Last updated 11 October 2026. Applies to the Zyfin mobile app (com.zyfolks.zyfin), its
sync service and this website.
The short version: the copy of your budget that matters lives on your phone. We hold a backup so a second device can see the same figures, we read the bank emails you choose to forward us, and that is all. We do not sell data, we do not share it with anyone for their own use, and there is no advertising or analytics SDK in the app. A short, named list of services handles data for us — sending mail, delivering notifications — and every one of them is listed below.
Why we can say that and mean it. Every free money app in this market eventually has to sell you a loan or a credit card, because that is where its revenue is. We have no offer to place and no data to sell, which is the only version of this promise that survives contact with a business plan.
What we collect, and why
| What | Why | Where it goes |
|---|---|---|
| Your name and email | To have an account at all, and to work out the password your bank puts on a statement PDF | Our servers |
| Your profile details: your name as your bank spells it, your mobile number, date of birth, gender and profile photo — whichever of them you fill in | So a new phone, or the app reinstalled, gets your profile back; and the name, date of birth and mobile work out the password your bank puts on a statement PDF | On your phone, and on our servers while you are signed in. Change or clear any of them in the app at any time — a cleared field is removed from our servers too |
| Your transactions, budgets, goals and accounts | So a second device shows the same figures | Our servers, only after you sign in |
| Bank alert emails you forward | To read the amount, date and merchant out of them | Our servers |
| Statement files you import | To read the rows out of them | Our servers, then deleted after parsing |
| Photographs of receipts | To read the total off them | Nowhere. They never leave your phone. |
| A notification token for your phone | So we can tell you a bank transaction has arrived while the app is closed | Our servers, and Google’s notification service to deliver it. Removed when you sign out |
| A summary of this month’s plan, only when you tap for it | To write “What changed this month” or suggest a rebalance | OpenAI, through our servers. Line names and amounts only — no transactions, merchants, account numbers, dates or your name |
| Splits you share with someone | So both of you see the same shared expenses | The people in that group. Your own transactions and address book are never shared. Inviting someone emails them a code |
Your PAN and bank customer IDs stay on your phone and are never sent to us. Together with a name and a date of birth they are what opens a loan in someone else’s name, and the one thing the app needs them for — opening a statement your bank locked — happens on your phone. When a statement is unlocked, the password attempts are sent with that statement and are never stored.
You type your profile details in yourself, for the purposes above, and none of them is required to use Zyfin. Until version 1.2.0 they stayed on your phone; the app told you when that changed, before anything was sent.
This website sets no cookies and runs no analytics or trackers.
Services that handle data for us
Each of these acts only on our instructions and only to run the part of Zyfin named beside it. None may use your data for its own purposes.
| Service | What it does for Zyfin | What it sees |
|---|---|---|
| “Continue with Google” sign-in, and delivering notifications to Android phones | Your Google account’s name and email when you sign in with it; the notification text (an amount and a merchant) | |
| Resend | Sending our emails (verification codes, password reset) and receiving the bank emails you forward | Your email address; the forwarded messages |
| OpenAI | The optional AI observations, only when you tap for them | The plan summary described above |
| Hetzner | Hosts our servers and database | Stored data, encrypted on disk |
| Cloudflare | Protects and carries traffic to our servers | Encrypted traffic in transit |
What we never collect
- Your SMS messages. The app asks for no SMS permission on either platform.
- Your notifications. No notification listener.
- Your mailbox. We never sign in to your email. You forward specific messages to an address of your own; nothing else in your mail is visible to us.
- Your net-banking or card credentials. There is no payment rail in this app.
- Advertising identifiers, analytics or usage tracking. There is no such SDK in the build.
- Your location, contacts, calendar or health data.
Crash reports stay on your phone
When the app fails, it writes the crash to a file on your device and uploads nothing. A crash report from a budgeting app is not anonymous — it names the screen you were on, which names the goal you were looking at, and an error message routinely carries the amount that caused it. So amounts are stripped before anything is written, and you decide whether to send it.
How it is protected
- On your phone: the database is encrypted, with a key held in the device’s own secure hardware (the Keychain on iOS, the Keystore on Android). You can also require Face ID, a fingerprint or your device PIN before the app opens.
- In transit: HTTPS.
- On our servers: every row carries your account id, and the database refuses to return another account’s rows to your session even if the application asked it to.
How long we keep it
- The body of a forwarded email is kept for a limited window so a message we could not read yet can be re-read when we add support for that bank, then it is erased. What we parsed out of it stays with your transactions.
- Statement files are deleted once parsed.
- Deleted rows are kept as markers for 90 days so your other device learns about the deletion, then removed.
- Profile details are kept while your account exists, and go with it.
Deleting your data
In the app: Settings → Privacy and data → Delete my account and data. That removes the account, everything synced to it, your profile details and photo, and the copy on your phone. The one exception is a split group other people have joined: it is handed to one of them rather than deleted, because the money owed between you is their record too, and your place in it keeps the name they knew you by.
To delete your data but keep your account: Settings → Privacy and data → Start over, keep my account. That empties every payment, your plan, your goals, your accounts and your forwarded bank mail — on your phone, on our servers and on any other phone signed in — and keeps your sign-in, your profile details and the address your bank emails go to. Shared split groups that other people have joined stay, because the money owed between you is their record too.
If you have already uninstalled the app, use the deletion page. It cannot reach the copy on a phone you no longer have the app on, so delete the app too if it is still installed.
Deletion is immediate and irreversible. Export your data first if you want to keep it — Settings → Privacy and data → Export everything writes spreadsheet files to your phone, free, with no account needed.
Your rights
You can get your data out (the export above), correct it (every figure in the app is editable or correctable), and delete it (above). If you are in India, the Digital Personal Data Protection Act 2023 also gives you the right to nominate someone to act for you and to raise a grievance; contact us at the address below.
Children
The app is not directed at children and we do not knowingly collect their data.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will say so in the app before the change takes effect, not only on this page.
Contact
Zyfolks Technologies LLP
No. 69/1949 Mythri Building, PM Kutty Road, Nadakkavu, Eranhipalam, Kozhikode, Kerala 673006, India
Privacy and grievance contact: support@zyfolks.com
Grievance Officer: Pranav Govind, Designated Partner
Governing law: Kerala, India
This document is written from what the software actually does. It is not legal advice and has not been reviewed by a lawyer.