Privacy Policy

Who We Are

Clarifi ("the App") is a personal finance management application developed and operated by Dexpro Innovations Pvt Ltd, a company incorporated in Thiruvananthapuram, Kerala, India.

This Privacy Policy explains how we collect, use, store, and protect your information when you use the Clarifi mobile application (package: com.clarifionline.clarifi) and our backend services.

By using Clarifi, you agree to the practices described in this policy.

Information We Collect

We collect only the information necessary to provide the service.

Account information

• Full name and email address (provided at registration)
• Password — stored as a one-way bcrypt hash; we never store or transmit your plaintext password

Financial data (entered by you)

• Income and expense transactions, including amount, category, date, and notes
• Account details: account name, type (savings, current, credit card, cash, wallet), and balance
• Credit card details: card name, credit limit, and due date
• Budget targets and bill reminders you configure
• Custom spending categories you create

Authentication data (stored on your device)

• Short-lived access tokens (15-minute JWT) stored in encrypted device storage
• Refresh tokens (30-day JWT) stored in encrypted device storage via Flutter Secure Storage

We do NOT collect

• Location data of any kind
• Device identifiers, advertising IDs, or fingerprints
• Contacts, camera, microphone, or other device permissions
• Behavioural analytics or usage telemetry
• Any data from minors under the age of 13

How We Use Your Information

• Authenticate your identity and maintain secure sessions
• Sync your financial data across devices so it is available when you log in
• Calculate account balances, budget progress, and spending insights displayed within the app
• Send transactional emails (email verification, password reset) — no marketing emails
• Detect and prevent fraudulent or unauthorised access to your account

We do not use your data to train machine-learning models, build advertising profiles, or for any purpose beyond operating the Clarifi service.

Data Storage & Security

Your data is stored in a MongoDB database hosted on MongoDB Atlas (cloud), with servers located in compliance with applicable data protection requirements.

Security measures we apply:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS only)
• Passwords are hashed with bcrypt (no plaintext passwords stored anywhere)
• Authentication tokens use short expiry windows (15 minutes for access tokens)
• Refresh token rotation — each use issues a new token pair; reuse triggers automatic session revocation
• Database access is restricted to our application servers via network allowlists
• On-device credentials are stored using Android Encrypted Shared Preferences via Flutter Secure Storage

While we take these measures seriously, no system is 100% secure. We encourage you to use a strong, unique password and to log out on shared devices.

Third-Party Sharing

We do not sell, rent, or share your personal or financial data with any third party for marketing, advertising, or commercial purposes — ever.

The only external service we use is:

• MongoDB Atlas — cloud database hosting for data storage. Atlas processes data as a data processor on our behalf and is bound by their data processing agreement.

We do not integrate any advertising SDKs, analytics platforms (e.g. Firebase Analytics, Mixpanel), crash-reporting tools, or social login providers that could track your behaviour.

Your Rights & Data Deletion

You have the right to:

• Access — request a summary of the personal data we hold about you
• Correction — update your name or email address from within the app
• Deletion — request complete deletion of your account and all associated financial data
• Portability — request an export of your financial data in a structured format
• Opt-out — stop using the service at any time; uninstalling the app removes locally cached data

To request account deletion or a data export, email us at suhail@edure.in from the address associated with your account. We will process the request within 30 days.

Upon deletion, all personal and financial data is permanently removed from our systems. Backup retention does not exceed 30 days after deletion.

Children's Privacy

Clarifi is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us at the email below and we will delete it promptly.

Cookies & Tracking Technologies

The Clarifi mobile application does not use cookies, web beacons, pixel tags, or any cross-app tracking technologies. Authentication state is maintained using encrypted tokens stored locally on your device — not browser cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via the email address on your account.

Continued use of Clarifi after a policy update constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please reach out: