Contents
1Who we are
Car Loan EMI ("the app") is developed and operated by Mitesh Soni, an individual developer based in India ("we", "us"). Under India's Digital Personal Data Protection Act, 2023 and the rules made under it (the "DPDP Act"), we are the Data Fiduciary for the personal data described here.
This policy also covers this website, carloanemi.040484.xyz. It should be read together with our Terms of Use.
2Summary
| Data | When | Where it goes |
|---|---|---|
| Loan inputs, saved plans, My Loan, your car photo | Always | Stays on your device, unless you include a plan in a request (section 4) |
| Mobile number; name and city (optional); request details; consent choices | Only if you send a request in the app or message us on WhatsApp | Our server |
| App usage events, with amounts as ranges | When analytics is switched on | An analytics provider |
| IP address, device type, app version | When the app downloads car prices, rates and images | Our server's access logs |
We do not sell personal data, and we do not use it for third-party advertising.
3Data that stays on your device
The following is stored on your device, in the app's private storage and its widget. It is not sent to us unless you include it in a request (see section 4):
- what you enter in the calculators, such as car price, down payment, interest rate, tenure, income and prepayments
- plans you save and compare
- details of a loan you track in My Loan, including any photo of your car you pick from your photo library
- preferences, such as your state and reminder settings
PDF reports are created on your device. They go somewhere only if you share them yourself. You are responsible for anything you share outside the app. Deleting the app removes this data from your device. We cannot recover it.
5Usage analytics
The app may record usage events, such as "opened the On-road screen" or "saved a plan", to help us improve it.
- Amounts are sent as ranges, for example "₹5–10 lakh", not exact figures.
- Events don't include your name or phone number.
- If you send a request, later events may be tagged with that request's app-install identifier and type. This helps us understand which features lead to requests.
- Withdrawing consent in the app resets the analytics identifier.
We will name the analytics provider in this section before we switch analytics on in a public release.
6Data our server receives
The app downloads car prices, bank rates, tax rules, a festive calendar and car photos from our server. Like most web servers, it logs technical details of each request, such as IP address, time, the file requested and the user-agent. We use these logs for security, preventing abuse and fixing problems, and keep them only for a limited time.
This website doesn't set cookies or use analytics.
7Who we share data with
- Partner banks, NBFCs or car dealers. If you ask for loan offers, a balance-transfer offer or a price alert and give contact consent, we may share your number, name, city and request details with one or more partners for that purpose. The partner then handles your data under its own privacy policy and is responsible for it.
- Service providers who host or process data for us: our server host, our database host (Neon) and, if used, a WhatsApp Business provider and an analytics provider. They may store data outside India.
- Authorities or others where the law requires it, or where needed to protect our rights, investigate fraud or abuse, or respond to legal claims.
- A successor, if the app is transferred to someone else. This policy, or one at least as protective, will continue to apply to your data.
8How long we keep it
We keep request data until it's no longer needed for the purpose you consented to, or until you withdraw consent, whichever comes first. We may keep some data for longer where it's needed:
- to comply with the law
- to resolve disputes or defend legal claims
- to prevent fraud or abuse
We keep a minimal record of each deletion, with no phone number. Data that has been made anonymous or aggregated so it no longer identifies you is not personal data, and we may keep it.
9Your rights
Under the DPDP Act, you can:
- ask for a summary of your personal data we hold
- ask us to correct or update it
- withdraw consent and have it erased
- raise a grievance with us
- nominate another person to exercise these rights for you
To withdraw consent and delete your data, open More → Privacy → Withdraw consent & delete my details in the app. This deletes the requests sent from that app installation and stops further contact from us.
For other requests, contact us using the details in section 16. To protect you, we will need to confirm the number is yours before we act, for example by messaging it. We may decline requests we can't verify, requests that are clearly unfounded or excessive, or requests the law doesn't require us to fulfil.
Withdrawing consent doesn't affect anything we did before you withdrew it. It also doesn't cover data already shared with a partner, which you can ask that partner to delete. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
10Device permissions
| Permission | Why | Required? |
|---|---|---|
| Photos (picker) | To add a picture of your car in My Loan. The app receives only the photo you pick. | No |
| Notifications | Reminders you turn on, such as EMI due dates and festive offers. They're scheduled on your device. | No |
| Internet | To download prices, rates and photos, and to send requests you choose to make. | Yes |
The app doesn't access your location, contacts, camera or microphone.
11Ads and tracking
The current version doesn't show third-party ads or track you across other companies' apps or websites. The app may show its own promotional cards, such as offers to get your plan on WhatsApp.
If we add an ad network, we'll update this policy before that release. Where required, your device will ask your permission before any tracking.
12Security
We take reasonable steps to protect personal data. These include HTTPS for all traffic, signed and rate-limited requests, encrypted on-device storage for unsent requests, and restricted access to stored data. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If a breach affects your personal data, we'll notify you and the Data Protection Board as the law requires.
13Third-party services
WhatsApp, the App Store, Google Play, partner websites and other services you open from the app have their own terms and privacy policies. We aren't responsible for how they handle your data.
14Children
The app is meant for adults. You must be 18 or older to send a request, and we don't knowingly collect personal data from anyone under 18. If we learn that we have, we'll delete it.
15Changes to this policy
We may update this policy from time to time. We'll post the new version here and update the date at the top. Where the law requires it, we'll ask for your consent again before using data you've already shared for a new purpose.
16Contact & grievance officer
Grievance Officer: Mitesh Soni
Email: helpwithapps@mailbox.org