Privacy Policy

Your privacy is central to Moncass. This policy explains what Moncass Technology Private Limited collects, why, how we protect it, and the control you have. It is aligned with India's Digital Personal Data Protection (DPDP) Act, 2023 and the RBI Account Aggregator framework.

1. Information we collect

• Account details - your name, mobile number and email address.
• Financial data - balances and transaction history from accounts you link, received read-only through the RBI-licensed Account Aggregator network. We never receive your banking password.
• Usage & device data - basic, anonymised diagnostics and crash logs to keep the app reliable.

2. How we use your data

We use your data only to show your finances, generate your insights and AI coaching, personalise your experience and keep the Service secure. We do not sell your personal or financial data, and we do not use it for third-party advertising.

3. Consent & legal basis

We process your financial data on the basis of the explicit consent you give on your Account Aggregator's consent screen, for the purpose and duration shown there. You can withdraw consent at any time.

4. AI processing

Your questions to the AI coach and the data used to answer them are processed only to generate your response. We do not use your personal financial data to train third-party AI models.

5. Where your data lives & security

Your app PIN is stored only on your device - never on our servers. Financial data is encrypted in transit and at rest, and access is scoped to the consent you grant.

6. Your rights

• Access and correct your personal data.
• Revoke any account consent instantly from Consent management.
• Export your data from Privacy & security.
• Delete your account and all associated data anytime - in-app or at moncass.com/delete.

7. Data retention

We keep your data only while your account is active or as required by law. When you delete your account, we remove your personal data within 30 days, except records we must keep to meet legal obligations.

8. Sharing & third parties

We work with RBI-licensed Account Aggregators and infrastructure providers under strict contracts. They may process data only to deliver the Service, never for their own purposes.

9. Children

Moncass is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We will notify you in-app of any material changes to this policy.

11. Grievance Officer

Privacy questions or complaints? Email our Data Protection & Grievance Officer at contact@moncass.com, or write to us through moncass.com/contact. We respond within the timelines required by the DPDP Act.