Privacy Policy

1. What Data We Collect

We collect only the data that's needed to make Prodivity work for you. Here's a straightforward breakdown:

• Account information: Your name, email address, and profile picture, collected through Clerk (our authentication provider) when you sign up via Google, email, or other social logins, plus the time zone reported by your device, which we keep only so scheduled emails arrive on your local day.
• Expense data: The expenses you add (amounts, categories, descriptions), including anything you type in any Indian language using our natural language input.
• Income data: The income entries you add (amounts, sources, dates), including any recurring income you set up.
• Ledger data: The udhaar entries you add: the names you give to the people you lend to or borrow from, amounts, dates and settlement status. These are people you type in; we never import your contacts.
• Habit and routine data: The habits and daily routines you create, the categories you name for them, and which days you marked each one done or slipped.
• Workout & fitness data: Your workout plans, exercise logs, and weight goal tracking information.
• Payment information: When you subscribe, payment is processed by Razorpay. We do not store your card details or bank information. Razorpay handles that directly. We only store your subscription status and transaction IDs.
• Usage data: Basic information like when you last logged in and which features you use, to help us improve the app.
• Request metadata: We may log request metadata such as your IP address and device identifiers to detect and prevent abuse of our services and to enforce our fair usage limits (see our Terms of Service).

2. How We Use Your Data

Your data is used solely to provide and improve the Prodivity service. Specifically:

• To power your expense tracking, routines, and workout features
• To parse your natural language inputs using AI (so you can type things like "chai pe 20 rupaye kharch" and we understand it)
• To manage your account and subscription
• To send you important updates about the service (like policy changes)
• To fix bugs and improve the app experience

We do not use your data for advertising. We do not build advertising profiles. Your expense data, routines, and workouts are yours. We just help you organize them.

3. Third-Party Services

We rely on a few trusted third-party services to run Prodivity. Here's who they are and what they do:

• Clerk: Handles authentication (sign up, login, session management). They receive your email and profile info. See Clerk's Privacy Policy.
• Razorpay: Processes payments for subscriptions. They handle your payment details directly. See Razorpay's Privacy Policy.
• Google Analytics: Tells us how many people visit our website and app and which pages they use, so we can improve the product. It sets analytics cookies and collects usage data such as pages viewed, approximate location (from a truncated IP address), device and browser type. It never receives anything you type into Prodivity, your entries, or your name or email. We have switched off Google's advertising and ad-personalisation features. See Google's Privacy Policy.
• AI parsing providers (OpenRouter, OpenAI, Anthropic): We send your natural language text inputs (expense descriptions, routine descriptions, and workout goals) to an AI model for parsing. Today this is processed by OpenAI. We may switch to, or add, OpenRouter or Anthropic as providers in the future, so any of the three may process your text. This helps us understand inputs in any Indian language. We send only the text you type. No personal identifiers are attached to these requests. See OpenRouter's, OpenAI's, and Anthropic's privacy policies.
• Resend: Sends our transactional emails: routine reminders, expense digests, ledger reminders, trial-ending and payment-failure notices. To do that we pass Resend your email address and the content of the email (which may include your name and summaries of your own entries). You can switch off every non-essential email from your profile or from the unsubscribe link in any email. See Resend's Privacy Policy.
• MongoDB (Cloud): Your data is stored in a cloud-hosted MongoDB database. We use reasonable security measures to protect it, but we want to be upfront: we are a small team, not an enterprise security operation.
• Hosting (Vercel and Amazon Web Services): The website and app are served by Vercel; our API runs on Amazon Web Services in the Mumbai region. Both may process request metadata such as your IP address as part of serving you and defending against abuse.

4. We Do Not Sell Your Data

Let's be clear: we do not sell, rent, or trade your personal data to anyone. Not to advertisers, not to data brokers, not to anyone. Your data exists to power your experience in Prodivity, and that's it.

5. Data Storage & Security

Your data is stored in a cloud-hosted MongoDB database. We use standard security practices like encrypted connections (HTTPS), access controls, and secure authentication.

However, we want to be honest: no system is 100% secure. We take reasonable precautions to protect your data, but we cannot guarantee absolute security. If we ever become aware of a data breach that affects you, we will notify you as soon as we can.

6. Your Rights

You have the right to:

• Request a copy of your data: We can export your expense, income, ledger, routine, and workout data for you.
• Delete your account: You can delete your account yourself at any time from the Profile page in the app. This erases your account and every entry associated with it, and cancels any active subscription. You can also ask us to do it for you. Once deleted, this data cannot be recovered.
• Correct inaccurate information: If something's wrong, let us know and we'll fix it.

To exercise any of these rights, email us at info.prodivity@gmail.com. We'll respond within 7 business days.

7. Cookies

We use minimal cookies: the ones needed for authentication and session management through Clerk, and Google Analytics cookies (such as _ga) that let us count visits and see which pages are used. We do not use advertising cookies, and Google Analytics is configured with its advertising features turned off.

You can block analytics cookies with your browser settings or an extension such as Google's opt-out add-on without affecting Prodivity. If you disable all cookies, you may not be able to log in.

8. Children's Privacy

Prodivity is not intended for children under the age of 13. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has created an account, please contact us and we'll delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you via the email address associated with your account. For minor wording changes, we'll simply update this page.

We encourage you to check this page occasionally. The "Last updated" date at the top will always reflect the most recent revision.