Privacy Policy – PaymentSathi

PaymentSathi is operated by:

For the purposes of applicable law, including the Digital Personal Data Protection Act, 2023 (India), we act as the Data Fiduciary.

a. Information You Provide

• Name
• Mobile Number
• Email Address (only if you contact support)

b. Automatically Collected Information

• Device information (device type, OS version)
• App usage and interaction data (such as feature usage, app events, and general activity for analytics purposes)
• IP address (for security and analytics purposes)
• Advertising ID (collected by Google AdMob for ad serving and measurement)

c. Payment Notification Data (Sensitive Information Handling)

PaymentSathi uses the device's Notification Listener permission to access and process payment-related notifications (such as UPI transaction alerts) received from supported apps.

This access is strictly limited to enabling core application functionality, including displaying payment alerts and maintaining a transaction history within the app.

Data Handling and Privacy:

• All notification data is processed locally on your device only
• This data is never transmitted to our servers
• We do not store, collect, or access this data remotely
• We do not share or sell this data to any third party
• We do not access or collect any sensitive financial credentials, such as UPI PINs, passwords, or bank login information

User Control:

• Users may enable or disable notification access at any time via device settings
• Once permission is revoked, the app immediately stops accessing notification data

d. Information Collected via Truecaller Login

PaymentSathi offers an optional login method via Truecaller. If you choose to sign in using Truecaller, we receive the following information as shared by Truecaller:

• Your name (as registered on Truecaller)
• Your mobile number (verified by Truecaller)

This information is used solely for the purpose of creating and authenticating your PaymentSathi account. We do not receive your Truecaller profile photo, email, or any other profile data beyond what is listed above.

Your use of Truecaller login is also governed by Truecaller's Privacy Policy.

We process data solely for the following purposes:

• To provide and operate core app functionality
• To detect and display payment notifications in real-time
• To maintain a local transaction history on the device
• To authenticate your identity via Truecaller login (if you choose to use it)
• To respond to user queries and support requests
• To improve app performance and user experience
• To analyze app usage through anonymized analytics
• To display advertisements via Google AdMob
• To comply with legal obligations

Legal Basis: Your consent.

• All payment notification data is stored locally on your device only
• We do not store payment data on any server
• Personal data is retained only as long as necessary for the purposes stated

You may delete your data at any time by:

• Clearing app data, or
• Uninstalling the app

We do not sell your personal data.

We may share limited personal data only in the following situations:

• Firebase Analytics – We use Firebase Analytics for crash reporting and app usage analytics. These services may collect anonymized, non-sensitive usage data under their own privacy policies.
• Google AdMob – We use Google AdMob to display advertisements within the app. AdMob may collect device identifiers (such as Android Advertising ID), IP address, and usage data to serve personalized or non-personalized ads. This data is governed by Google's Privacy Policy. You may opt out of personalized advertising by adjusting your device settings: Settings → Google → Ads → Opt out of Ads Personalization.
• Truecaller – If you use Truecaller for login, your name and mobile number are shared with us by Truecaller as described in Section 2d. We do not share your data back to Truecaller beyond what is required for the authentication handshake.
• To comply with legal obligations or lawful government requests
• To detect, prevent, or address fraud and security issues
• During a business transfer (e.g., merger, acquisition, or asset sale)

Payment notification data is never shared under any circumstances.

PaymentSathi is not affiliated with, endorsed by, or associated with any bank, UPI service provider, or financial institution.

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Withdraw consent at any time

To exercise your rights, contact us at:
📧 support@schoolship.in

The app may request the following permissions:

• Notification Access → To read and process UPI transaction notifications
• Internet Access → For app updates, analytics, ad serving, and support services
• Phone State / Truecaller SDK → To enable optional one-tap login via Truecaller (only requested if you choose Truecaller login)

Permissions are used strictly for core functionality.

The app does not perform continuous background tracking or monitoring beyond processing relevant payment notifications.

PaymentSathi displays advertisements served by Google AdMob, a third-party advertising service provided by Google LLC.

AdMob may use your device's Advertising ID and other non-personal information to serve ads that are relevant to you. The types of ads shown may include banner ads and interstitial ads within the app.

Opting out of personalized ads:

• On Android: Go to Settings → Google → Ads → Opt out of Ads Personalization
• Alternatively, you may reset your Advertising ID from the same menu

AdMob's data practices are governed by Google's Privacy Policy.

We implement reasonable security practices, including:

• Secure application design
• Minimal data collection
• Local storage of sensitive payment data
• Encryption where applicable

However, no method of transmission or storage is 100% secure.

This app is not intended for individuals under the age of 18.

We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time.

Users will be notified via the app or other appropriate means.

If you have any concerns regarding your data, you may contact:

We will address your concerns within a reasonable timeframe.