Privacy Policy

Last updated: 12 September 2026

This policy explains what Harsh Gupta, an individual operating as a sole proprietor in India ("we") does with your data when you use OneSpend. It is written to be understood rather than to be defensible, and where something is imperfect it says so.

1. What we collect

Account data. Your name, email address and profile picture from Google when you sign in; the devices you have paired, so sessions can be revoked.

Transaction messages, from the channels you connect. Each is optional and separately enabled:

• Gmail (read-only). We search only for bank transaction notifications and read only those. We do not read, index or store your other mail.
• Messages on your device. On your phone, an automation you set up yourself forwards bank transaction SMS and notifications to us. You choose which senders, and you can stop it without uninstalling anything.
• A forwarding address. If you set up forwarding to the address we give you, we receive whatever is forwarded to it.
• Statements you upload. PDF or CSV files you choose to import, including any password you enter to open one — used in memory to decrypt the file and never stored.
• What you enter yourself. Card labels, credit limits, statement dates, categories, tags, notes, and the bank account you nominate as your vault.

Payment data. Your subscription status, plan, renewal date and the payment reference returned by the gateway. We never receive or store your card number, CVV, UPI PIN or bank credentials — see §4.

Support data. If you write to us or use the contact form, we keep your name, email, and what you wrote, so it can be answered. The form also stores a salted one-way hash of your IP address to limit abuse — the address itself is never written down.

Operational data. Error logs and timing measurements for the processing pipeline. These record that a message of a particular shape was handled and how long it took, not what it said.

2. What we deliberately never see

• Your bank credentials. OneSpend never asks for a net banking password, a card PIN or a UPI PIN, and there is nowhere in the product to enter one. If anything claiming to be us asks, it is not us.
• Your money. We never hold, receive or route funds. Transfers into your vault are made by you, in your own UPI app, between your own accounts.
• Your other email. The Gmail permission is read-only and scoped to searching for bank notifications.
• Anything we would sell. We do not sell or rent personal data, we do not run advertising, and we do not pass your spending patterns to lenders, insurers or anyone scoring you for a product. There is no arrangement of that kind and the encryption design in §5 means we could not build one over your amounts even if we wanted to.

3. How the AI reads your messages

Extraction uses Google Gemini. What reaches it is not your message. The message is first broken up on our side into a template and a list of typed pieces — this is an amount, this is a date, this is a card's last four digits — and:

• Account balances and OTPs are withheld entirely. They are identified and removed before anything is sent, so they are not redacted from the model's view — they were never in it.
• The model answers with a pointer, not a value. It says which piece of the message holds the amount; we then read that piece ourselves. This is why a figure in OneSpend always came from your bank's own words.
• Nothing is used to train anyone's model. Data sent through the paid Gemini API tier is not used for training, under Google's Gemini API terms.

Being accurate about the limit: merchant names, amounts and dates are part of what is sent, because they are what has to be identified. The guarantee is about balances, OTPs and the shape of the exchange — not that nothing leaves our servers.

4. Payments

Subscriptions bought on this website are processed by Razorpay. Your card, UPI or bank details are entered on Razorpay's systems and handled under their privacy policy. We receive only the outcome: whether payment succeeded, the plan, the renewal date and a reference. Subscriptions bought inside the mobile apps are processed by Apple or Google under their own policies, and we receive only the entitlement.

5. How your data is secured

• Encrypted at rest, per user. Transaction values are encrypted with AES-256-GCM under a key belonging to you alone, held wrapped by a separate key-management service. A copy of the database on its own reveals no amounts and no merchants.
• Searchable without being readable. Where we must find a record — to spot that two messages describe the same purchase — we match on a keyed one-way fingerprint derived with your key, not on the value. Because the key is yours, those fingerprints cannot be correlated between users.
• Encrypted in transit over TLS, everywhere.
• Access is limited to what operating the Service requires. No one reads your transaction data as a matter of routine.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your data we will notify you and the Data Protection Board of India as the law requires, describing what happened rather than minimising it.

6. Who else receives your data

We do not sell data. We share only what a provider needs to do its job:

We will also disclose data where the law compels it, and we will tell you unless we are forbidden from doing so. If the Service is ever sold or merged, you will be told before your data moves, and you will have the chance to export and delete first.

7. How long we keep things

• Original message bodies: 90 days. Kept so a parsing improvement can be applied to your history and a failure can be replayed, then deleted by an automated sweep — deleted, not archived.
• Transactions and reservations: until you delete them or close your account.
• Operational logs: about a year, then swept.
• Support messages: kept while needed to resolve the matter and for a reasonable period after, so a follow-up has context.
• Payment records: retained as long as tax and accounting law requires, independently of your account.

8. Your rights and controls

Under India's Digital Personal Data Protection Act 2023 and the rules under it, you have the right to access your data, to have it corrected or completed, to have it erased, to a grievance mechanism, and to nominate someone to exercise these rights if you cannot. In OneSpend, most of them are buttons rather than requests:

• Export everything as CSV, on any plan including the free one, for as long as your account exists.
• Correct anything — amounts, merchants, categories, the matching of a refund — directly in the app.
• Delete individual transactions, or all of them, from settings.
• Delete your account, which permanently destroys your transactions, your message history and your encryption key, and revokes Gmail access. It cannot be undone; export first.
• Revoke Gmail access yourself at any time from your Google Account permissions, and disable device capture from your phone.

For anything not covered by a button, write to our Grievance Officer (§12). We will acknowledge within 24 hours and resolve within 15 days.

9. Cookies and tracking

We use cookies only to keep you signed in and to remember your theme preference. We do not use advertising cookies, third-party analytics that profile you, or cross-site trackers. There is nothing here to opt out of, because there is nothing following you.

10. Where your data is processed

Our servers are in the European Union and our providers are international, so your data is processed outside India. It remains subject to this policy and to contractual protections with each provider, wherever it sits.

11. Google API Services User Data Policy

In accordance with the Limited Use requirements:

• We only request the permissions necessary to provide OneSpend's expense tracking functionality.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read user data unless we have your affirmative agreement, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.
• We do not transfer Google user data to third parties except as necessary to provide or improve the app, to comply with applicable law, or as part of a merger or acquisition with notice to users.
• We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.

12. Children, changes, and contact

Children. OneSpend is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

Changes. If we change this policy materially we will notify you by email or in the app before it takes effect, and the date at the top will change. We will not quietly broaden what we collect.

Contact. support@onespend.in, or the contact form.

Grievance Officer: Harsh Gupta, grievance@onespend.in

Harsh Gupta
A-21, Flat No A-03, UGF
Neb Sarai, Indira Enclave, Ignou
South Delhi, Delhi, 110068
+91 7001876232