DRAFTThis page is a draft for review and is not final.
Privacy policy
Last updated 28 October 2026
Hey Munim holds your household’s bills, receipts and other money records. We keep what we collect to the minimum the app needs. This page explains what that is, where it lives, who helps us process it, and how you can have it deleted.
Who we are
Hey Munim is run by Takshvi Creations, Delhi, India (“we”, “us”). We decide why and how your personal data is used, which makes us the data fiduciary under India’s Digital Personal Data Protection Act, 2023.
Grievance contact: Varun, Takshvi Creations,support@heymunim.com.
What we collect
What you give us
- Account details: your email address and the name you enter. If you sign in with Google or Apple, we receive what they share for sign-in.
- Household records: the expenses, income, bills, subscriptions and categories you or the people in your household add, with the amounts, dates, payees, payment methods and notes you type.
- Documents and photos: receipts, bills and other files you scan or upload.
- Household members: the people you add to your household and the role you give them.
- Your messages to us: anything you send to support@heymunim.com.
What we collect automatically
- Usage events: a short list of product events, such as “document uploaded”, with a few technical properties (app version, platform, and similar). They never contain amounts, payee names, notes, document text, file names, account or policy numbers, or your email. They are tied to a random account ID, not your name.
- Error reports: when the app or our server fails, we receive the technical details of the error (what failed and where). They don’t include your records, notes or documents.
- Records of changes: to keep your household’s records trustworthy, we log who changed what and when.
- Device token for reminders: if you turn on reminders, a push notification token for your phone.
What we don’t collect
We never ask for bank passwords, OTPs, card numbers or PINs, and the app refuses to save what looks like a card number. We don’t connect to your bank and don’t read your SMS. The app doesn’t use advertising trackers or sell data. Voice entry, when it arrives, turns speech into text on your phone: audio never leaves the device.
How we use it
- To run the app: show your records, totals and upcoming payments, and keep them in sync for your household.
- To read receipts and documents with AI when you ask us to (see below).
- To send you sign-in codes by email and, if you turn them on, reminders.
- To keep the service secure, fix errors and understand which features are used.
- To reply to you when you contact us.
AI reading and your consent
When you scan a receipt or upload a document for reading, we send that photo or file toAnthropic, the company that makes Claude, to be read. It is processed outside India. Anthropic doesn’t use it to train its AI. We send only what is needed for the reading, never another household’s data or other members’ contact details.
The app asks for your consent before the first reading, and you can turn it off at any time in Profile. AI only suggests: nothing is saved until you tap Save. Totals and dates in the app are calculated from your saved records, not by the AI.
Who processes your data for us
| Service | What it does | Where |
|---|---|---|
| Supabase | Sign-in and the database that holds your records | Mumbai, India |
| Amazon Web Services (S3) | Encrypted storage for your receipts and documents | Mumbai, India |
| Amazon Web Services (SES) | Sends sign-in code emails | Mumbai, India |
| Anthropic | Reads the images and text sent to it for reading, only when you ask | Outside India |
| Sentry | Error reports, with no amounts or names | European Union |
| PostHog | Product usage events, with no amounts or names | European Union |
| Expo, Google and Apple | Deliver push notifications, if you turn them on | Outside India |
| Cloudflare | Hosts this website and forwards email sent to support@heymunim.com | Global network |
| Google Cloud Run | Runs the app’s server (api.heymunim.com) | Mumbai, India |
| Google and Apple | Sign-in, only if you choose “Continue with Google” or “Continue with Apple” | Outside India |
These providers act on our instructions and only for the purpose listed. We don’t sell your data or share it for advertising.
Who can see your records
Only the people in your household, each with the role you gave them (owner, member or viewer). Every request is checked against your household membership, so other households can’t see your records. We use your records only to run and fix the service, never for advertising.
This website
heymunim.com sets no cookies and has no analytics or advertising scripts. Cloudflare, which serves the site, may keep standard request logs for security and reliability. If you email us from the early-access form, the email is sent from your own mail app, so we only receive what you send.
How long we keep it
- Your records and documents stay until you delete them or delete your account.
- When you delete a document, its file is removed from storage, and any remaining copy is cleared within 30 days.
- The raw result of an AI reading is kept for 30 days, then deleted.
- Copies in backups and file storage are removed within 30 days of account deletion.
Delete your data
You can delete any record or document in the app. To delete your whole account and everything in it, see how to delete your account. Once you confirm, deletion is immediate, with no waiting period, and copies in backups and file storage are removed within 30 days. If your household has other members, you first hand ownership to another member or remove the members; the household’s shared records then stay with the remaining members and your personal account details are deleted. While you are the only member, deleting your account deletes the household and everything in it. If you can’t open the app, emailsupport@heymunim.com.
Your rights
Under the DPDP Act, 2023, you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct or complete it (you can also edit most of it in the app);
- ask us to erase it;
- withdraw a consent you gave, such as AI reading, at any time;
- nominate someone to exercise your rights if you die or can’t act for yourself; and
- complain to us, and, if we don’t resolve it, to the Data Protection Board of India.
To use any of these, email support@heymunim.com. We may need to confirm it’s you first.
Security
Files are encrypted in storage and reached only through short-lived links after we check your household membership. The app on your phone never reads the database directly: everything goes through our server, which checks your household membership. Sign-in tokens on your phone are kept in its secure storage. No system is perfectly secure, so please keep your sign-in safe and tell us at once if you think someone else has access.
Age
Hey Munim is for people aged 18 and over. We don’t knowingly collect data from children.
Changes to this policy
If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
Contact
Takshvi Creations, Delhi, India ·support@heymunim.com