Privacy Policy
Last updated:
TLDR Money is a subscription product. We are not paid by advertisers, lenders, insurers or fund houses, so we have no commercial reason to collect more about you than the product needs. This policy explains what we access, what we store, and what you can make us do about it.
1. Who we are
TLDR Money is operated by Sonal Systems Private Limited (“TLDR Money”, “we”, “us”), a company incorporated in India.
Sonal Systems Private LimitedCIN: U62099GJ2026PTC179785
A-3, Mehsana Nagar, Nizampura, Vadodara, Gujarat 390002, India
[email protected]
For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), Sonal Systems Private Limited is the Data Fiduciary for the personal data described here, and you are the Data Principal.
2. The short version
We hold read-only access. TLDR Money can never move money, place a trade, open an account, or send email on your behalf.
We do not warehouse your financial data. Your transaction history stays connected to accounts you already own rather than being copied into a permanent store on our servers.
We do not sell or share your data. No ad networks, no third-party data brokers, no anonymised-and-resold arrangement.
You can withdraw consent and delete your data at any time. See sections 7 and 8.
3. What we access, and why
| Data | Why we need it |
|---|---|
| Transaction alert emails in your Gmail — UPI debits, card spends, salary credits and similar bank/issuer notifications | To identify and categorise your transactions automatically, so you don’t have to enter them by hand. Access is read-only and scoped to these messages. |
| Asset values you enter yourself — mutual funds, stocks, gold, property, deposits, EPF | To compute a single net worth figure and your FIRE projection. |
| Account details — your email address and authentication identifiers | To create and secure your account. |
| Subscription and billing records | To take payment and meet tax and accounting obligations. Card details are handled by our payment processor; we do not store them. |
| Basic diagnostic and usage data — crash reports, app version, device type | To find and fix defects. |
Google account access
TLDR Money requests read-only Gmail access through Google’s standard OAuth consent screen. We request the narrowest scope that lets the product work, we use that access solely to provide the features described in this policy, and we do not use it to build advertising profiles or to train generalised machine-learning models. You can revoke this access at any time from your Google Account permissions page, independently of anything you do inside TLDR Money.
4. What we do not do
- We do not sell your personal data.
- We do not share your personal data with advertisers or data brokers.
- We do not have write access to any of your financial accounts.
- We do not ask for your net-banking credentials, card PIN, or OTPs. Nobody from TLDR Money will ever ask you for these.
- We do not earn commissions, referral fees or distribution fees on any financial product, so we have no incentive to profile you for someone else’s sales funnel.
5. Legal basis and consent
We process your personal data on the basis of the consent you give when you connect your Gmail account and when you create an account, as required by the DPDP Act. Where processing is necessary to meet a legal obligation — tax records, for example — we rely on that obligation instead.
You can withdraw consent at any time, and withdrawing it is designed to be as easy as giving it. See section 8.
6. Who we share data with
We use a small number of service providers to run the product — cloud hosting, payment processing and customer support tooling. They act as processors on our instructions, are bound by contract, and may not use your data for their own purposes.
We may also disclose data where we are legally required to — a binding order from a court or a competent authority, for example. We will not disclose more than the order requires.
7. How long we keep it
We keep your data for as long as your account is active. When you delete your account, we delete the personal data associated with it, except where we are required by law to retain specific records — invoices and tax records being the usual case.
8. Your rights
Under the DPDP Act you have the right to:
- Access — obtain a summary of the personal data we hold about you and how it is being processed.
- Correct and complete — have inaccurate or incomplete data corrected or updated.
- Erase — have your personal data deleted, where we are not legally required to keep it.
- Withdraw consent — at any time, with the same ease as giving it. Withdrawing consent does not affect processing already carried out lawfully before withdrawal.
- Nominate — name another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Grievance redressal — raise a complaint with us and receive a response, before escalating to the Data Protection Board of India.
You can disconnect your Google account and export or delete your data from inside the app. To exercise any of these rights directly, email [email protected].
9. Security
We use industry-standard technical and organisational measures to protect your data, including encryption in transit and at rest, and access controls limiting which of our systems and people can reach what.
The architectural point matters more than any specific control: because we do not keep a central warehouse of your financial history, there is no single store of it on our side to breach. That is a deliberate design decision, not a claim that any system is perfectly secure — no system is.
10. Children
TLDR Money is not directed at children. You must be 18 or older to hold an account. We do not knowingly process the personal data of children.
11. Grievance officer
Grievances about how we handle your personal data can be sent to [email protected] and will be acknowledged and addressed. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
12. Changes to this policy
If we change this policy materially, we will update the date at the top and notify you in the app or by email before the change takes effect.
13. Contact
Questions about this policy: [email protected], or see our contact page. Our terms of service are at tldrmoney.in/terms.