Who we are
GuideFin is a product developed by Finthinkhub.
This policy covers the GuideFin Android app, the GuideFin MCP server used by AI assistants, and this website.
It explains what data we handle, where it goes, and the choices you have. Contact us at contact@finthinkhub.com with any question.
Signing in and guest mode
You can sign in with your email and a one-time code, or with Google. Supabase handles sign-in. If you use Google, we receive the name and email on your Google account. We never see your Google password.
You can also use the app as a guest. A guest has no account, and saved plans and goals stay on the phone.
Even for guests, the analytics and crash reporting described below still run, and goal numbers are sent for calculation as described in the next section.
What we store for signed-in users
When you are signed in, the following is stored on our servers under your account.
- Profile: email address, a hashed copy of that email, display name and age.
- A device identifier, used to check that a session belongs to your phone.
- Your retirement plan and saved retirement calculations.
- Your NPS plan.
- Your goals and the assets you map to them.
What the app does not ask for
The app does not ask for your bank account, card, UPI or PAN details.
It does not read your contacts, photos or location.
We do not sell your personal data. We do not use advertising trackers in the app.
How calculations work
Most calculations run on your phone.
Goal projections are also sent to our API server as numbers, so the result stays consistent. That request does not include your name, email or account identity.
Our API server provides the public and third-party fund data shown in the app.
What stays on your phone
Your login session, device identifier, offline profile and NPS plan are held in the secure keystore on your phone. The keystore is encrypted by your phone.
Other app data is held in the app's normal private storage. This includes your retirement plan, goals, calculator entries, expense entries, settings and cached fund data. GuideFin does not add its own encryption to this data.
Android may include this private storage in your phone's backups, depending on your backup settings. If that matters to you, review those settings.
Analytics and crash reporting
Released versions of the app use PostHog for product analytics and in-app surveys, and Sentry for crash and performance reporting.
PostHog receives the events and screens you use, such as a calculator being opened or a fund or lesson being viewed, along with your answers to any survey you complete. It also receives device and app details, an anonymous device identifier, and your account identifier if you are signed in. Location lookup from your IP address is turned off in the app.
Sentry receives crash and error details, the recent screens and events leading up to a crash, device and app details, performance timings for a sample of sessions, and your account identifier if you are signed in. The option that sends additional personal data to Sentry is turned off.
Before an event is sent, the app removes your name, email and age, and amounts such as your expenses, income and corpus. A few events can still include a planning assumption, such as a target retirement age or an inflation rate.
Opting out of analytics
The app does not yet have a switch to turn off analytics or crash reporting.
If you do not want them, you can stop using the app and uninstall it. You can also email contact@finthinkhub.com to ask us to delete analytics and crash data linked to your account.
Service providers
These companies process data for us so that the service can run.
- Supabase, in Mumbai, India: sign-in and the database that holds your account data.
- Railway, in Singapore: hosts our API server and the MCP server.
- Turso, in Mumbai, India: stores public fund data. It holds no personal data.
- Google: Google Sign-In, and distribution of the app through Google Play.
- Expo: builds and packages the app.
- PostHog, in the European Union: product analytics and in-app surveys.
- Sentry, in the European Union: crash and performance reporting.
- Resend: sends the welcome email after you complete your profile.
- Cloudflare: hosts this website.
Data outside India
Your account data is stored in India. Some processing happens elsewhere, including in Singapore and the European Union, as listed above.
The GuideFin MCP server
The MCP server lets AI assistants read public fund data. It can only read public fund data. It has no access to accounts, profiles, plans or goals, and it stores no personal data.
It receives only the tool name and the arguments your assistant sends, such as a fund code or a search term. It does not receive your conversation. Your assistant is run by another company, and that company's privacy policy covers your conversation.
For each request, the server writes one log line. We use these logs to protect the service from abuse and to investigate errors. A log line contains:
- The time, the type of caller, and the tool or method called.
- A one-way hash of the IP address and of the session identifier. Raw IP addresses are not written to the logs.
- The arguments sent to the tool, with text cut to 60 characters. If you ask about funds you hold, those fund codes appear here, linked only to the hashes above.
- How long the request took, its size, its outcome, and any error detail.
How long MCP data is kept
The server briefly holds your IP address in memory, to apply usage limits and keep a session tied to its caller. It is not saved to disk.
MCP log lines are kept for a limited period set by our hosting provider. We use them only for abuse protection and troubleshooting.
How we protect your data
Data travels between the app and our servers over HTTPS.
Our database uses row-level security, so one signed-in user cannot read another user's records.
We take reasonable care, but no system is perfectly secure and we cannot promise that yours will never be exposed.
Deleting your data
In the app, open Profile and tap Delete my data.
If you are signed in, this deletes your profile, retirement plan, NPS plan, saved calculations, goals and device record from our servers. It also clears the app data on your phone and signs you out. If you are a guest, it clears the data on your phone.
This in-app option does not remove your login record, which holds your email address, and it does not remove analytics and crash data. To delete those too, email contact@finthinkhub.com from the address on your account.
Uninstalling the app removes data on your phone. It does not delete data on our servers.
How long we keep data
Account data is kept while your account is active, and until you delete it.
We complete deletion requests sent by email within 30 days, and confirm by email when it is done.
Crash reports are kept for up to 90 days and analytics events for up to 12 months.
Your rights
We handle personal data with India's Digital Personal Data Protection Act, 2023 in mind. You can ask to:
- See the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Delete your data, as described above.
- Withdraw consent.
- Raise a grievance with us.
- Name someone to exercise these rights for you if you cannot.
Children
GuideFin is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us data, contact us and we will delete it.
This website
This website has no accounts, forms, cookies or analytics. Like any website host, Cloudflare may keep technical request logs.
Changes to this policy
We will update this page if our data practices or providers change, and change the date at the top.
Grievance contact
For privacy questions, requests or complaints, email contact@finthinkhub.com.
Grievance Officer, Finthinkhub: contact@finthinkhub.com.
We respond to requests and complaints within 30 days.