VIKAM, a product of Fluxusforge, is committed to protecting your personal data. This policy explains what we collect, why, how we use and protect it, and the rights you have — in line with India's Digital Personal Data Protection (DPDP) Act, 2023 and applicable RBI directions.
1. Information we collect
We collect only what is needed to provide the service, and always with your knowledge:
- Identity & contact: your mobile number (verified by OTP), name, preferred language, and city/PIN code where you provide them.
- Financial information (only with your explicit consent): income, savings, bills, and transaction details — either entered by you, captured by voice, or shared by you through the regulated Account Aggregator framework. We do not access your bank accounts without your consent.
- Usage & device: app activity, device type, and approximate location used to operate, secure, and improve the service.
- Consent records: a timestamped, auditable record of every consent you give or withdraw.
2. How we use your information
- To provide expense tracking, your Paisa Score, savings circles, and rewards.
- To personalise insights in your language.
- To verify identity, prevent fraud, and keep your account secure.
- With your separate, explicit consent, to share specific data with a regulated lending partner so you can receive a loan offer.
3. Consent & control
Processing of sensitive financial data is need-based and consent-first. Consent is requested at each stage with a clear purpose, is optional, and can be withdrawn at any time. Using rewards or core features is never conditional on consenting to share data with a lender.
4. Sharing of data
We do not sell your data. We share it only: (a) with a regulated lending partner when you explicitly opt in to a loan offer; (b) with service providers (e.g., KYC, OTP, cloud) bound by confidentiality; or (c) where required by law.
5. Data residency & security
All personal data is stored on servers located in India. We use encryption in transit and at rest, access controls, and audit logging. We do not request access to your contacts or call logs.
6. Your rights
- Access and correct your data.
- Withdraw consent and restrict sharing with third parties.
- Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
- Nominate someone to exercise your rights in case of incapacity.
7. Retention
We keep data only as long as needed for the purpose collected or as required by law, after which it is deleted or anonymised.
8. Children
VIKAM is intended for users aged 18 and above. We do not knowingly collect data from children.
9. Changes & contact
We may update this policy and will post the revised date above. For any privacy request or concern, contact our Grievance Officer at grievance@vikam.io or write to our contact page.