Privacy Policy

Last updated: 7 August 2026 · Version 1.0

1) About this Privacy Policy

This Privacy Policy (“Policy”) applies to individuals in India and elsewhere who use GoalPehle’s mobile and web applications or whose information is otherwise collected by us. “Personal information” / “personal data” means data that identifies you or can reasonably be linked to you. This Policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is intended to align with India’s Digital Personal Data Protection Act, 2023 (DPDPA) and rules thereunder, where applicable. Shailforte Pty Limited acts as the data fiduciary for personal data processed for GoalPehle. This Policy should be read together with our Terms of Service.

2) Consent and grounds for processing

We process personal data only for the purposes described in this Policy, on these grounds:

• To provide the service: Processing needed to create and maintain your account, sync the financial data you enter, authenticate you, operate subscriptions, prevent abuse, and deliver features you request. This processing is necessary to provide GoalPehle to you.
• Consent: Where we rely on consent (including accepting this Policy at sign-up), your consent is free, informed, and specific to the purposes described here. You may withdraw consent for consent-based processing at any time by deleting your account or emailing us — without affecting the lawfulness of processing before withdrawal. Some processing may still be required to wind down your account or meet legal duties.
• Legal obligations: Where we must retain or disclose information to comply with applicable law, court orders, or regulatory requirements.

We do not use your personal data for third-party marketing or for our own promotional emails. Optional support contact emails and any attachment you send with a request are used only to investigate and reply to that request.

3) What Information We Collect

We collect only what we need to operate and improve the App:

• Account information: Username, display name, and authentication identifiers when you sign up or sign in.
• Financial data you enter: Values you choose to track — income, expenses, bank names, balances, investments, loans, property, goals, and notes. This information is stored in our secure encrypted database linked to your account and may be cached on your device. You control what you add or remove.
• Profile details: Birth month and year and country — used for projections and India-specific defaults.
• Technical data: App platform, device type, browser user agent, and standard technical logs our servers receive when you use the App (see section 4).
• Diagnostics and crash data: When crash or error reporting is enabled, we may receive diagnostic information such as crash logs, error messages, device/app version details, and a user or account identifier so we can investigate failures and keep the App reliable. We use this for app functionality and quality — not for advertising or cross-app tracking.
• App activity (operational): Limited operational events linked to your account — for example sign-in/sign-out, sync, subscription actions, support or feedback submission, and high-level portfolio actions — so we can operate, secure, and improve the service. We do not use this for advertising.
• Push notification token: On supported devices, if you allow notifications, a device push token so we can deliver account or product notices you enable. You can revoke permission in system settings.
• Payments: Subscription status and payment references from our payment provider — not full card or UPI details.
• Feedback: Optional messages and star ratings you submit.
• Support requests: When you use Get Help / Raise a support query, the contact email you provide, your message, username (if entered), and any optional attachment (for example a screenshot, photo, or document) — used only to investigate and reply to that request. We do not use this email or attachment for marketing.

4) App install unique identifier

The App may create a random unique identifier for this installation and store it on your device. If you sign up, we may associate it with your account to help prevent abuse and enforce account limits described in our Terms of Service. It is not your name, email, or a hardware advertising identifier (such as IDFA). We do not use it for advertising or cross-app tracking. When you delete your account, we remove the association on our servers.

5) How We Use Your Information

• Provide, maintain, and improve the App and its features.
• Sync your net worth data across your phone and laptop.
• Process subscriptions and send important account updates (including push notices you enable).
• Diagnose crashes and errors, measure reliability, and understand operational usage so we can fix issues and improve the product.
• Help prevent abuse, fraud, or security incidents and enforce account limits described in our Terms of Service (see section 4).
• Respond to support requests you submit (including contacting you at the email you provide for that request) and meet legal or regulatory obligations.

6) What We Do Not Collect or Sell

We do not require a phone number, postal address, PAN, Aadhaar, or bank account numbers to use the App. Account sign-up uses a username (not an email login). We may ask for a contact email only when you voluntarily submit Get Help / support or when you contact us directly. We do not sell or rent your personal information to third parties for marketing.

7) How We Share Information

We may share information only in these circumstances:

• Service providers (data processors): Trusted vendors that help us provide authentication, secure hosting, subscription billing, transactional email delivery for support and account notices, crash/error diagnostics, push notification delivery, and public market price information. They process personal data only on our instructions, under contracts that require confidentiality, security, and use limited to operating the App.
• Legal requirements: When required by law, court order, or government authority in India or another applicable jurisdiction.
• Protection: To protect the rights, property, or safety of GoalPehle, our users, or others.

We do not sell your personal data.

8) Data Storage, Security & Cross-Border Processing

When you create an account, the information you enter — including account details, profile data, and financial figures — is stored in our secure encrypted database so you can sign in and access your data across devices. We may also keep a local copy on your device for faster loading and offline use where supported. Support requests and optional attachments are stored in our secure cloud database and private file storage so we can respond to you. We use secure encrypted infrastructure operated by vetted service providers for authentication, database hosting, email delivery, and operating the App. GoalPehle is operated from Australia; if you use the App from India, your data may be processed or stored outside India (including by our cloud and email processors). We transfer and process such data only as needed to provide the App, with contractual and technical safeguards, and subject to applicable Indian law on cross-border transfers. We use encrypted connections (HTTPS), strict access controls, hashed PINs, and secure device storage. No method of transmission or storage is completely secure; please protect your username, password, and recovery phrase.

9) Security incidents

If we become aware of a personal data breach that is likely to put your rights at risk, we will take steps to contain and investigate the incident, notify the Data Protection Board of India and affected individuals as required under the DPDPA and applicable rules, and take reasonable measures to reduce harm. You can report a suspected incident to [email protected].

10) Data Retention

We retain personal information only as long as needed to provide the App, meet legal obligations, or resolve disputes. If your free trial or paid subscription ends and you do not subscribe, your account and associated data are deleted after 7 days. You can export or delete your account at any time from Profile → Privacy & data, or Delete account on the membership paywall if your trial or subscription has ended. Steps are also summarised at https://goalpehle.com/delete-account.html. When your account is deleted, associated server-side records linked to your app install are removed (see section 4), including support request records linked to your account. Support tickets and attachments are kept while needed to resolve your request and for a reasonable period afterward for service quality and dispute handling, then deleted or anonymised. Consent and payment audit records may be kept longer where required by law.

11) Your Rights

Depending on applicable law (including the DPDPA in India), you may have the right to:

• Access and review personal information we hold about you.
• Correct inaccurate information — update details in the App where editable, or email us with the correction.
• Withdraw consent where processing is based on consent.
• Request erasure of your personal information, subject to legal retention requirements.
• Receive a copy of your data (export) from Profile → Privacy & data.
• Nominate another individual to exercise rights on your behalf in certain circumstances — email us with your username, the nominee’s name and contact details, and a clear statement of nomination.

To delete your account: use Profile → Privacy & data while signed in, or Delete account on the membership paywall. For access, correction, withdrawal of consent, nomination, deletion help, or other privacy rights, email [email protected] with your username and the request. We may verify your identity before fulfilling requests. We aim to acknowledge privacy requests within 3 business days and to complete or update you within 30 days, or sooner if required by applicable law.

12) Children’s Privacy

The App is intended for adults 18 years and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal data, contact us and we will delete it.

13) Grievance redressal

If you have questions, concerns, or complaints about this Policy or our data practices, contact our Privacy & Data Protection Officer at [email protected]. Postal correspondence: Shailforte Pty Limited (GoalPehle), privacy correspondence for users in India — written requests via email preferred; postal address available on request at [email protected]. We aim to acknowledge grievances within 3 business days and to resolve them within 30 days, or as otherwise required under applicable Indian law including the DPDPA. If you are not satisfied with our response, you may escalate to the Data Protection Board of India as provided under the DPDPA.

14) Governing Law & Jurisdiction

This Policy is governed by the laws of India. Any dispute arising out of or relating to this Policy or your use of the App shall be subject to the exclusive jurisdiction of the courts in Nagpur, Maharashtra, India.

15) Changes to this Policy

We may update this Policy from time to time. The updated version will be posted in the App and on our website with a revised “Last updated” date. Material changes may require renewed consent. Continued use after notice constitutes acceptance of the updated Policy where permitted by law; where renewed consent is required, we will ask for it in the App.

16) Contact Us

For privacy questions or data-rights requests, email [email protected]. Grievance contact: Privacy & Data Protection Officer.