Privacy Policy

Last updated: 22 September 2026 · Effective: 22 September 2026

Who we are

The Simplify Money application and website are operated by two related companies:

• Turvas Technology Solutions Private Limited (CIN: U62010UP2023PTC191807), owner of the “Simplify Money” brand, operator of the Simplify Money application and platform, and a Government of India recognised start-up (DIPP153513).
• Simplify Money Private Limited (CIN: U66290UW2026PTC253434), a subsidiary of Turvas Technology Solutions Private Limited and an AMFI-registered mutual fund distributor (ARN-363095). Distribution of mutual funds and other financial products sits with this entity.

Both are registered at A-130, A Block, Sector 63, Noida 201301, Uttar Pradesh, India. In this Policy, “Simplify Money”, “we”, “us” and “our” refer to both companies together, which act as joint Data Fiduciaries in respect of your personal data. Turvas Technology Solutions Private Limited is the primary point of contact for all privacy requests and grievances, and a request made to either entity is treated as made to both.

Neither entity is a SEBI Registered Investment Adviser. Nothing in the App is investment advice.

We are committed to keeping your data secure, your private information private, and being transparent about our practices. This Privacy Policy explains how we collect, use, process, disclose and safeguard your information when you use the Simplify Money mobile application, our website and related services (together, the “Platform”).

This Privacy Policy does not apply to third-party websites, applications or services. Our business partners, lending partners, asset management companies, credit information companies, payment gateways, advertisers and sponsors operate under their own privacy policies, which may differ from ours. Please review their policies before interacting with them.

If you do not agree with this Privacy Policy, please do not use the Platform or provide us with your information.

Scope of the Policy

This Privacy Policy applies to the Simplify Money mobile application and website, available within India only, and is published in accordance with:

• The Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it
• Section 43A of the Information Technology Act, 2000 (“IT Act”)
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), to the extent they remain in force
• Rule 3 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
• The Credit Information Companies (Regulation) Act, 2005 and rules and regulations made under it, where credit information is processed
• The Prevention of Money-Laundering Act, 2002 and rules made under it, and SEBI and AMFI requirements applicable to mutual fund distribution
• Reserve Bank of India directions applicable to digital lending, payment aggregators and card data storage, where relevant

Age requirement and children’s data

The Platform is intended only for individuals who are 18 years of age or older and who are competent to contract under the Indian Contract Act, 1872. We do not knowingly collect personal data from children.

If we become aware that we hold personal data of a person below 18, we will delete it and close the account. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

Data We Gather

We collect personal data that you provide to us, data generated by your use of the Platform, and data we receive from third parties with your consent. We collect only what is necessary for the purposes described in this Policy.

1. Identity and contact information

• Mobile number and email address
• Name, date of birth, gender
• Permanent Account Number (PAN), and details retrieved against your PAN
• Aadhaar-based e-KYC details, where you choose to complete KYC through an authorised KYC agency or KRA
• Address, marital status, nominee details, signature and photograph where required for a financial transaction
• Details received from your social login provider (Google, Apple or other supported providers) where you choose to sign in that way. We receive only your name, email address, and provider account identifier — we do not receive your password

2. Onboarding pre-fill

During onboarding you may choose to have certain details pre-filled using your mobile number or your PAN. Where you do so, we retrieve your name, date of birth and related demographic details from authorised verification providers and KYC registration agencies, for the purpose of reducing manual entry and verifying your identity. Pre-fill is optional and you may enter details manually instead.

3. Financial and transaction information

• Bank account details, including account number and IFSC, for investments, redemptions, mandates and refunds
• Payment instrument details, payment method data and billing address. Full card numbers are handled by our PCI-DSS compliant payment gateway partners and are not stored on our servers. Card tokenisation follows Reserve Bank of India requirements
• Mandate and standing instruction details (e-NACH / UPI AutoPay) where you set up a SIP or a recurring subscription
• Income, expense, asset, liability and insurance details you provide or that we derive from data you share
• Details of transactions you carry out through the Platform, including mutual fund purchases, SIPs and redemptions, digital gold purchases, corporate fixed deposit investments, subscription payments and coin purchases

4. Investment and portfolio information

• Uploaded statements: investment statements in PDF or Excel format from depositories, registrars or brokers
• Manual entry: scheme name, investment type, investment date and investment value
• Mutual fund tracking: your mutual fund holdings, transactions and valuations, retrieved from registrars and transfer agents, depositories or consolidated account statement providers with your consent
• Stock holdings: where you link your broking or demat account, we retrieve read-only holdings and transaction information from your broker, depository or an account aggregator. We cannot and do not place, modify or cancel trades in your broking account, and we do not have access to your broker credentials

5. Credit information

Where you request your credit score and credit analysis, and only after you give separate, specific and informed consent:

• We share your mobile number, name, PAN and such other identifiers as the credit information company requires, in order to retrieve your credit information report
• We receive your credit score, account and enquiry history, repayment history and derived analysis from credit information companies registered under the Credit Information Companies (Regulation) Act, 2005
• Your credit information is used only to display your score and analysis to you, and, where you separately apply for a credit product, to process that application. It is retained only as long as permitted under applicable law and is not sold or used for unrelated purposes
• We do not control the accuracy of information held by credit information companies. Disputes about the contents of your credit report must be raised with the relevant credit information company or the lender that reported the information

6. Email (Gmail) integration and statement parsing

With your explicit consent, you may connect your Gmail account so that we can locate and parse financial emails and attachments, including bank statements, credit card statements and investment statements, in order to organise your spending, holdings and account balances and present analytics to you.

Limited use disclosure. Simplify Money’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access only those emails and attachments that are necessary to identify and extract financial transaction information
• We do not read, store or process the contents of emails that are not financial in nature
• We do not use Google user data for advertising, and we do not sell or transfer it, except as necessary to provide or improve the user-facing features you have requested, to comply with applicable law, or as part of a merger or acquisition with prior notice to you
• We do not allow humans to read your Google user data unless you give specific consent, it is necessary for security purposes or to comply with applicable law, or the data is aggregated and de-identified
• You can disconnect your Gmail account at any time from within the App or from your Google account permissions page. On disconnection we stop further access

Where a statement is password-protected, any password you supply is used only for the purpose of opening that document and is not retained after parsing.

7. SMS access

Where the operating system permits and where you give explicit consent, the App may read transactional SMS messages from banks, card issuers and wallets in order to organise your expenses and account balances. We read only messages that are transactional in nature. We do not read, store or transmit personal SMS messages, one-time passwords or messages unrelated to financial transactions.

8. Spend analytics data

Where you use the Spend Analyzer and Spend Analytics features, we process transaction data drawn from the sources above in order to categorise transactions, build spending patterns, and generate filters, views and graphs by month, year and source. Categorisation is automated and may be inaccurate; you may correct it within the App. Categorised and derived data is treated as your personal data and is subject to this Policy.

9. Loan application data

Where you apply for a short-term loan, personal loan, home loan or loan against securities through the Platform, we collect and share with the relevant lender or lending service provider the information required to assess your application, including identity, KYC, income, employment, bank statement and credit information. Simplify Money is not a lender. Lending decisions, disbursal, servicing and recovery are carried out by the regulated lender, whose identity is disclosed to you before you submit an application and whose privacy policy governs the data it holds.

10. Rewards, coins and engagement data

We record coins earned and deducted through in-app activities, coins purchased, coins redeemed against gold purchases or premium offerings, badges earned and milestones achieved, and the in-app actions that trigger them. This data is used to operate the rewards programme and to detect abuse of it.

11. Subscription and billing data

Where you subscribe to a paid plan or purchase coins, we record your plan, subscription status, billing dates, renewal preference, transaction identifiers and payment status. Where payment is made through a mobile app store, the app store operator processes the payment and shares limited transaction confirmation data with us.

12. Technical and usage data

• Device identifiers, device model, operating system and version, app version, language and time zone
• IP address, log data, crash reports and diagnostic data
• Feature usage, screens viewed, session duration and interaction data, collected through analytics tools
• Cookies and similar technologies on our website, including through Google Tag Manager and associated analytics and marketing tags. You can control cookies through your browser settings; disabling them may affect site functionality

13. Biometric data

Where you enable device-level biometric unlock (fingerprint or face), authentication is performed by your device. We receive only a confirmation of success or failure. We do not collect, store or have access to your biometric templates.

How We Use Your Information

We use your personal data for the following purposes:

• To create and administer your account, verify your identity, and complete KYC where required
• To process, execute and record your transactions in mutual funds, digital gold, corporate fixed deposits and other products, and to transmit your instructions to the relevant asset management company, registrar, issuer or service provider
• To set up, modify and cancel SIPs, mandates and standing instructions
• To aggregate, organise and display your financial information, including mutual fund holdings, stock holdings, spending, balances, credit score and net position
• To generate analytics, insights, categorisation, spending patterns and goal tracking on your own data
• To provide your credit score and credit analysis, where you request it
• To process loan enquiries and applications and to transmit them to the lender or lending service provider you select
• To operate paid subscriptions, process payments, collect fees, issue invoices and manage renewals and cancellations
• To operate the coins, rewards, badges and milestones programme
• To provide customer support, respond to queries and resolve disputes
• To detect, prevent and investigate fraud, unauthorised access, errors and prohibited or criminal activity, and to protect the security and integrity of the Platform and its users
• To comply with our obligations under applicable law, including tax, anti-money-laundering, record-keeping and regulatory reporting obligations
• To communicate service messages, transaction confirmations, statements, security alerts and changes to our terms
• To send you offers, product information and marketing communications, where you have not opted out. You may opt out of marketing communications at any time without losing access to the Services
• To improve, test and develop the Platform, using aggregated or de-identified data wherever possible
• For any other purpose disclosed to you at the time of collection and to which you consent

We do not use your financial data, credit information or Google user data to train generative artificial intelligence models for purposes unrelated to the features you have requested.

Disclosure Of Your Information

We share your personal data only as described below, and only to the extent necessary:

• Between our group entities — Turvas Technology Solutions Private Limited and Simplify Money Private Limited, for the operation of the Platform and the distribution of financial products
• Asset management companies, registrars and transfer agents, exchanges and platform providers — to execute and record your mutual fund purchases, SIPs and redemptions, and to retrieve your holdings
• KYC registration agencies, KYC user agencies and authorised verification providers — to verify your PAN, complete KYC and pre-fill onboarding details
• Credit information companies — to retrieve your credit information report, where you request it
• Lenders and lending service providers, including our loan partners — to process loan enquiries and applications you initiate
• Digital gold providers — to execute gold purchases, sales and storage, and to complete PAN verification required for gold transactions
• Corporate fixed deposit issuers and their registrars — to process fixed deposit applications and servicing
• Payment gateways, payment aggregators, banks and NPCI participants — to process payments, mandates, refunds and settlements
• Account aggregators, brokers and depositories — to retrieve holdings and transaction data you have authorised
• Technology service providers — cloud hosting, data storage, analytics, communication (email, SMS, push notification), customer support and fraud detection providers acting on our instructions under written contracts
• Professional advisers and auditors — under duties of confidentiality
• Competent legal, statutory and regulatory authorities — where required by law, court order, or a lawful request, including SEBI, AMFI, the Reserve Bank of India, income tax authorities, the Financial Intelligence Unit and law enforcement agencies
• Acquirers or successors — in the event of a merger, acquisition, restructuring or sale of assets, with notice to you and subject to the acquirer honouring this Policy
• Any other party, with your consent

We do not rent, lease or sell your personal data to third parties. We do not share your data with third parties for their own independent marketing purposes.

Where we share data with processors, they are contractually required to process it only on our instructions, to maintain appropriate security safeguards, and to delete or return it when the engagement ends.

Data Storage, Transfers and Security

Your personal data is stored on servers located in India. Where any service provider processes data outside India, we do so only in accordance with applicable law, including any restrictions notified by the Central Government under the DPDP Act, and under contractual safeguards.

We use industry-standard security technologies and procedures, including encryption in transit and at rest, access controls, logging, and periodic security testing, to protect your data from unauthorised access, use, alteration, destruction or disclosure.

No system is completely secure. We cannot guarantee that unauthorised access, hacking, data loss or a data breach will never occur. You are responsible for keeping your device, your account credentials and your registered mobile number and email secure, and for notifying us immediately if you suspect unauthorised access to your account.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, and will report incidents to CERT-In within the timelines prescribed under applicable directions.

How Long We Retain Your Data

We retain your personal data for as long as necessary for the purposes set out in this Policy, and thereafter only as required by law. In particular:

• Transaction and KYC records relating to mutual funds, gold, fixed deposits and other financial products are retained for the period prescribed under the Prevention of Money-Laundering Act, 2002 and SEBI and AMFI requirements, which is generally not less than eight years from the date of the transaction or the end of the relationship
• Credit information is retained only for the period permitted under the Credit Information Companies (Regulation) Act, 2005 and applicable directions
• Payment and tax records are retained for the periods prescribed under tax and companies legislation
• Account and profile data is retained while your account is active and for a reasonable period afterwards to resolve disputes and enforce our agreements
• Analytics and derived data is retained in aggregated or de-identified form where it no longer needs to be linked to you

When a retention period ends and no legal obligation requires continued retention, we delete or irreversibly de-identify the data.

Your Rights

Subject to applicable law, you have the right to:

• Access a summary of the personal data we process about you and the processing activities undertaken
• Correct, complete, update or erase your personal data
• Withdraw consent at any time, with the same ease with which it was given. Withdrawal does not affect processing carried out before withdrawal, and we may be unable to continue providing certain Services once consent is withdrawn
• Nominate another individual to exercise your rights in the event of your death or incapacity
• Grievance redressal through the channels set out below, before approaching the Data Protection Board of India
• Opt out of marketing communications without affecting your access to the Services
• Port or obtain a copy of your data, where applicable law provides for it

You can review and update much of your information through self-help tools within the App. For anything else, contact us using the details below. We will respond within the timelines prescribed under applicable law.

Deleting your account

You can request deletion of your Simplify Money account at any time:

• From within the App, under Profile → Account → Delete Account
• Or by writing to support@simplifymoney.in from your registered email address

On deletion, we delete or de-identify your profile, spending data, analytics, uploaded statements and linked-account data. We are required to retain certain transaction, KYC, credit and tax records for the statutory periods described above, and those records are retained in restricted form and are not used for any other purpose. Deleting your account does not cancel an active mutual fund investment, SIP mandate, fixed deposit or loan; these must be handled separately with the relevant institution, and the Refund and Cancellation Policy explains how.

Consent and its withdrawal

Consent for optional data sources — Gmail access, SMS access, stock and demat linking, account aggregator consent, and credit information retrieval — is sought separately and can be withdrawn independently at any time from within the App, without affecting the rest of your account.

Amendments To This Policy

We may revise this Privacy Policy from time to time. We will notify you of material changes by email or within the App at least seven days before they take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

Copyright

The contents of the Platform may not be reproduced without permission. If used as part of another publication, the source must be acknowledged. The contents may not be used in any misleading or objectionable context.

Governing Law And Dispute Resolution

This Privacy Policy is governed by the laws of India. Subject to your statutory rights, including your right to approach the Data Protection Board of India, disputes arising from or relating to this Privacy Policy shall be resolved through binding arbitration under the Arbitration and Conciliation Act, 1996, seated in Noida, Uttar Pradesh, India, and the courts at Noida, Uttar Pradesh shall have jurisdiction.

Privacy Questions, Grievance Redressal and Contact

Data Protection Officer / Grievance Officer

• Name: Parag Kapoor
• Turvas Technology Solutions Private Limited
• Address: A-130, A Block, Sector 63, Noida, Uttar Pradesh 201301, India
• Email: support@simplifymoney.in
• Alternate: hello@simplifymoney.in
• Hours: Monday to Friday, 10:00 to 18:00 IST

We will acknowledge your complaint within 24 hours and resolve it within 15 days of receipt, in accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Requests under the DPDP Act will be addressed within the timelines prescribed under that Act.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India. Complaints relating to mutual fund distribution may also be raised with AMFI or through SEBI’s SCORES platform. Complaints relating to a lending partner may be raised with that lender’s grievance officer and thereafter under the Reserve Bank of India’s Integrated Ombudsman Scheme.