Privacy policy
A plain-language version of our privacy practices. The legally binding text lives in the appendix below — but this is what we actually do.
What we collect
Your phone number, your name and email (when you give them), your KYC documents (PAN, last 4 of Aadhaar, postal address, selfie), and the transactions you make through the app. That's it.
Where it lives
On servers in India, encrypted at rest with AES-256-GCM. KYC images are stored separately from the account database, and the key is rotated quarterly.
Who we share it with
SafeGold and our payment / KYC providers — only the minimum each needs to do its job. We do not sell your data, ever. We do not advertise to you across the internet.
Your rights under DPDP 2023
You can request a copy of everything we have on you, ask us to correct anything wrong, or ask us to delete your account and all associated data. The button is in the app, the timeline is 30 days.
Cookies and the website
This site uses a single analytics cookie to count visits. No cross-site tracking, no third-party tags, no advertising pixels.
Changes
Material changes are notified via email and in the app at least 14 days before they take effect. Trivial corrections (typos, contact details) are made without notice.
Grievances
Our data protection officer is reachable at privacy@goldplus.app. Statutory grievance officer details are published in the app footer.