Privacy Policy

1. Who we are

WelFlow is a personal finance web app that helps you track expenses, income, investments, loans, assets, and budgets in an encrypted workspace. Contact: darshannaik.dev@gmail.com.

2. Information we collect

• Account information: email address and display name used to create and sign in to your account (including when you use Google Sign-In).
• Finance records: expenses, income, investments, loans, assets, budgets, goals, tax-related entries, and similar data you enter. These records are encrypted with a key derived from your encryption password before storage.
• Billing information: plan, payment status, and related metadata needed to manage Basic / Plus / Max access. Card payments are processed by Razorpay; we do not store your full card number.
• Technical data: session cookies required to keep you signed in and unlock your vault for a session, plus standard server logs (for example IP and request metadata) used for security and reliability.

3. How we use information

• To provide and operate the WelFlow app and your encrypted finance workspace.
• To authenticate you (email/password or Google Sign-In) and maintain your session.
• To process plan upgrades and renewals via Razorpay.
• On Plus and Max, to power Wel AI using a temporary finance snapshot for that chat session; chat history is stored encrypted like other vault data.
• To maintain security, prevent abuse, and improve reliability.

4. Google Sign-In

If you choose “Continue with Google”, Google shares basic profile information (such as email and name) with WelFlow solely to create or sign in to your account. WelFlow does not use Google to read your finance records. Google’s own practices are described in the Google Privacy Policy.

5. Encryption & access

Sensitive finance data is encrypted before it is stored. Your encryption password is the key to unlock that data for a session. WelFlow does not keep a recoverable copy of your encryption password. If you forget it, encrypted finance data cannot be recovered. Privacy mode only hides amounts on screen; it does not change how data is stored.

6. Service providers

We use trusted providers to run WelFlow, including Firebase (authentication and data storage), hosting/CDN for the website, Razorpay for payments, and AI providers for Wel AI on eligible plans. They process data only as needed to provide their services under their own terms and privacy policies.

7. Data sharing

We do not sell your personal information. We share data only with service providers as described above, or when required by law, or to protect the security and integrity of WelFlow and our users.

8. Retention

We retain account and finance data for as long as your account remains active so you can use WelFlow. You may request account-related assistance by emailing darshannaik.dev@gmail.com. Session cookies expire or are cleared when you sign out.

9. Your choices

• You can update account details and encryption password inside the app.
• You can stop using Google Sign-In by using email sign-in instead (where available).
• You can contact us to ask questions about your data or account.

10. Children

WelFlow is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of WelFlow after an update means you accept the revised policy.