Privacy Policy

1. What Data We Collect

We collect only the data that's needed to make Prodivity work for you. Here's a straightforward breakdown:

• Account information: Your name, email address, and profile picture, collected through Clerk (our authentication provider) when you sign up via Google, email, or other social logins, plus the time zone reported by your device, which we keep only so scheduled emails arrive on your local day.
• Expense data: The expenses you add (amounts, categories, descriptions), including anything you type in English, Hindi or Hinglish using our natural language input. Titles are stored in English letters (Hindi written in Devanagari is transliterated), which is how they appear in the app.
• Income data: The income entries you add (amounts, sources, dates), including any recurring income you set up.
• Ledger data: The udhaar entries you add: the names you give to the people you lend to or borrow from, amounts, dates and settlement status, and, only if you add them, that person's mobile number and UPI ID. These are people and details you type in; we never import your contacts, and the number and UPI ID are never sent to an AI provider. They are used only on your device, to open a WhatsApp chat with a reminder you write or your UPI app with the amount filled in; Prodivity never messages or pays anyone itself.
• Habit and routine data: The habits and daily routines you create, the categories you name for them, and which days you marked each one done or slipped.
• Workout & fitness data: Your workout plans, finished sessions, the weight and reps you log for each exercise (and how it felt, if you say), the targets you set for an exercise, and your bodyweight log and goal.
• Notes: The notes you write or paste, including their formatting, titles and any tags you add. A note is sent to an AI model only when you ask for it: when you make a note with AI, or tap Tidy up, Summarise, Checklist or Fix spelling on one (see AI providers below). Writing, pasting and saving a note never involve the AI. Deleting a note hides it from the app straight away but keeps it on our servers in that hidden state; it is erased for good when you delete your account.
• Voice recordings: When you use voice typing, the recording of what you say is sent to our server only to be turned into text. We do not store it, log it or keep a copy: it is passed on to our AI provider and discarded once the text comes back. The text is then handled like anything you type. If a recording cannot be sent (you are offline, or the service is down), the app keeps it in the phone's memory, never on its storage, until it is sent, you discard it or you leave the page.
• Entries waiting for your check: When the AI is not sure it understood you, the entries it read are not saved; they are shown to you to check first. Until you save or discard them, we keep them on our servers with the text you sent, for 24 hours at most, and the app keeps a copy in your browser tab (removed when you close the tab or sign out). For 24 hours we also keep a record of each AI request, so a request your phone sends twice (after a timeout, say) is not saved twice. Separately, we keep for up to 180 days a tally of how each check ended: how many entries, which kinds of fields were changed and why the check was shown. The tally holds no text and nothing that identifies you; we use it to make the AI ask less often.
• Payment information: When you subscribe, payment is processed by Razorpay. We do not store your card details or bank information. Razorpay handles that directly. We only store your subscription status and transaction IDs.
• Usage data: Basic information like when you last logged in and which features you use, to help us improve the app.
• Request metadata: We may log request metadata such as your IP address and device identifiers to detect and prevent abuse of our services and to enforce our fair usage limits (see our Terms of Service).

2. How We Use Your Data

Your data is used solely to provide and improve the Prodivity service. Specifically:

• To power your expense tracking, routines, and workout features
• To parse your natural language inputs using AI (so you can type things like "chai pe 20 rupaye kharch" and we understand it)
• To manage your account and subscription
• To send you important updates about the service (like policy changes)
• To fix bugs and improve the app experience

We do not use your data for advertising. We do not build advertising profiles. Your expense data, routines, and workouts are yours. We just help you organize them.

3. Third-Party Services

We rely on a few trusted third-party services to run Prodivity. Here's who they are and what they do:

• Clerk: Handles authentication (sign up, login, session management). They receive your email and profile info. See Clerk's Privacy Policy.
• Razorpay: Processes payments for subscriptions. They handle your payment details directly. See Razorpay's Privacy Policy.
• Google Analytics: Tells us how many people visit our website and app and which pages they use, so we can improve the product. It sets analytics cookies and collects usage data such as pages viewed, approximate location (from a truncated IP address), device and browser type. It never receives anything you type into Prodivity, your entries, or your name or email. We have switched off Google's advertising and ad-personalisation features. See Google's Privacy Policy.
• AI parsing providers (OpenRouter, OpenAI, Anthropic): We send your natural language text inputs (expense, income and ledger descriptions, habit and routine descriptions, workout goals and workout logs, and the text of a note when you ask the AI to write or change it) to an AI model for parsing. With a note request we also send up to 30 of the tags you already use, so the new note is tagged the same way. Today this is processed by OpenAI. We may switch to, or add, OpenRouter or Anthropic as providers in the future, so any of the three may process your text. This helps us understand inputs in English, Hindi and Hinglish. We send the text you type and, so a new entry is filed under one you already have, the names of your own habit categories or exercises. When you use voice typing, OpenAI also receives the recording of what you said, to turn it into text. No personal identifiers are attached to these requests. See OpenRouter's, OpenAI's, and Anthropic's privacy policies.
• Voice typing: When you tap the microphone, the app records until you tap it again, press send or stop talking for a few seconds (two minutes at most). The recording goes to our server and straight on to OpenAI, which turns it into text; neither the recording nor a copy of it is stored by Prodivity. A recording with no sound in it is never sent. OpenAI also tells us how sure it is of the words; when it was unsure, the entries are shown to you to check before they are saved. The words appear in the box for you to check before anything is saved. Voice typing runs only while the microphone is on, and Prodivity works fully without it.
• Resend: Sends our emails: routine reminders and ledger reminders (only while your account can add entries), an evening check-in listing the habits you have not ticked that day (only on days you have used Habits in the last week), expense digests, a welcome when you sign up, three tips during your free trial, a one-time note from the founder during your first weeks and, if the trial ends without a plan, two reminders in the following two weeks (each with a count of what you have saved), trial-ending and payment-failure notices, the confirmation when you delete your account, and, once your trial is over, an occasional email about what is new in Prodivity. To do that we pass Resend your email address and the content of the email (which may include your name and summaries of your own entries). You can switch off each kind of non-essential email with the unsubscribe link at the bottom of that email. See Resend's Privacy Policy.
• MongoDB (Cloud): Your data is stored in a cloud-hosted MongoDB database. We use reasonable security measures to protect it, but we want to be upfront: we are a small team, not an enterprise security operation.
• Hosting (Vercel and Amazon Web Services): The website and app are served by Vercel; our API runs on Amazon Web Services in the Mumbai region. Both may process request metadata such as your IP address as part of serving you and defending against abuse.

4. We Do Not Sell Your Data

Let's be clear: we do not sell, rent, or trade your personal data to anyone. Not to advertisers, not to data brokers, not to anyone. Your data exists to power your experience in Prodivity, and that's it.

5. Data Storage & Security

Your data is stored in a cloud-hosted MongoDB database. We use standard security practices like encrypted connections (HTTPS), access controls, and secure authentication.

However, we want to be honest: no system is 100% secure. We take reasonable precautions to protect your data, but we cannot guarantee absolute security. If we ever become aware of a data breach that affects you, we will notify you as soon as we can.

6. Your Rights

You have the right to:

• Request a copy of your data: We can export your expense, income, ledger, routine, workout and notes data for you.
• Delete your account: You can delete your account yourself at any time from the Profile page in the app. Your subscription is cancelled and the account is deactivated straight away: you are signed out and cannot sign in again. 30 days later the account and every entry associated with it are erased. To keep the account, email us before then. You can also ask us to do it for you. Once erased, this data cannot be recovered.
• Correct inaccurate information: If something's wrong, let us know and we'll fix it.

To exercise any of these rights, email us at info.prodivity@gmail.com. We'll respond within 7 business days.

7. Cookies

We use minimal cookies: the ones needed for authentication and session management through Clerk, and Google Analytics cookies (such as _ga) that let us count visits and see which pages are used. We do not use advertising cookies, and Google Analytics is configured with its advertising features turned off.

You can block analytics cookies with your browser settings or an extension such as Google's opt-out add-on without affecting Prodivity. If you disable all cookies, you may not be able to log in.

8. Children's Privacy

Prodivity is not intended for children under the age of 13. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has created an account, please contact us and we'll delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you via the email address associated with your account. For minor wording changes, we'll simply update this page.

We encourage you to check this page occasionally. The "Last updated" date at the top will always reflect the most recent revision.

10. Who We Are and Grievance Officer

Prodivity is owned and operated by Harsh Goel (sole proprietor) in India. If you have a complaint about the service, a charge, or how your data is handled, write to our grievance officer:

• Name: Harsh Goel
• Email: info.prodivity@gmail.com
• Address: Yamunanagar, Haryana, India

We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.