Privacy policy
What we collect, why, who we share it with, your rights and how long we keep it.
Effective date: 20 October 2026. Last updated: 20 October 2026. Written to India’s Digital Personal Data Protection Act, 2023 and its Rules. Questions about this page: grievance@thefingene.com.
Who we are
Fingene Private Limited (CIN U62099TS2026PTC221446), Hyderabad, Telangana, India, operates Fingene. In this policy, “we” means Fingene Private Limited and “you” means the person using our website or app. Under the DPDP Act we are the Data Fiduciary and you are the Data Principal.
What we collect, and why
We collect only what the product needs. Each item is collected on the basis of your consent, given through a clear choice, except where the law requires us to keep records.
| What | Why | Use Fingene without it? |
|---|---|---|
| Account details: name or nickname, email, mobile number, password hash | To create and secure your account and send receipts and service messages | No |
| Your Scan answers | To work out your Fingene and explain it | No, this is the core product |
| Check-ins and reflections | To show how your patterns change over time | Yes |
| Spending you enter by hand | To ground insights in real spending | Yes |
| Bank messages you paste (optional) | To save typing. Parsed into amount, merchant and date, and the raw text is discarded within 24 hours | Yes. Off by default |
| Order-confirmation emails (optional, if you connect your email) | To spot patterns in food and shopping orders | Yes. Off by default |
| Conversations with Fino | To provide the companion and improve its safety | Yes |
| Interaction signals (optional): how quickly you respond, how fast you scroll | As extra clues about state of mind, treated as hypotheses and never as verdicts | Yes. Off by default |
| Device and usage data | To keep the app working and diagnose faults | No |
| Payment records: plan, amount, transaction ID, invoice. Never your card or UPI credentials | To take payment, issue invoices, handle refunds and meet tax duties | Only if you subscribe |
| Messages to support | To answer you | Yes |
We do not sell your personal data and we do not share it with advertisers or data brokers. We do not ask for your bank login, card number, UPI PIN or password, and no one from Fingene ever will. We do not move, invest or hold your money. We do not use your private reflections or Fino conversations for marketing.
How we use it
- To produce your Gene, Behavior Score and insights.
- To send reminders and nudges you opted into.
- To keep the service secure and fix faults.
- To produce aggregated, anonymised statistics and research. These cannot identify you.
- To meet legal, tax and accounting duties.
We do not use your personal data to train third-party AI models. Where an AI provider processes your messages to answer you, it does so as our processor under contract and does not use your content to train its models.
Who we share it with
| Category | What they receive |
|---|---|
| Infrastructure and database providers | Encrypted app data, stored with our cloud database and hosting providers. Any storage outside India happens only as the DPDP Act and its Rules allow |
| AI processing (our language-model provider) | The content of your Fino messages, to generate a reply |
| Notifications provider | A device token and the notification text, which never contains amounts or merchants |
| Payments (an RBI-authorised payment partner, named here before payments open) | Name, email, amount, plan. They handle card and UPI details; we never see them |
| Our internal analytics workspace | Aggregated product metrics, never your Scan answers or reflections |
| Advisers and authorities | Only what is necessary, only when required |
Your rights
You can access a copy of your data, correct it, erase it, withdraw consent for any optional processing, nominate someone to act for you, and complain to us and then to the Data Protection Board of India. Write to privacy@thefingene.com. We respond within 30 days, and usually much sooner. Withdrawing consent stops future processing; some features stop working without the data they depend on.
How long we keep it
| Data | Retention |
|---|---|
| Account and Scan data | While your account is active, and for 30 days after deletion |
| Check-ins, reflections, Fino conversations | Same, and you can delete single entries |
| Pasted message text | Parsed at once; raw text discarded within 24 hours |
| Payment and invoice records | 8 years, as tax and company law require |
| Security and access logs | 12 months |
| Aggregated, anonymised research data | Indefinitely. It cannot identify you |
If something goes wrong
If a personal data breach occurs we will tell you and the Data Protection Board without delay, and give the Board full particulars within 72 hours of becoming aware. Where a cybersecurity incident must be reported to CERT-In, we report within its 6-hour window. Our notice will say what happened, what data was involved, what we are doing, and what you should do.
Children
Fingene is for adults. You must be 18 or older. We do not knowingly collect data from anyone under 18, and delete it if we learn we have.
Changes
If we change this policy materially, we will tell you in the app and by email at least 7 days before it takes effect, and ask again for consent where the law requires.
Find your Fingene.
Find your Fingene.
Five minutes, no bank login. Prefer to skip it? Create an account and start tracking instead.