Privacy Policy

1 Who We Are

JebSave ("we", "our", "us") is a subscription tracking application developed and operated by JebSave ("the Company"). We are a product designed specifically for Indian users to help track, manage, and optimize recurring subscription payments.

Our registered contact for privacy matters is accessible at: privacy@jebsave.in

By using the JebSave mobile application (available on Android and iOS), you agree to the collection and use of information in accordance with this Privacy Policy.

2 Information We Collect

We collect information in the following categories:

2.1 Information You Provide to Us

• Mobile Number: Your Indian mobile number (+91) for account creation and OTP-based authentication.
• Profile Information: Optional display name and preferences you set within the app.
• Manually Added Subscriptions: Any subscription details you manually enter into the app.
• Feedback & Support: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• SMS Transaction Data: Financial transaction SMS messages from banks and payment apps (see Section 4 for full disclosure).
• Device Information: Device model, operating system version, unique device identifiers, and mobile network information.
• App Usage Data: Features used, screens visited, session duration, and interaction patterns within the app.
• Crash Reports: Technical error reports to help us fix bugs and improve app stability.

2.3 Information We Do NOT Collect

• Net banking credentials, UPI PINs, or bank account passwords
• Credit or debit card numbers
• Personal conversations, photos, or contacts
• Location data (we do not request location permission)
• Non-financial personal SMS messages

3 How We Use Your Information

We use the collected information for the following purposes:

• Subscription Detection: Identifying recurring payments and subscriptions from your transaction SMS.
• Renewal Alerts: Sending you timely notifications before subscriptions renew.
• Waste Detection: Identifying subscriptions you haven't used in 30+ days.
• Discipline Score: Calculating your personal financial tracking score.
• Smart Insights: Generating AI-based insights about your spending patterns.
• Account Management: Creating and managing your JebSave account.
• Customer Support: Responding to your queries and resolving issues.
• App Improvement: Analyzing usage patterns to improve features and performance.
• Legal Compliance: Meeting obligations under Indian law including the DPDP Act 2023.

4 SMS Data — Special Disclosure

JebSave's core feature relies on reading SMS messages from your device. This section provides complete transparency about how we handle SMS data.

4.1 What We Read

We request the READ_SMS permission on Android devices. This permission allows JebSave to scan your SMS inbox for transaction notification messages from:

• Indian banks (SBI, HDFC, ICICI, Axis, Kotak, PNB, Bank of Baroda, and others)
• UPI and payment apps (PhonePe, Google Pay, Paytm, Amazon Pay, BHIM)
• Credit card statement alerts and payment confirmations

4.2 How We Filter SMS

Our on-device filtering algorithm identifies financial SMS using keywords like "debited", "charged", "subscription", "renewed", "auto-pay", "recurring" and sender IDs from known Indian financial institutions. Only messages matching these patterns are processed. Personal messages (from contacts or personal numbers) are never read or stored.

4.3 What Data is Extracted

From financial SMS messages, we extract only:

• Merchant/service name (e.g., "Netflix", "Spotify")
• Transaction amount (e.g., ₹649)
• Transaction date
• Payment method (bank/UPI app name)

4.4 Raw SMS Content

4.5 Google Play Policy Compliance

Our use of SMS permissions complies with Google Play's Sensitive App Permissions policy. We declare the SMS permission with a clear user-visible rationale during onboarding, and the primary purpose of SMS access is subscription detection as described in this policy. We do not use SMS data for any purpose beyond subscription identification and tracking.

5 Data Sharing & Third Parties

We do not sell your personal data. We share limited information with trusted third parties only as necessary to operate our service:

• Cloud Infrastructure: Our servers and databases are hosted on secure cloud infrastructure with data residency in India.
• Analytics: Anonymized, aggregated app usage data (no personal identifiers) may be processed by analytics tools to improve the app experience.
• Push Notifications: We use Firebase Cloud Messaging (FCM) by Google to deliver renewal alerts and notifications to your device.
• Customer Support: If you contact support, your message and basic account information may be accessed by our support team to resolve your issue.
• Legal Compliance: We may disclose information if required by Indian courts, law enforcement agencies, or regulatory authorities under applicable law.

All third-party service providers we use are contractually bound to handle your data securely and in accordance with our instructions.

6 Data Storage & Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption in Transit: All data transmitted between the app and our servers uses TLS 1.2+ encryption.
• Encryption at Rest: Data stored on our servers is encrypted using AES-256 encryption.
• Data Localisation: All user data is stored on servers located within India, in compliance with applicable data localisation requirements.
• Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis with role-based access controls and audit logging.
• OTP Authentication: Your account is secured with mobile OTP verification, eliminating password-based vulnerabilities.
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments.

7 Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your active use of JebSave.
• Deleted Accounts: Upon account deletion, your personal data is permanently deleted from our systems within 30 days, except where retention is required by law.
• Transaction Records: Extracted subscription data is retained for up to 24 months to provide historical tracking features.
• Backup Systems: Data may remain in encrypted backup systems for up to 90 days after deletion before being purged.

You may request deletion of your account and associated data at any time by visiting Settings > Account > Delete Account within the app, or by emailing privacy@jebsave.in.

8 Your Rights Under DPDP Act 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You may request a summary of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data (subject to legal retention obligations).
• Right to Withdraw Consent: You may withdraw consent to data processing at any time. Note that withdrawal may affect your ability to use certain features of the app.
• Right to Grievance Redressal: You may raise concerns with our Grievance Officer and expect a response within 72 hours.
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Grievance Officer at: privacy@jebsave.in

If you are unsatisfied with our response, you have the right to escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act 2023.

9 Children's Privacy

JebSave is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children under 18. Our service is designed for adults managing their personal finances and subscriptions.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@jebsave.in. We will promptly delete such information upon verification.

We comply with applicable provisions of the DPDP Act 2023 regarding processing of personal data of children, and do not process data of minors without verifiable parental consent.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Send you a push notification through the JebSave app
• Display a prominent in-app notice requesting your acknowledgment of material changes

Your continued use of JebSave after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you should stop using the app and may delete your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: