Plain-English summary: Krelvax is a local-first personal finance app and is free to use. Your financial data lives on your device. Google Drive backup is an optional feature you control. Krelvax is supported by a single banner advert supplied by Google AdMob; depending on the consent you give, this advert may be personalised, otherwise it is non-personalised. Adverts are never targeted using your financial data. We also use Google Analytics for Firebase to understand app usage (no financial data included). We do not sell your data or access your bank accounts.
Krelvax ("we", "us", "our") is a personal finance application developed and operated by Krelvax (contact: privacy@krelvax.com). For the purposes of applicable data protection laws, Krelvax is the data controller (or data fiduciary, as applicable) for personal data processed through the Krelvax mobile application and this website.
This Privacy Policy applies to:
It does not apply to third-party services linked from within the App. Those services have their own privacy policies.
Krelvax operates in India only. This Policy is drafted primarily to comply with India's Digital Personal Data Protection Act (DPDPA) 2023 and other applicable Indian law.
| Category | Examples | Purpose |
|---|---|---|
| Transaction records | Amount, date, category, notes, transaction type (income/expense/transfer) | Core app function — expense tracking |
| Account records | Account name, balance, account type (savings, current, wallet, etc.) | Net-worth and balance tracking |
| Budget records | Category, spending limit, period | Budget monitoring feature |
| Financial goals | Goal name, target amount, current progress, target date | Goals feature |
| Loan records | Lender/borrower name, principal, interest rate, EMI amount, repayment schedule | Loan tracking feature |
| Subscription records | Service name, amount, billing frequency, renewal date | Subscription tracking feature |
| Categories | Custom category names, icons, colors | User-defined categorisation |
| App preferences | Currency, language, theme, text size, daily spending limit | Personalisation; stored locally |
Note: Krelvax does not connect to your bank or financial institution. All financial data is entered manually by you.
| Data | Details | Purpose |
|---|---|---|
| Advertising data | To serve the single banner advert, the Google AdMob SDK collects device and usage information such as a device advertising identifier, coarse approximate location (IP-derived, not GPS), and ad-interaction events. Where you consent (via Google's consent screen) adverts may be personalised; otherwise they are non-personalised. Your financial data is never used to target adverts. | Display advertising; frequency capping; fraud prevention |
| Analytics data | Google Analytics for Firebase collects pseudonymous app-usage events (app opens, screens viewed, features used) and an app-instance identifier. No financial data, amounts, merchant names, or note text is ever included. | Retention measurement; product improvement |
| Feature | Data Collected | Condition |
|---|---|---|
| Google Drive Backup | Your Google account email address (displayed to you) and a backup copy of your local database file. | Only if you connect Google Drive in Settings |
| Voice Input for Transactions | Voice audio processed on-device or via the platform's speech recognition service. Krelvax does not record or transmit raw audio. | Only when you tap the voice button |
| Currency Exchange Rates | The currency code you use as your base currency (e.g., "INR", "USD") is sent to the ExchangeRate-API service. No personal data is included. | When the multi-currency feature is used |
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide core app functionality (transaction tracking, budgets, goals, loans, subscriptions) | All data you enter | Performance of contract / Consent (India DPDPA) |
| Store and display your data across app sessions | All app data | Performance of contract / Consent |
| Optional Google Drive backup | Database file, Google email | Consent (opt-in) |
| Display advertising | Device advertising identifier and ad-interaction data, used by Google AdMob to serve a single banner (personalised or non-personalised per your consent) | Consent / Legitimate interest |
| Product analytics | Pseudonymous usage events via Google Analytics for Firebase | Consent / Legitimate interest |
| Currency conversion display | Base currency code | Legitimate interest / Contract |
| Enforce app lock / biometric security | Locally stored lock preference (no biometric data) | Legitimate interest (security) |
| Respond to support, legal, or compliance requests | Data you share in your request | Legal obligation / Legitimate interest |
| Improve the App (aggregate, non-identifying analytics) | None currently collected beyond crash reports if enabled via the platform's default SDK | Legitimate interest |
We never use your financial data for advertising or analytics, and we do not sell your personal data. Advertising is served by Google AdMob; whether adverts are personalised is governed by the choices you make on the consent screen (see Sections 6 and 6A).
All your financial data is stored locally on your device in a SQLite database and never leaves your device. The App is fully functional without an internet connection. Krelvax has no cloud sync and no user accounts — your financial records are never uploaded to our servers.
If you consent to analytics (see Section 6A), pseudonymous app-usage events and crash reports are sent to a single Firebase project. This contains no financial data — no amounts, merchants, notes, or records. If you decline analytics, no such data is collected.
| Project | Server Location | Contents |
|---|---|---|
| krelvax-in | Google Cloud — asia-south1 (Mumbai, India) | Pseudonymous usage & crash diagnostics only |
If you connect Google Drive, your database backup file is stored in your own Google Drive account under a folder named "Krelvax Backups". Krelvax only requests the drive.file scope, meaning we can only access files that Krelvax itself created — not your other Google Drive files.
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Crashlytics | Google LLC | Crash diagnostics (opt-in, no financial data) | policies.google.com/privacy |
| Google Drive API | Google LLC | Optional backup storage in your own Drive | policies.google.com/privacy |
| Google AdMob + User Messaging Platform | Google LLC | Single banner advert and advertising consent (personalised per consent) | policies.google.com/technologies/ads |
| Google Analytics for Firebase | Google LLC | Pseudonymous app-usage analytics (no financial data) | policies.google.com/privacy |
| ExchangeRate-API | ExchangeRate-API Ltd | Live currency conversion rates (base currency code only, no personal data) | exchangerate-api.com/privacy |
All third-party services are bound by their own privacy policies. Krelvax has no cloud sync, so your financial records are never transmitted to our servers. When Google Drive backup is not connected, no data is transmitted to Google Drive. If you decline analytics, no usage or crash diagnostics are sent. The AdMob advert requests no financial data.
Krelvax is supported by a single banner advert supplied by Google AdMob. On first launch — and wherever required by applicable law — Google's User Messaging Platform (UMP) presents a consent screen that lets you choose whether adverts are personalised. If you consent, AdMob may use your device advertising identifier and ad-interaction history to personalise adverts; if you decline, or where consent is required and not given, adverts are non-personalised. To serve, cap, measure, and protect adverts against fraud, the AdMob SDK processes a device advertising identifier, IP-derived coarse location, and ad-interaction events as an independent controller under Google's own privacy policy (policies.google.com/technologies/ads).
We do not share your financial records, account balances, or any data you enter into Krelvax with AdMob or any advertiser. You can reset or delete your advertising identifier in your device settings (Android: Settings → Google → Ads), and you can change your advertising consent at any time from the in-app privacy settings.
We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
| Data Type | Retention Period |
|---|---|
| Local app data (SQLite) | Until you delete the app or manually delete records within the app |
| Google Drive backup files | Until you manually delete them from your Google Drive or disconnect Google Drive in the App |
| Analytics data | Google Analytics for Firebase retains pseudonymous event data per Google's default retention settings; it contains no financial data and is not linked to your identity. |
| Support correspondence | 3 years from last contact, unless a longer period is required by law |
When you use the in-app Delete Data function, your local SQLite database is permanently wiped from the device. Because Krelvax stores no financial data on our servers, there is nothing else to delete. This action cannot be undone.
We implement the following technical and organisational measures to protect your data:
drive.file scope — accessible only to you and limited to files Krelvax created.No method of data transmission or storage is 100% secure. If you discover a security vulnerability, please contact us at security@krelvax.com.
To exercise any of the rights listed below, contact us at privacy@krelvax.com or use the in-app Settings > Delete Local Data / Export Data functions where available. We will respond within the timeframe required by your applicable law, and in any event within 30 days.
DPDPA 2023
In accordance with the Digital Personal Data Protection Act 2023, you have the right to: access a summary of personal data processed and information about processing activities; correct inaccurate or outdated personal data; erase your personal data where the purpose for which it was collected is no longer being served; withdraw consent at any time (withdrawal does not affect processing already done); nominate a person to exercise your rights on your death or incapacity; and raise a grievance with our Grievance Officer (see Section 14) who will respond within 30 days. If your grievance is not resolved, you may escalate to the Data Protection Board of India.
A consent notice is displayed in Hindi and English on first launch. All data is stored in asia-south1 (Mumbai).
Krelvax operates in India only and is not currently offered as a service in any other country. If you access the App from outside India, regardless of your location you still have the right to: know what personal data we hold about you; correct inaccurate data; request deletion of your data; and withdraw consent for optional features. Use the in-app Delete Local Data function or email privacy@krelvax.com, and we will honour reasonable requests on the same basis as for Indian users.
Krelvax is intended for users aged 18 and over (see Section 3, Eligibility, of our Terms & Conditions). We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at privacy@krelvax.com and we will delete such data promptly.
All optional cloud data is processed and stored in asia-south1 (Mumbai, India), in compliance with DPDPA data-localisation expectations for Indian users. Firebase, Google AdMob, and Google Analytics processing are covered by Google's Data Processing Terms, incorporating Standard Contractual Clauses where applicable.
We do not transfer your financial data outside this Firebase project without your explicit consent.
We may update this Privacy Policy from time to time. When we make material changes, we will:
We encourage you to review this Policy periodically. Your continued use of the App after the effective date of changes constitutes acceptance of the updated Policy, to the extent permitted by applicable law.
Email: privacy@krelvax.com
Response time: Within 30 days (sooner where required by law)
In accordance with the Digital Personal Data Protection Act 2023, the following officer is designated to handle data-related grievances from Indian users:
Grievance Officer: Krelvax Privacy Team
Email: grievance@krelvax.com
Response time: Within 30 days of receiving your complaint
If your grievance is not resolved to your satisfaction within 30 days, you may escalate it to the Data Protection Board of India.
You may delete all your data at any time:
Email: security@krelvax.com