1. Who we are
Purrse ("Purrse", "we", "us") makes the Purrse expense tracking app for iOS and Android and runs the website at purrse.in. This policy explains what personal data we process when you use the app or the website, why, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and, where it applies to you, the EU and UK General Data Protection Regulation.
2. What we collect
Information you give us
| Data | Examples |
|---|---|
| Sign-in details | Your email address. If you use Google or Apple, the account identifier and email address they share with us (Apple may give us a private relay address). We never receive your Google or Apple password, and Purrse has no passwords of its own. |
| Profile | Your display name, the cat you pick as your avatar, and your base currency. |
| Accounts | Names and types of the accounts you add (cash, bank, credit card, wallet), currency, opening balance, and optional details such as a card limit, bill and due day, payment methods, a UPI ID, or the last 4 digits of a card. |
| Entries | Expenses, income, transfers, loans and repayments: amount, date and time, account, category, payment method and any note you write. |
| People | Names you enter for people you lend to or borrow from. |
| Categories | The categories you turn on, rename or create. |
| Messages to us | Anything you send us by email, such as a support request. |
Please don't store full card numbers, CVVs, PINs, bank passwords or anyone's sensitive information in notes. Purrse never asks for them. When you add people to track IOUs, only enter what you're comfortable storing about them, such as a first name.
Information collected automatically
To keep the service running and secure, our hosting provider records basic technical logs when the app talks to our servers, such as IP address, request time, and device and app version. These logs are used only for security and troubleshooting.
Purchases
Subscriptions and the Lifetime plan are sold through the Apple App Store or Google Play and managed with RevenueCat. We receive your purchase status (for example, active plan, trial and renewal dates) linked to your Purrse account. We never see your card or payment details; Apple or Google handles payment.
What we don't collect
We don't access your bank accounts, SMS, contacts, photos, location, microphone or camera. The app contains no advertising identifiers, ad networks or third-party analytics.
The website
purrse.in is a static website. It sets no cookies and runs no analytics. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. Our web host keeps standard server logs.
3. How we use your data
- To provide the app: sign you in, save your data, sync it between your devices and restore it when you change phones.
- To manage your plan: check whether you have an active subscription, trial or Lifetime plan.
- To keep Purrse secure: prevent abuse, fix bugs and protect accounts.
- To talk to you: send one-time sign-in codes, answer support requests and, rarely, tell you about important changes to the service or this policy.
- To meet legal obligations, such as tax and accounting records for purchases, and lawful requests from authorities.
We process your data because you asked us to provide the app (performance of our agreement with you, and your consent when you sign up), because of our legitimate interest in keeping the service secure, and to meet legal obligations. We do not sell your personal data, share it for advertising, or use your financial entries to profile you or train AI models.
4. Who we share it with
We share data only with service providers who help us run Purrse, under contracts that limit their use of it to providing their service to us:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and hosting for your synced data. |
| Google and Apple | "Continue with Google" and "Sign in with Apple", if you use them. App distribution and payment. |
| RevenueCat | Checking and managing your subscription status. |
| Email delivery provider | Sending your 6-digit sign-in codes. |
| Web host | Serving the purrse.in website. |
We may also disclose data if required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition, in which case this policy will continue to protect your data.
Some of these providers process data outside India. When they do, we rely on their contractual commitments and security measures to keep your data protected, and we only transfer data to countries that Indian law permits.
5. Storage and security
- On your phone. Purrse stores your data on your device first so it works offline. Your sign-in session is encrypted with a key kept in the iOS Keychain or Android Keystore. Android cloud backup of app data is turned off.
- On our servers. Data is sent over encrypted connections (HTTPS) and stored with our database provider. Every table is protected by row-level security, so the server only lets you read and change your own rows.
- On sign-out. Pending changes are uploaded, then your data is removed from the device.
No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach as the law requires.
6. Retention and deletion
We keep your data for as long as you have a Purrse account. You can delete your account at any time in the app under Me → Delete account. This permanently deletes your profile, accounts, entries, people and categories from our servers immediately. Copies in our providers' encrypted backups are overwritten on their normal backup cycle. We may keep limited purchase records where the law requires, such as for tax. If you can't access the app, email us and we'll delete your account for you.
Uninstalling the app removes data from your phone but does not delete your cloud account.
7. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and get a summary of how it's processed;
- correct or update it (most of it you can edit directly in the app);
- delete it, or withdraw your consent, which you can do by deleting your account;
- get a copy of your data in a portable format;
- nominate someone to exercise your rights if you die or become unable to;
- raise a grievance with us, and if you're not satisfied, complain to the Data Protection Board of India or your local data protection authority.
To use any of these rights, email privacy@purrse.in from the address linked to your account. We'll reply within 30 days.
8. Children
Purrse is intended for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has created an account, contact us and we'll delete it.
9. Changes to this policy
We may update this policy as Purrse changes. We'll change the date at the top, and if the changes are significant we'll tell you in the app or by email before they take effect.
10. Contact and grievances
Questions, requests or complaints about privacy: privacy@purrse.in. Our grievance officer can be reached at the same address. For anything else: hello@purrse.in.