Privacy Policy

1. Information we collect

We collect only what we need to run Jodlio:

• Account details: your name and email address. If you sign in with Google, we receive your name, email address and profile photo from Google.
• Profile and settings: your chosen avatar, language, theme, notification and voice preferences.
• Money records you add: expenses, income, budgets, categories, groups, group expenses, settlements, fund dues and payments, loans and repayments, along with notes, dates and amounts.
• Payment details you choose to add: such as a UPI ID or bank account details, so people in your groups know how to pay you. Jodlio never asks for card numbers, PINs or banking passwords.
• Photos you attach: receipts, bills or payment screenshots you add to a record.
• Voice: when you use voice entry, your audio is streamed for transcription while you speak. See Voice entry.
• Device and technical data: a push-notification token for your device, and the IP address and basic details of requests to our servers, which we use for security and to prevent abuse.

Jodlio does not read your SMS, contacts, location or bank accounts, and does not use advertising or analytics trackers.

2. How we use your information

• To create your account, sign you in with one-time codes and keep your account secure.
• To store your records and show you balances, budgets, insights and history.
• To share group records with the members of that group, and shared loans with the other person.
• To send you notifications and emails you need, such as sign-in codes, approvals, reminders and settlement updates.
• To turn what you say into a draft entry when you use voice entry.
• To answer your support requests, fix problems and improve Jodlio.
• To meet legal obligations and to protect Jodlio and its users from fraud and abuse.

3. Who can see your information

Your personal records (your own expenses, income, budgets and private loans) are visible only to you.

Group records are visible to the members of that group: your name, avatar, the expenses, settlements and payments you take part in, and any payment details you add for the group. In fund groups, admins can choose whether every member or only admins and treasurers see each member’s dues and payments.

Shared loans are visible to you and the other person once they accept them.

Attached photos are stored at long, unguessable web links so they load quickly in the app. Anyone who has a photo’s link can open it, so please don’t attach images with information you wouldn’t share with the people in that group.

4. Service providers we use

We share data with trusted providers only as needed to run Jodlio, under contracts that limit how they may use it:

• Cloud hosting and database providers, which store and serve your account and records.
• DigitalOcean, which stores the photos you attach.
• Sarvam AI, which converts your voice to text during voice entry.
• AI language model providers (such as Anthropic and OpenAI), which receive the text of a voice command, with the names of your groups and their members, to work out the amount, category and people it mentions.
• Google, for Google Sign-In and for delivering push notifications through Firebase Cloud Messaging.
• An email delivery provider, to send sign-in codes and account emails.

We do not sell your personal data and do not share it for advertising. We may disclose information if the law requires it, or to protect the rights and safety of our users or of Jodlio.

Some of these providers may process data outside India. When they do, we rely on safeguards permitted under Indian law.

5. Voice entry

Voice entry is optional and can be turned off in Settings. When you use it, your audio is streamed to our speech-to-text provider and the resulting text is used to prepare a draft entry for you to check. Jodlio does not save your recordings or transcripts. Nothing is saved until you confirm the entry.

6. How long we keep data

• We keep your account and records for as long as your account is open.
• Sign-in and confirmation codes expire after 10 minutes and are erased about an hour after that.
• Notification tokens for devices you haven’t used for 60 days are deleted automatically.
• When you delete your account, we erase your personal records, budgets, private loans and sign-in sessions, and remove your email address, photo and payment details. Records you share with others, such as group expenses and accepted loans, remain for the other people involved, with your name shown as “Deleted user”.
• Copies in backups are erased as those backups are replaced in the normal course of operations.

7. Your rights and choices

Under India’s Digital Personal Data Protection Act, 2023 and other applicable law, you can:

• Access your data: use Profile → Export my data.
• Correct it: edit your profile and records in the app.
• Erase it: use Profile → Clear my data for a fresh start, or Profile → Delete account.
• Withdraw consent for optional features, such as voice entry or notifications, in Settings.
• Nominate someone to exercise these rights for you in the event of death or incapacity.
• Raise a grievance with us, and if it isn’t resolved, with the Data Protection Board of India.

For anything you can’t do in the app, email [email protected].

8. Security

All connections between the app and our servers use HTTPS. Sign-in uses one-time codes instead of passwords, sensitive actions such as clearing data or deleting your account need a fresh emailed code, and sign-in tokens are stored in your device’s secure storage. No system is perfectly secure, so if you notice anything suspicious, please tell us at [email protected].

9. Children

Jodlio is meant for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this policy as Jodlio changes. We will post the new version here with a new effective date and, for significant changes, let you know in the app or by email before they take effect.

11. Contact and grievances

For questions, requests or complaints about your personal data, write to our Grievance Officer at [email protected]. We will acknowledge your message and aim to resolve it within 30 days. See also our Terms of Service.