Data Safety — DebtZen

Effective Date: April 4, 2026

Last Updated: April 4, 2026

App: DebtZen — Personal Finance Manager

Platform: Android

This page answers every question about how DebtZen handles your data — written clearly, without legal jargon. It is aligned with the Google Play Data Safety requirements and India's DPDP Act, 2023.

    Short version: Your financial data lives on your device. Cloud sync is optional and protected by your phone number authentication. We never sell your data, never share it with lenders, and never use it for ads.
  

At a Glance

📱

Local-First Storage

Data saved on your device. Works offline.

☁️

Optional Cloud Sync

Firebase backup. Your choice, your control.

🔒

Encrypted in Transit

TLS encryption on all network requests.

🚫

Never Sold

Your data is never sold to third parties.

🏦

Never Shared with Lenders

Banks and NBFCs never see your data.

🗑️

Delete Anytime

Full account + data deletion from Settings.

What Data We Collect

This table reflects the exact Google Play Data Safety declaration for DebtZen:

Data Type	Collected?	Shared?	Purpose	Required?
Phone number	Yes	Firebase Auth only	Login via OTP	Required
Name	Yes	No	Personalise dashboard	Required
Date of birth	Yes	No	Retirement planning calculations	Required
City / location	Yes (text only)	No	Financial context	Optional
Income details	Yes	No	Financial health calculations	Required
Expense details	Yes	No	Surplus / budget analysis	Required
Loan / EMI details	Yes	No	Debt payoff timeline, EMI reminders	Optional
Investment details	Yes	No	Net worth calculation	Optional
Assets & savings	Yes	No	Net worth calculation	Optional
Insurance details	Yes	No	Coverage tracking	Optional
App usage analytics	Yes (anonymised)	Firebase Analytics	Improve app features	Required
Crash reports	Yes (anonymised)	Firebase Crashlytics	Fix bugs, improve stability	Required
Push notification token	Yes	Firebase FCM	EMI reminders	Optional
Bank account credentials	Never	Never	N/A	N/A
UPI PINs / card details	Never	Never	N/A	N/A
Location (GPS)	Never	Never	N/A	N/A
Contacts / SMS	Never	Never	N/A	N/A

Where Your Data is Stored

On your device (local storage): All financial data you enter is saved directly on your Android device. This storage is private to DebtZen — other apps cannot access it. The app works fully offline.

In the cloud (Firebase Firestore): When you are logged in, your data is synced to Google Firebase Firestore. This allows you to restore your data if you reinstall the app or switch phones.

Data region: asia-south1 (Mumbai, India) — your data stays in India
Encryption at rest: AES-256
Encryption in transit: TLS 1.2+
Access control: Firestore security rules — only your authenticated account can read/write your data

    Status indicator in app: The app shows "Saved on device. Not backed up yet." when data is stored locally but sync is pending. Once synced, the indicator updates to confirm cloud backup.
  

Third-Party Services Used

Service	Provider	Purpose	Data Sent
Firebase Authentication	Google	Phone OTP login	Phone number only
Firebase Firestore	Google	Cloud data sync and backup	Your financial data (encrypted, access-controlled)
Firebase Cloud Messaging	Google	EMI reminder push notifications	Device notification token only
Firebase Crashlytics	Google	Crash reporting	Anonymised crash logs — no personal data
Firebase Analytics	Google	App usage analytics	Anonymised usage events — no financial data

None of these services receive your financial data (income, loans, expenses). Analytics events contain only anonymised screen names and actions — no amounts, names, or identifiers.

Your Rights and Controls

Access your data: View all data inside the app at any time
Edit your data: Update any information from within the app
Delete your account: Settings → Delete Account — removes all data from device and cloud within 30 days
Disable notifications: Turn off EMI reminders from Android notification settings
Export: Data export feature is on the roadmap for a future release

Data Retention

Your data is retained as long as your account is active. On account deletion:

Cloud data (Firebase Firestore) is permanently deleted within 30 days
Local device data is deleted immediately on uninstall or account deletion
Anonymised analytics data (no PII) may be retained for up to 2 years for product improvement

Permissions the App Uses

Android Permission	Why It's Needed
INTERNET	Firebase sync, OTP authentication, push notifications
RECEIVE_BOOT_COMPLETED	Reschedule EMI reminder notifications after device restart
POST_NOTIFICATIONS	Send EMI due date reminder notifications (Android 13+)

No other permissions are requested. The app does not access your camera, microphone, contacts, SMS, files, or location.

Security Measures

Firestore security rules ensure only your authenticated account can access your data
All network communication uses TLS encryption
Firebase data at rest is encrypted with AES-256
Phone OTP authentication means no passwords to steal or leak
Crash logs are fully anonymised before transmission
No financial data is ever logged in analytics or crash reports

Contact for Data Requests

To request data access, correction, or deletion, contact us:

Data Safety Contact

App: DebtZen — Personal Finance Manager

Email: privacy@debtzen.in

Website: www.debtzen.in

Address: Mannargudi, Tamil Nadu, India

We respond to all data requests within 30 days, as required by the DPDP Act, 2023.