Privacy & terms

• Your sign-up details: name, email, mobile number and password (stored only as a one-way hash), or your Google account's name and email if you continue with Google.
• Identity details you give for verification and the return: PAN and the name on it, date of birth, address, father's name, Aadhaar number (encrypted), residential status and the answers that decide the ITR form.
• Your money: bank, cash, card and loan accounts (account numbers encrypted), the statements you import and the transactions in them, categories, people and shops, budgets, goals and bills.
• Your investments and tax records: holdings and their entries (typed in, or read from a CAS you upload — the CAS file and its password are used once and not kept), Form 16, AIS and 26AS, tax payments, capital gains and the documents you upload. Mutual funds are valued from AMFI's public daily NAV list; nothing about you is sent to AMFI.
• Only if you turn it on in the Android app: from bank and card SMS on your phone, the amount, date, account's last four digits, the shop or person, the bank, the payment mode and the reference number. The message itself is never sent, and personal SMS are never read.
• How you use the app: sign-ins and devices, an audit log of changes and exports, and your settings (look, menus, notifications).

• To run your account and keep it secure (sign-in, two-factor, the record of where you are signed in).
• To show and sort your money, and to prepare your income tax figures, the ITR pack and the draft return file.
• To check your PAN and bank account with the services named below, when you ask for the check.
• To send the emails you choose (sign-in codes, alerts) and to answer you when you contact us.

We do not sell your data, use it for advertising, or share it for anyone else’s marketing.

You agree to this notice, and confirm you are 18 or older, when you sign up (an account made before, or with Google, is asked once inside the app). Each agreement is recorded with its wording, date and time. A check with an outside service (PAN, bank account) and reading bank SMS on your phone each ask for their own consent first. You can see every consent, and withdraw the optional ones, under My account → Privacy & consent; to withdraw this notice itself, delete your account. What was done before you withdraw stays lawful.

• Sandbox by Quicko — PAN verification and bank account verification (the PAN, or the account number, IFSC and name).
• Razorpay's IFSC directory — the IFSC code only, to fill in the branch's details.
• Google — if you choose “Continue with Google”, for signing you in.
• Our email provider — to deliver the emails you have chosen to receive.
• A bank account aggregator (Setu) — only if you connect a bank that way, under the consent you give in their flow.

The Income Tax Department receives nothing from us: you upload or file your return yourself. We share data with authorities only when Indian law requires it.

• Account, Aadhaar, demat, folio and deposit numbers, and your mobile number and address, are encrypted when stored; screens show only the last four digits of account numbers, and showing a full number asks for your password again and is logged.
• Your uploaded AIS is stored encrypted; other uploads (statements, bills) are kept in the app's private file store, reachable only through your signed-in account. Passwords are never stored — only a one-way hash.
• The record of sign-in attempts and sign-in sessions is kept for one year, to detect misuse of your account, and then deleted. Your data is kept while your account is open. When you delete your account, it is removed from the app's database at once; a single line without your name, email or figures records that an account was deleted.

• Access: see everything in the app, and download a complete copy any time from My account → Your data → Download my data.
• Correction: change your details on My account and on each record. A verified PAN can't be changed in the app — contact us to correct it.
• Erasure: delete your account and all its data from My account → Your data → Delete my account.
• Nominate: you may nominate another person to exercise these rights if you die or cannot act — contact us to do so.
• Grievance: if you are unhappy with how your data is handled, contact us; if we don't resolve it, you may complain to the Data Protection Board of India.

To use a right, or for any question about your data, write to support@lingsaa.com. Our grievance officer is Priya Raman (grievance@lingsaa.com, +91 98765 43210).

Lingsaa Money is for adults. A family member under 18 may be added to a household’s books by their parent or guardian, who is responsible for that data.

The app keeps your sign-in and a few screen choices (such as whether analytics is shown) in your browser. There are no advertising or tracking cookies.

• Use the app only for your own or your household's money, with data you are entitled to use.
• Keep your password and two-factor device safe; you are responsible for what is done with your login.
• The figures depend on what you import and type in — check them, and read the Disclaimer before you file.
• The app is provided as it is. We work to keep it correct and available but cannot promise it is free of errors or interruptions, and are not liable for a decision made only on its figures.
• We may update these terms and this notice; the date at the top shows when they last changed.
• These terms are governed by the laws of India.

Lingsaa, No. 12, Sample Street, T. Nagar, Chennai – 600017, Tamil Nadu, India — write to support@lingsaa.com.