Privacy
Last updated 14 August 2026
Dhyan Pay is a personal budgeting app run by an individual, not a company. This page says exactly what it collects and why, in the order the law asks for it. It is deliberately short enough to read.
Who is responsible
Hari K, an individual based in India, decides what data Dhyan Pay collects and why — which makes him the data fiduciary under the Digital Personal Data Protection Act, 2023. Contact: info@dhyanpay.in.
What is collected, and what it's for
| Data | Why |
|---|---|
| Your email address | To create your account, sign you in, and reset your password. Nothing else — no newsletters, no marketing. |
| Your wallets | Names, icons and the monthly limits you set. This is the budget itself. |
| Your payments | Amount, date, the label you typed, an optional note, which wallet, and whether you confirmed it. This is what produces your balances and your monthly report. |
| A fingerprint of payee UPI IDs | A one-way cryptographic hash, never the UPI ID itself. It lets a shop you've paid before suggest the same wallet. It cannot be turned back into a UPI ID by us. |
| Your alert settings | Your chosen alert style, threshold and reminder timing, plus a browser push token if you turn on notifications, so alerts can reach you. |
What is never collected
- Your bank account, card details, account balance or UPI PIN. The app has no connection to your bank and never asks for one.
- The UPI IDs or phone numbers of people you pay, in readable form.
- Your SMS messages. Dhyan Pay does not read messages, ever.
- Your contacts, your location, or any advertising identifier.
- Aadhaar, PAN, or any KYC document.
What stays on your phone only
Which UPI apps you have, which one you prefer, your light or dark theme choice, and an offline copy of your own data so balances still show without a signal. These never leave the device and are not sent to any server.
Analytics
There is no Google Analytics, no Facebook pixel, and no third-party advertising or tracking on this site or in the app. Nothing about you is shared with an analytics company.
Where it's stored
In a Supabase database hosted in Mumbai, India, and served through Vercel. Both are processors acting on instructions; neither uses your data for their own purposes. Data is not transferred outside India for storage.
Your rights
You can do all of these yourself, inside the app, today:
- See your data — Settings → Export everything as CSV gives you every payment in a plain file.
- Correct it — any payment's amount, label, note, date and wallet can be edited or deleted.
- Erase it — Settings → Delete everything removes your account and all your rows from the database for good. It is not a soft delete and it is not recoverable.
- Withdraw consent — deleting your account is how consent is withdrawn, and it takes the same number of taps as signing up did.
- Nominate someone — if you want another person to exercise these rights on your behalf, write to the address above.
How long it's kept
Until you delete it. If an account goes unused for twelve months, you'll get an email first, and then it is deleted. Server logs from Supabase and Vercel roll off on their own schedule, about a year, and are used only to investigate faults.
If something goes wrong
If there is ever a breach involving your data, you will be told directly and in plain language — what happened, what it means for you, and what is being done — and the Data Protection Board will be notified. There is no threshold below which you would not be told.
Children
Dhyan Pay is for adults. By creating an account you confirm you are 18 or older. Accounts found to belong to children will be deleted.
Complaints
Write to info@dhyanpay.in and you will get a reply within seven days — see the contact page. If you aren't satisfied, you can complain to the Data Protection Board of India.
Changes
If this page changes in a way that affects what is collected or why, you'll be told in the app before it takes effect. The date at the top always reflects the current version.