Privacy Policy

HAM ("House Allowance Monitor", "we", "us") is a household finance tracking app operated from India, available to users in India and internationally. This policy explains what data we collect, why, and how it's handled. This is a plain-language summary of our practices, not a substitute for legal advice — if you have specific legal or compliance questions, please consult a qualified professional.

We process your data on the following bases: to perform our contract with you (running the service you signed up for and billing your subscription), for our legitimate interest in keeping the service secure and reliable, and, where applicable, with your consent (e.g. optional WhatsApp reminders). If you're located in the EU, UK, or another jurisdiction with its own data protection law, you may have additional rights under that law beyond those listed below — contact us if you'd like to exercise them, and see the note at the end of this policy.

What we collect

• Account data: name, email address, and a hashed password (we never store your password in plain text).
• Financial data you enter: expenses, loan/EMI details, credit card balances and due dates, and savings goals for you and any household members you add. This data is entered by you — we don't connect to your bank or pull data automatically.
• Billing data: your subscription status and payment history. Card and payment details themselves are handled entirely by Razorpay, our payment processor — we never see or store your card number or UPI credentials.
• Technical data: IP address and basic request logs, kept only as long as needed for security (e.g. rate-limiting abuse, debugging).

Why we collect it

• To provide the core service — storing and calculating your household's financial picture.
• To process your subscription payments via Razorpay.
• To send account-related emails (password resets, billing receipts, trial reminders).
• To keep the service secure (rate limiting, fraud prevention, abuse detection).

Who we share it with

We do not sell your data, and we do not share your financial data with advertisers. We share the minimum necessary data with:

• Razorpay — to process subscription payments, including international card payments for customers outside India (governed by Razorpay's own privacy policy). Depending on your card issuer and country, Razorpay may route international payments through its own banking and card-network partners as part of standard payment processing.
• Our hosting/email infrastructure providers — solely to run the service (e.g. database hosting, transactional email delivery).
• Law enforcement — only if legally required to do so.

Data isolation between households

Every account's data is strictly isolated — one household's expenses, loans, and financial details are never visible to another account. All data access is scoped and authenticated server-side.

Data retention and deletion

Your data is retained for as long as your account is active. If you cancel your subscription, your account and data are retained for 30 days to allow for reactivation, after which they are permanently deleted from our production systems (backups age out on their own retention schedule shortly after). You can request earlier deletion at any time by contacting support.

Your rights

• You can export your data (CSV) from within the app at any time.
• You can request correction or deletion of your data by contacting support.
• You can close your account at any time from Settings.

Security

Passwords are hashed, not stored in plain text. Traffic to the app is encrypted in transit. Access to production data is restricted. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable, industry-standard measures to protect your data.

Cookies

We use a session cookie to keep you logged in. We don't use third-party advertising or tracking cookies.

Children's privacy

HAM is not directed at children under 18 and we do not knowingly collect data from minors.

International users

HAM is operated from India, and your data is stored and processed in India. If you're accessing HAM from outside India, your data will be transferred to and processed in India, which may have different data protection laws than your home country. We haven't yet completed a full formal review of EU/UK GDPR-specific requirements (such as appointing an EU/UK representative) — if you're located in the EU or UK and this matters for your use of the service, please contact us before signing up so we can address it directly.

Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above and, for significant changes, notify active users by email.

Contact

Questions about this policy or your data? Contact us at support@ham.app.