Last updated: 26 July 2026 · Effective from: 26 July 2026
Privacy Policy
1. Introduction
This Privacy Policy explains how Syncrofin ("Syncrofin", "the app", "we", "us", "our") collects, uses, stores, shares and protects your personal information when you use our Android application.
Syncrofin is a personal finance application. It helps you record your income and expenses, track loans, investments, deposits, insurance policies, bills, subscriptions, budgets and savings goals, and split shared expenses with other people.
Please read this policy carefully. By creating an account and using Syncrofin, you agree to the practices described here. If you do not agree, please do not use the app.
2. Who we are
Syncrofin is operated by Rainborne Nexus, a sole proprietorship registered in India.
| Business name | Rainborne Nexus |
| Proprietor | Mrutyunjaya Panigrahi |
| Business type | Sole proprietorship |
| Country | India |
| Registered address | B203, Grishma Apartment, Vasant Utsav Society, Hinjewadi, Pune, Maharashtra, India 411057 |
| Contact for privacy matters | [email protected] |
Rainborne Nexus is the data controller for the personal information described in this policy. This means we decide why and how your personal information is processed, and we are legally responsible for it.
For any question, request or complaint about your personal information, contact [email protected]. We aim to respond as quickly as we can.
3. What Syncrofin deliberately does NOT do
We think it is as important to tell you what we don't do as what we do. Syncrofin does not:
- Connect to your bank. Syncrofin has no bank integration of any kind. We never access your bank accounts, and we never see your bank balances or statements.
- Read your SMS messages. The app does not request or hold SMS permissions. We do not read, parse or store your text messages, including bank alerts.
- Import transactions automatically. Every record in Syncrofin is one you entered by hand.
- Scan receipts or documents. There is no OCR, no receipt scanning and no document upload.
- Ask for card, UPI or bank account numbers. We never collect payment card numbers, CVVs, UPI IDs, account numbers or IFSC codes.
-
Contacts — used only if you choose to add group members from your address book, to show you a list to pick from. Your contacts are read on your device and are never uploaded to our servers.
-
People you add to groups — when you add someone to a group, we store their name only. We do not store their phone number or email address.
- Track your location. We do not request or collect GPS or precise location data.
- Show advertisements. The app contains no advertising, and no advertising SDK.
- Track you or profile you. Syncrofin contains no advertising SDK and no behavioural or third-party analytics SDK. We do not build a profile of you, and we do not track you across other apps or websites.
- Sell your personal information. We do not sell your data to anyone, for any purpose.
4. Information we collect
4.1 Information you give us
Account information. To use Syncrofin you must create an account. We collect:
- Email address — used to identify your account, to sign you in, and to contact you about your account (for example, password resets).
- Password — stored only in hashed form by Firebase Authentication. We never see, store or have access to your actual password.
- Display name — the name shown in the app and to other members of any group you join.
We use email and password sign-in only. We do not offer Google, Apple or Facebook sign-in, so we never receive profile data from those services.
Financial records you enter. Everything you record in Syncrofin is information you typed in yourself. Depending on which features you use, this may include:
| Category | What it may contain |
|---|---|
| Transactions | Amount, category, description, date, income or expense |
| Budgets | Category limits and periods |
| Bills & subscriptions | Name, amount, due or renewal date, frequency |
| Loans & EMIs | Principal, interest rate, tenure, instalment amount, payments made |
| Investments | Holding name, type, amount invested, current value |
| Deposits | Fixed and recurring deposit amounts, rates, tenures, maturity dates |
| Insurance | Policy name, provider, premium, renewal date, cover amount |
| Receivables & payables | Amounts owed to or by you, and the name of the person concerned |
| Goals | Goal name, target amount, amount saved |
| Trade journal | A daily profit or loss figure, market tag, plan adherence, mistake tags, and a short note |
⚠️ This information is sensitive. It describes your financial position. We treat it accordingly — see section 8.
Group and shared-expense information. If you use the group splitting feature, we collect:
- The group's name and the currency it settles in
- The names of people you add to the group
- Expense descriptions, amounts, dates, categories, who paid and how each expense is split
- Settlement records between members
⚠️ We store the names of group members and nothing else about them. When you add someone to a group by typing their name, we do not collect or store their phone number, email address or any other contact detail. We do not create an account for them. We do not match them against your address book, because we never read your address book.
Invitations. When you invite someone to a group, the app creates a link containing a one-time code. That link is shared by you, through whatever app or channel you choose. We do not send the invitation and we do not learn who you sent it to. We store only the code itself, its group, and whether it has been used.
Support communications. If you email us, we receive your email address and whatever you write to us, and we keep that correspondence so we can help you and to keep a record of the issue.
4.2 Information collected automatically
Crash and error diagnostics. When something in the app fails, we collect a crash or error report so we can find and fix the problem. A report is generated only when an error occurs — not during normal use — and contains:
- The error and its technical stack trace
- A short label identifying which operation failed (for example, "login failed")
- Basic device and app information attached automatically to the report: device model, operating system version, and app version and build
This is collected through Google Firebase Crashlytics. ⚠️ We do not use any analytics SDK, and we do not collect usage or behavioural data — we do not record which screens you open, which features you use, or how long you spend in the app.
Connection information. As an unavoidable part of connecting to any internet service, our infrastructure provider receives your IP address, from which a general region can be derived. We do not use this to track or profile you.
Purchase information. If you subscribe to a paid tier, the purchase is processed by Google Play. We receive from Google a purchase token and subscription status so we can unlock paid features. We never receive or store your card number, bank details or billing address — Google handles all payment processing.
5. How we use your information
| Purpose | Information used | Legal basis (GDPR) |
|---|---|---|
| Providing the app — storing and displaying your records, calculating balances and net worth | Account details, financial records, group data | Performance of a contract |
| Authenticating you and keeping your account secure | Email, password hash | Performance of a contract; legitimate interests |
| Sharing group expenses with the people you choose | Group data, display name | Performance of a contract |
| Sending reminders and notifications you have enabled | Account details, bill and subscription dates | Consent |
| Diagnosing and fixing crashes and errors | Crash and error diagnostics | Legitimate interests |
| Processing subscriptions | Purchase token, subscription status | Performance of a contract |
| Responding to your support requests | Email address, message contents | Legitimate interests |
| Complying with legal obligations | As required | Legal obligation |
6. Who we share your information with
We do not sell your personal information. We share it only in the limited circumstances below.
6.1 Other users of the app
⚠️ When you share an expense with a group, the members of that group can see it. They can see the expense description, amount, date, category, who paid, how it was split, and your display name. This is the purpose of the feature. Only share expenses with people you intend to share them with.
Group members can also see the balances between members, and any settlements recorded.
6.2 Service providers
We use a small number of third parties to run the service. Each processes data on our instructions.
| Provider | What they do | What they receive | Where |
|---|---|---|---|
| Google Firebase (Firestore, Authentication) | Stores your account and all app data; handles sign-in | Account details, all records you enter | Google data centres, including outside India |
| Google Firebase Crashlytics | Crash and error reporting | Crash/error reports, basic device and app information | United States |
| Google Play Billing | Processes subscription payments | Purchase information — we never see payment details | Per Google's terms |
6.3 Legal and safety disclosures
We may disclose personal information where we believe in good faith it is necessary to:
- comply with a law, regulation, court order, subpoena or other valid legal process
- respond to a lawful request from a public authority
- enforce our Terms of Service
- investigate or prevent fraud, security incidents or technical problems
- protect the rights, property or safety of our users, the public, or ourselves
Where we are legally permitted to do so, we will tell you about such a request before responding.
6.4 Business transfer
If the business is sold, merged or otherwise transferred, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
7. How we protect your information
- Encryption in transit. All communication between the app and our servers uses TLS.
- Encryption at rest. Your data is stored on Google Cloud infrastructure and is encrypted at rest by Google.
- Access control. Firestore security rules restrict every record to its owner. Group data is readable only by members of that group. These rules are enforced on Google's servers, not by the app, so they cannot be bypassed by a modified client.
- Passwords. Handled entirely by Firebase Authentication and stored only as a salted hash. We cannot see your password.
- Device lock. The app can require biometric or device authentication before it opens, if you enable it.
- Ghost Mode. You can hide all amounts on screen instantly, so figures aren't visible to people nearby.
⚠️ What this does not mean. Your data is not end-to-end encrypted. It is stored in a form that our infrastructure provider can technically access, and that we could access in the course of maintaining the service or if legally compelled. We access individual accounts only where necessary — to investigate a fault you have reported, or where required by law.
⚠️ No system is perfectly secure. While we take the measures above, we cannot guarantee absolute security. You are responsible for keeping your password confidential and for the security of the device on which you use the app.
Breach notification. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, as required by applicable law.
8. How long we keep your information
| Data | Retention |
|---|---|
| Account and all records you entered | Until you delete your account |
| Data after account deletion | Removed promptly; see section 9 for the one exception |
| Crash and error diagnostics | Up to 90 days |
| Support correspondence | Up to 3 years from the last message |
| Records we must keep by law (for example, transaction records for tax purposes) | For the period the relevant law requires |
9. Deleting your account
You can delete your account at any time from More → Profile → Delete Account.
What deletion removes. Your account, and every record you created — transactions, budgets, loans, investments, deposits, insurance, bills, subscriptions, goals, receivables, payables, and trade journal entries.
⚠️ What deletion does NOT remove: shared group expenses.
If you have shared expenses with other people, those expenses remain in the group after you delete your account, and your name is replaced with "Former member".
Why. A group expense is a shared record. If deleting your account erased your share of a ₹3,000 dinner split three ways, the other two members' balances would silently become wrong — they would appear to owe less than they do. Removing your data cannot be allowed to corrupt someone else's financial records.
What remains is the amount, the date, the description, and your share of the split — attributed to "Former member". What is removed is your name, your email, and any link between those records and you.
⚠️ If you own a group with other members, you must transfer ownership or remove the other members before you can delete your account. The app will tell you if this applies.
Deletion is permanent and cannot be undone. Please export or note anything you wish to keep before deleting.
10. Your rights
Depending on where you live, you have some or all of the following rights over your personal information.
| Right | What it means |
|---|---|
| Access | Ask for a copy of the personal information we hold about you |
| Rectification | Ask us to correct information that is wrong or incomplete |
| Erasure | Ask us to delete your personal information (see section 9 for the group-expense exception) |
| Restriction | Ask us to limit how we use your information in certain circumstances |
| Portability | Ask for your information in a structured, machine-readable format |
| Objection | Object to processing based on our legitimate interests |
| Withdraw consent | Withdraw consent at any time, where we rely on it — this does not affect processing already carried out |
| Complain | Lodge a complaint with your data protection authority |
Most of these you can exercise yourself in the app. You can view and edit everything you have entered, change your display name, and delete your account entirely.
To exercise any right, or if you need help, email [email protected]. We will respond within 30 days. We may ask you to verify your identity before acting on a request, to make sure we are not disclosing your information to someone else.
If you are in India, you may also contact the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.
If you are in the EEA or UK, you may complain to your local supervisory authority.
11. International transfers
We are based in India. Your information is stored on Google Cloud infrastructure, which may process and store data in data centres outside your country, including in the United States.
Where we transfer personal information out of the European Economic Area or the United Kingdom, that transfer is protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses, which Google incorporates into its terms as our processor.
By using Syncrofin, you understand that your information may be transferred to and processed in countries whose data protection laws may differ from those of your own country.
12. Children
⚠️ Syncrofin is not intended for children. The app is not directed at anyone under the age of 18, and we do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, contact [email protected] and we will delete it promptly.
13. Automated decision-making
We do not use your personal information for automated decision-making or profiling that produces legal effects or similarly significant effects on you.
Syncrofin performs calculations on the data you enter — budget warnings, net worth, projections in the calculators — but these are arithmetic on your own figures, shown only to you. They are not decisions made about you, and they are not shared with anyone.
14. Changes to this policy
We may update this Privacy Policy from time to time.
- For minor changes, we will update the "Last updated" date at the top.
- For material changes — such as collecting a new category of information, or a new purpose for using it — we will give you notice in the app or by email at least 30 days before the change takes effect.
Continuing to use Syncrofin after a change takes effect means you accept the updated policy. If you do not accept it, you may delete your account.
15. Contact us
For any question about this policy, your personal information, or to exercise any of your rights:
Email: [email protected]
Postal address: Rainborne Nexus, B203, Grishma Apartment, Vasant Utsav Society, Hinjewadi, Pune, Maharashtra, India 411057
Data controller: Rainborne Nexus (proprietor: Mrutyunjaya Panigrahi)
16. Governing law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it.
Any dispute arising out of or in connection with this policy is subject to the exclusive jurisdiction of the courts at Pune, India.
This policy was last reviewed on 26 July 2026.