Muktify

Privacy Policy

Last updated: 4 July 2026

1. Who we are

Muktify (muktify.in) is a personal finance education tool operated in India. We help individuals understand their financial health through calculators and projections. We are not a bank, broker, or SEBI-registered investment adviser. As a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are responsible for the personal data you entrust to us. Muktify is intended for individuals aged 18 and above; we do not knowingly collect data from children.

2. What data we collect

  • Email address — for authentication only.
  • Financial data you enter manually: income, expenses, assets, debts, savings.
  • Usage data: page views, feature interactions (via PostHog, anonymised).
  • Referral data: if you use or share a referral code, we store which account referred which (the code and timestamps) solely to credit rewards.
  • We do NOT access your bank accounts.
  • We do NOT pull transaction data from any source.
  • We do NOT collect automatic financial data — everything is manual entry.

3. How we use your data (purpose limitation)

  • To provide the Muktify service and show your projections — this is the only purpose your financial data is used for.
  • To send monthly progress emails — only if you opt in.
  • We never sell your data to any third party, and never use it for advertising or profiling beyond the service itself.
  • We share data only with our Data Processors: Supabase (database & auth), Razorpay (payments), Resend (transactional email). Each is bound by data processing agreements.
  • Analytics events never include your financial values — only anonymised feature usage.

4. Data storage and security

  • Stored on Supabase (AWS, Singapore region).
  • Row-level security (RLS) — only you can read your own rows.
  • All data encrypted at rest (AES-256) and in transit (TLS 1.2+).
  • Passwords are never stored — we use Google sign-in and email magic links.

5. Your rights under DPDP Act 2023

  • Right to access: request a summary of your personal data and how it has been processed, via email.
  • Right to correction & completion: update your data any time in-app (My Money and Account).
  • Right to erasure: Account → "Delete all my data" removes all your data permanently, in-app, no email needed.
  • Right to withdraw consent: withdrawing is as easy as giving it — delete your account in-app at any time; we stop all processing.
  • Right to grievance redressal: see section 9 below.
  • Right to nominate: you may nominate another individual to exercise these rights on your behalf in the event of death or incapacity — email us to record a nominee.

6. Data retention

  • Your data is retained only while your account exists.
  • When you delete your account, all personal and financial data is erased from our systems permanently. Payment records may be retained by Razorpay as required by Indian financial regulations.
  • After a refund, account data is retained for 30 days (so you can return), then eligible for deletion on request.

7. Data breaches

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act, including what happened, what data was involved, and what we are doing about it.

8. Cookies

  • Session cookies for authentication (required for the service to work).
  • Analytics cookies from PostHog (anonymised, no cross-site tracking).
  • No advertising cookies. No third-party tracking pixels.

9. Grievance redressal & contact

For privacy questions, data requests, or grievances, email our Grievance Officer at compliance@muktify.in. We acknowledge within 48 hours on business days and aim to resolve grievances within 30 days. If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.