Privacy Policy

We collect only what the app needs to work.

• Account information: When you sign in with Google or Apple, we receive your name and email address. Google also gives us a link to your profile photo, which we store but do not display. We record when you created your account and when you last signed in.
• Financial entries: Everything you type into the app — income, expenses, investments, transfers, the accounts they belong to, opening balances, categories, and whether a payment has been made. Recurring entries are stored once with their repeat rule.
• Journal: Your daily notes, schedule, reminders, wins, and plans for tomorrow.
• Preferences & goals: Handwriting style, ink colours, calendar paper, currency, custom categories, your monthly savings goal, the financial goals you picked during setup, and which insight months you have unlocked.
• Subscription status: Whether you have an active Lekhan+ plan, which plan it is, which store it was bought from, and when it renews. We also remember that you have subscribed at some point, so we can restore your access.

What we do not collect:crash reports, usage analytics, your location, your contacts, or your device's advertising identifier. We do not run any analytics or tracking software.

• To sign you in and keep your data in sync across your devices.
• To show your calendar, day pages, insights, and forecasts. Every number the app shows is arithmetic on entries you made.
• To confirm your Lekhan+ subscription and unlock its features.
• To send you reminders you have asked for (see §4).

We do not sell your data. We do not use it for advertising or profiling. We do not share it with anyone except the service providers listed in §6, and only so the app can run.

Your account and everything in it are stored in Google Cloud Firestore in the Mumbai region (asia-south1), India. Our own server code, which handles subscription updates and account deletion, also runs in Mumbai.

Sign-in and app verification are handled by Google's global authentication and App Check services, which may process your sign-in request outside India.

Data is encrypted in transit (TLS) and at rest. Firestore security rules allow only your signed-in account to read or write your data. Our staff do not browse user data; we look at an account only if you ask us to help with it.

• App Lock: If you turn on App Lock, your phone's Face ID, Touch ID, or passcode is used to open Lekhan. The check is done by iOS on your device. The app only stores a yes/no flag saying the lock is on. We never receive biometric data.
• Apple Pencil handwriting: On iPad, handwriting you write on a calendar day is recognised by Apple's on-device text recognition. Your strokes and the recognised text never leave the device. Only the entry you confirm is saved to your account.
• Reminders: Payment reminders, overdue alerts, and budget alerts are scheduled on your device by the app. They are not sent through a push server, and we do not collect a notification token.

Lekhan+ is a subscription bought through the Apple App Store or Google Play. The store handles payment. We never see or store your card details.

We use RevenueCatto keep track of subscriptions. When you buy or restore, RevenueCat receives your Lekhan account ID, the purchase receipt, the product bought, the store, and the store country. RevenueCat then tells our server whether the subscription is active, and we record that in your account (see §1, "Subscription status").

Each of these has its own privacy policy.

• Google Firebase (Authentication, Firestore, App Check, Cloud Functions) — receives your account and app data as described above — firebase.google.com/support/privacy
• Google Sign-In — receives your Google sign-in request — policies.google.com/privacy
• Sign in with Apple — receives your Apple sign-in request — apple.com/legal/privacy
• RevenueCat — receives your account ID, receipt, product, store, and country — revenuecat.com/privacy
• Apple App Store / Google Play — payment, handled entirely by the store

• See it: Everything stored about you is visible in the app.
• Change it: Edit or delete any entry, account, or setting in the app.
• Export it: From Settings, export any month as a file and save or share it wherever you like. Where you send it is up to you.
• Delete it: Settings → Delete Account erases everything in your account and removes the account itself. This happens immediately, not after a waiting period, and cannot be undone.
• Disconnect: You can revoke Lekhan's access from your Google Account or Apple ID settings at any time.

After deletion, RevenueCat keeps purchase records for as long as its own policy requires, and Apple or Google keep your purchase history under their terms. Those records do not contain your financial entries or journal.

We keep your data for as long as your account exists. When you delete your account, it is gone. We do not keep backups of deleted accounts.

Lekhan is for adults managing their own money. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has an account, write to us and we will delete it.

The insights, forecasts, and "can I afford it" answers in Lekhan are calculations on the entries you have made. They are not financial, investment, or tax advice, and they do not account for anything you have not entered. Decisions you make are your own. If you want advice, talk to a qualified adviser.

If we learn that your data has been accessed without authorisation, we will tell you by email at the address on your account, without undue delay, and explain what happened and what we are doing about it.

If you use Lekhan from outside India, your data is still stored in India as described in §3. We process it because it is necessary to provide the app you signed up for and, for optional features like Lekhan+, because you asked for them. You have the rights listed in §7, and you can ask us to correct or delete your data at any time.

When we change this policy, we update the date at the top. If a change affects what we collect or who we share it with, we will tell you in the app before it takes effect.

Questions, requests, and complaints: support@lekhan.app

Under India's Digital Personal Data Protection Act, 2023, our grievance officer is [Name], reachable at the same address. We aim to respond within 7 days.