CoreDhan
Privacy Policy
Last updated: 10 November 2026
CoreDhan ("CoreDhan", "we", "us") is a money-planning app for couples and individuals. This policy explains what we collect when you use the CoreDhan app and website, why, who helps us process it, how long we keep it and the choices you have. In short: we collect what the app needs to work, we don't show ads, and we never sell your data.
1. What we collect
Account details
Your email address, the name you enter, and your language. If you sign in with Apple or Google, we receive a verified email address (Apple may give us a private relay address instead) and a stable account identifier from that provider. We never see your Apple or Google password.
The money details you add
Debts and loans, spending and income, budgets, bills, goals and savings contributions, Money Date notes and decisions, your home currency and money-management style, and the "Your month" figures you enter for planning. You enter these yourself; we do not connect to your bank and never ask for bank passwords or card numbers.
Bank messages and statements you choose to send
If you use auto-capture, we receive the text of bank SMS or notifications you paste or forward to your personal capture link, and the rows of statement files (CSV) you import. We read them only to pull out the amount, date, merchant and card ending, and keep them as private suggestions that only you see until you confirm them. Card numbers in these messages are already masked by your bank; we keep at most the last four digits.
Your home and partner
If you create or join a home, we store who belongs to it and the invite codes used to join. Each item you add is either shared, amount-only or private, as you choose; your partner sees only what you share with them.
Technical data
Our server records basic request logs (time, address the request came from, page requested and the result) to keep the service secure and fix problems. The app also checks with Expo, our app-update provider, for updates, which shares technical details such as the app version and platform.
What we don't collect
No advertising identifiers, no tracking across other apps or websites, no contacts, no location, and no analytics or advertising SDKs. Face ID, Touch ID and fingerprint checks happen entirely on your phone; we never receive biometric data.
2. Why we use it
- To run the app: sign you in, store and sync your plans across your devices and with your partner, and show your plans, reports and reminders.
- To send emails you ask for, such as sign-in codes.
- To keep CoreDhan secure: prevent abuse, limit repeated sign-in attempts, and investigate problems.
- To answer you when you contact support.
- When paid plans launch, to know which plan you have. Payments are handled by Apple or Google; we never see your card details.
We process your data to provide the service you asked for, with your consent (which you can withdraw by deleting your account), and where needed to keep the service secure or meet legal obligations.
3. Who processes it for us
We do not sell or rent your data, and we do not share it for advertising. We use a small number of service providers who process data only on our instructions:
| Provider | What for | Data involved |
|---|---|---|
| Contabo | Server hosting, in India | All data stored by the app |
| Cloudflare | Domain, network security | Network traffic to our server |
| Resend | Sending sign-in emails | Your email address and the code |
| Apple, Google | Sign in with Apple / Google, app stores, and future payments | Sign-in identity; purchase status |
| Expo | Building the app and delivering app updates | App version and device platform |
We may disclose data if the law requires it, or to protect the safety and rights of our users. If CoreDhan is transferred to a company (for example, when we incorporate), your data would move with it under this policy, and we would tell you first.
4. Where it is stored
Your data is stored on our server in India. Some providers above may process data in other countries; where they do, they protect it under their own data-protection commitments.
5. How long we keep it
- Your account and money details: for as long as you keep your account.
- When you delete your account, we delete it straight away from our live database. Our nightly database backups roll over within 14 days, after which no copy remains.
- Sign-in codes expire after 10 minutes. Server request logs are rotated automatically and kept only briefly.
- When one partner deletes their account, the other partner keeps the items they added themselves.
6. Your choices and rights
- Access and correct: everything you add is visible and editable in the app.
- Delete: in the app, go to Settings → Delete account. You can also email us; see how to delete your account.
- Control sharing: mark any item private or amount-only, or leave your home.
- Withdraw consent or complain: contact us below. Depending on where you live (for example India's Digital Personal Data Protection Act, 2023, or the UAE Personal Data Protection Law), you may also complain to your data-protection authority.
7. Security
All connections use HTTPS. Sign-in uses one-time codes or Apple/Google, never stored passwords; sessions use short-lived tokens, and your sign-in token on the phone sits in the device's secure storage. Capture links and codes are stored only as one-way hashes. You can add an app lock with Face ID, fingerprint or your passcode. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects you.
8. Children
CoreDhan is meant for adults managing their own money and is not directed at anyone under 18. If you believe a child has given us data, contact us and we will delete it.
9. Changes
If we change this policy, we will update the date above, and for significant changes we will tell you in the app or by email before they take effect.
10. Contact
Questions or requests about privacy: [email protected]. For anything else: [email protected].