you can revoke it at any time through the AA.

3.5 Device and technical data

  • Device model, operating system, and app version
  • Device identifiers
  • IP address
  • Crash logs and diagnostic data

3.6 What we do NOT collect

  • We do not store your UPI PIN, bank passwords, or full card numbers. Payment authorization happens inside your chosen UPI app (Google Pay, PhonePe, Paytm, BHIM, Amazon Pay, CRED, etc.), never inside Affordfy.

4. Why we collect it

We use each category of data only for specific, stated purposes:

  • Income, limits, goals — to run the "when can I afford this?" engine, calculate savings timelines, and enforce category budgets.
  • Parsed UPI details — to show merchant and amount details before you pay and to warn you if a payment will breach a limit or delay a goal.
  • Spending history — to power your analytics, insights, and budget tracking.
  • Purchase-intent data — to surface relevant affiliate deals when you're ready to buy.
  • Device and technical data — to keep the app secure, diagnose crashes, and improve performance.
  • Account and identity data — to create and secure your account and communicate with you.

We will not use your data for a new purpose without asking for your consent first.

5. Consent and legal basis

We process your personal data on the basis of your consent, and, where applicable, for legitimate uses permitted under the DPDP Act.

  • Before or at the point of collection, we give you clear notice of what we collect and why.
  • Your consent is specific to the purposes described here.
  • You can withdraw consent at any time from within the app (Settings → Privacy → Manage Consent) or by contacting us. Withdrawing consent may limit or disable features that depend on that data. Withdrawal does not affect processing that already happened before you withdrew.

6. How we share your data

We do not sell your individual personal data. We do not display third-party advertising in Affordfy. We share data only in the limited ways below.

6.1 Affiliate partners

When you declare purchase intent and choose to act on a deal, we work with retail affiliate partners such as Flipkart, Amazon, and Croma. When you tap through to a partner:

  • We share an affiliate tracking identifier indicating that you clicked a specific product link.
  • We do not share your income, budgets, transaction history, or overall financial picture with these partners.
  • If you make a purchase, we may earn a commission at no extra cost to you.

6.2 Service providers (processors)

We use trusted providers who process data on our behalf under contract, only for our purposes:

  • Cloud hosting and storage — DigitalOcean
  • Analytics — Google Analytics
  • Crash reporting and diagnostics — Google Analytics (Android) and Apple (iOS / App Store diagnostics)
  • Transactional email delivery — Resend (resend.com)

6.3 UPI and payment infrastructure

Payments are completed through your chosen UPI app and the NPCI UPI network. Those parties handle your payment under their own terms and privacy policies.

6.4 Legal and safety

We may disclose data where required by law, regulation, court order, or a lawful request from a government authority, or to protect our rights, users, or the public.

6.5 Business transfers

If Affordfy is involved in a merger, acquisition, or sale of assets, your data may transfer as part of that transaction. We will notify you and this policy will continue to protect your data.

6.6 Anonymized insights (if/when offered)

We may create aggregated, anonymized insights that cannot identify you or any individual, and may share these with business partners. Data is only treated as anonymized if it genuinely cannot be linked back to an individual; otherwise we treat it as personal data under this policy.

7. How long we keep your data

We keep your personal data only as long as needed for the purposes above or as required by law.

  • Account and budgeting data: retained while your account is active.
  • After you delete your account: we delete or irreversibly anonymize your personal data within a reasonable period, except where we must retain certain records to meet legal, tax, or regulatory obligations.
  • Crash and diagnostic logs: retained for a limited period and then deleted.

8. Your rights

Under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you and how we process it
  • Correct, complete, or update inaccurate or incomplete data
  • Erase your personal data where it is no longer needed
  • Grievance redressal — raise a complaint with us and get a timely response
  • Nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any of these, use the in-app settings or contact [email protected]. We will respond within the timelines required by law.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

9. Security

We take reasonable technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Access controls limiting who can view personal data
  • Secure handling of financial data on-device where possible

No system is perfectly secure. If a personal data breach occurs, we will notify you and the Data Protection Board as required by law.

10. Children

Affordfy is intended for users 18 and older. Under the DPDP Act, processing the data of anyone under 18 requires verifiable consent from a parent or lawful guardian. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

11. Data transfers outside India

Your primary personal data (account and budgeting data) is stored and processed within India, on infrastructure located in Bangalore, India (DigitalOcean).

Some of our service providers process limited data outside India:

  • Google Analytics (analytics and crash diagnostics) — processed on Google infrastructure outside India
  • Resend (transactional email) — processed outside India
  • Apple (iOS diagnostics) — processed on Apple infrastructure, which may be outside India

Where data is processed outside India, we take steps to ensure it receives appropriate protection and comply with any restrictions under Indian law.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The "Last updated" date at the top shows the latest version.