1. Personal Data We Collect & Process (Section 5 Notice)

FairShare processes only the minimum necessary personal data required to deliver expense tracking and debt settlement calculation services:

• Identity & Profile Data: Full name, verified email address, phone number (if provided for group invites), profile photo URL.
• Financial Identifier Data: UPI Virtual Payment Address (e.g., username@upi) solely to facilitate peer-to-peer settlement deep-linking. We never collect, access, or store banking passwords, UPI PINs, CVVs, or debit/credit card numbers.
• Transaction & Ledger Data: Expense amounts, split distributions, category tags, timestamps, receipts/attachments, and settlement confirmations recorded within your mutual groups.
• Technical Telemetry: Log files, IP address, device metadata, and browser headers collected strictly for security audits, rate-limiting, and fraud prevention.

2. Lawful Grounds for Processing & Consent (Section 6)

We process personal data based on your explicit, informed, and unconditional consent obtained upon registration, and for legitimate contractual purposes to calculate group balances and debt graph simplifications.

In accordance with Section 6(4) of the DPDP Act, 2023, you have the right to withdraw your consent at any time through Account Settings or by submitting a written request to our Grievance Officer. Upon consent withdrawal, your personal data will be purged within statutory timelines, subject to resolution of outstanding group settlements.

3. Data Principal Statutory Rights (Sections 11–14)

• Right to Access Information (Section 11): Request a structured report of all personal data held, processing activities, and identities of group members with whom expense shares were shared.
• Right to Correction & Erasure (Section 12): Rectify inaccurate personal data, complete incomplete profiles, and request erasure of personal data that is no longer necessary for the specified purpose.
• Right of Grievance Redressal (Section 13): Access an accessible, prompt grievance redressal channel before escalating complaints to the Data Protection Board of India.
• Right to Nominate (Section 14): Designate any natural person who shall, in the event of your death or incapacity, exercise your Data Principal rights.

4. Security Safeguards & Non-Sharing Policy (Section 8)

FairShare enforces technical and organizational safeguards in compliance with Section 8(5) of the DPDP Act, including AES-256 encryption at rest, TLS 1.3 encryption in transit, strict role-based access control (RBAC), and automated database sanitization.

We do not sell, rent, or monetize your personal or financial data to third-party ad networks, credit bureaus, or marketing aggregators. Data is only accessible to authenticated group co-members as intentionally split by you.