At Fettle, privacy is not a setting—it is the foundation of our product. We believe everyday financial tracking should be calm, transparent, and strictly in your control. This policy explains what information we collect, how it is processed, and how you retain complete ownership of your data.
1. Principles We Stand By
• No Hidden Monetization: We do not sell, rent, or trade your personal or financial data to advertisers, brokers, or data aggregators.
• Explicit Consent: Features like mailbox connection, bank data access, and SMS parsing operate strictly with your explicit consent and can be disconnected at any time.
• One for All: Every user receives the exact same high privacy and security standards—no paywalls or tiered protections.
2. Information We Collect
• Account Details: When you register, we collect your email address and a salted, securely hashed password. Verification links and recovery codes are single-use and time-bounded.
• Optional Profile & Shared Groups: You can save a display name and addresses, and add names to shared expense groups. If you choose a contact using Android's contact picker, the selected name is added only when you save the group. Fettle does not upload your whole address book; the group form does not submit the selected contact's phone number.
• Financial Records & Tasks: Any manual records, expenses, group splits, bills, or refunds you add to your workspace.
• Optional Connected Mailbox Data: If you explicitly choose to connect Gmail, we request read-only access (gmail.readonly) to identify receipts, statements, bills, and booking confirmations. By default, scanning starts at the beginning of the connection month, followed by new mail. Older periods require an explicit wider scan. Selected financial content and attachments are processed by Fettle’s dedicated Azure AI service and stored in Azure. Fettle does not send, alter, or delete your source emails. Other mailbox providers remain upcoming unless enabled for your account.
• Bank SMS & Alerts: Messages pasted into Connections can be previewed on your device. Financial transactions are reviewed through Money imports rather than automatically becoming bills or refunds. Messages explicitly submitted in Money → Imports & messages are processed by Fettle’s Azure AI service for review. On Android, you can separately choose opt-in capture of new financial notifications from selected supported SMS/payment apps. Android notification access is broad; Fettle filters chosen sources and excludes security codes and unrelated content. This does not read SMS history or iPhone SMS. The identifiers of the supported apps you select are stored with your capture permission, and each submitted observation identifies its source app. Fettle does not upload an inventory of all installed apps. Selected candidates use a bounded, Android Keystore-encrypted device queue and are uploaded to Fettle for deterministic review observations stored in Azure; unsupported formats remain for explicit sharing. Queue entries expire after 24 hours and are purged on the next native execution. Capture can be disabled and stops on sign-out, permission withdrawal or grant expiry. Legacy unencrypted queues are purged on upgrade; capture storage is excluded from backup.
• Optional Voice Input: Microphone access is optional. Tapping the mic uses Android's configured speech-recognition service, which may transmit audio to its provider for recognition under that provider's settings and privacy practices. Fettle does not upload an audio file from this recognizer to its Azure service or store a recording on its server. Recognised text is used to respond to your request in the app. Foreground “Hey Fettle” listening requires a compatible on-device speech model and an explicit listening session; it is not an always-on background microphone. You can stop listening or withdraw microphone permission in Android settings.
• Optional Phone Alerts: Android notification permission alone does not register your phone for connected-source alerts. When you enable connected reminders, Fettle stores a messaging token, device platform and notification preferences so Firebase Cloud Messaging can deliver alerts. Email-import alerts and promotional campaign alerts have separate opt-in choices. Financial reminders and import alerts use generic lock-screen text without amounts, merchants or mailbox addresses; campaign alerts contain their public message. You can remove the registered device or pause reminders from Account → Reminders, and manage import alerts from the bell → Notification settings. Removing a device stops future sends to that registration; an already delivered notification may remain on your phone.
• Optional Account Aggregator Data: Setu bank connectivity is upcoming and is not required to use manual records or statement imports. If activated later, it will require separate provider onboarding and your explicit consent.
3. Google API Limited Use Disclosure
Fettle's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
1. We only use Google user data to provide user-facing features that are prominent in the Fettle application (namely, automatic identification of bills, refunds, and purchase receipts).
2. We do not transfer Google user data to third parties unless necessary to provide or improve these user-facing features, comply with applicable law, or as part of a merger/acquisition.
3. We never use or transfer Google user data for serving advertisements, retargeting, or personalized advertising.
4. We never allow humans to read Google user data unless you have given explicit consent for specific emails (e.g. for customer support), it is required for security investigations, or it is required to comply with applicable laws.
5. These restrictions apply to raw Google user data and to information derived from it, including aggregated data. Fettle does not use this data for lending or creditworthiness decisions, or to develop, improve, or train general-purpose AI or machine-learning models. Selected content is submitted to our configured Azure AI service for financial extraction, not model training. Microsoft may process and retain content for service operation and abuse monitoring under its Azure AI data privacy terms; Fettle does not claim zero provider retention.
6. Connected Gmail processing can access message identifiers, sender and subject headers, received times, selected message bodies and supported financial attachments. Saved transactions, categories, deadlines and planning suggestions are derived data. These are used for your Fettle workspace and its requested features, subject to the same Limited Use restrictions. Mailbox credentials are used only to maintain your authorized connection and are encrypted at rest.
4. Data Retention and Deletion Rights
• Full Control to Disconnect: You can disconnect your mailbox or bank connections anytime from the Connections or Account screen. Disconnection stops new processing for that connection and queues external provider token revocation. The panel reports any outstanding revocation work; disconnecting does not delete emails held by the provider.
• Export Your Data: You can export a full copy of your connected data in JSON format at any time from the Account > Your data & privacy screen.
• Request Data Erasure: You can submit an irreversible erasure request from the app (“Request connected-data erasure”). Erasure queues removal of the selected Fettle records and provider token revocation. Completion and any outstanding provider actions are reported by the receipt. Backups expire under their retention schedule; source records held by external providers are not deleted. A private cryptographic receipt is provided so you can verify erasure completion.
5. Data Security
All data in transit is encrypted using modern TLS (HTTPS). Sensitive tokens and OAuth refresh credentials are encrypted at rest using industry-standard AES-256 GCM encryption. Multi-tenant database tables enforce strict tenant isolation. For technical details on our infrastructure, see our dedicated Security & Data Protection page.
6. Grievance Redressal and Contact
If you have questions, feedback, or grievance requests regarding your personal data under the Digital Personal Data Protection Act (DPDP), you can reach us at:
Email: support@fettle.site