Skip to content
Arthya
Download

Last updated:

Privacy Policy

Introduction

Arthya ("we", "us", or "our") operates the Arthya mobile application and the website at https://shreerajdeepfinance.co (collectively, the "Service"). This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service.

Arthya is not a lender or financial institution. We are a loan marketplace that connects you with RBI-registered Non-Banking Financial Companies (NBFCs) and banks. We do not issue loans, process applications, or make any lending decisions. All loan decisions, terms, and disbursements are made by our partner lenders independently.

We are committed to protecting your privacy and your right to control your personal data. This policy is written in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Reserve Bank of India's guidelines for digital lending intermediaries, and other applicable Indian laws and regulations.

Information We Collect

We deliberately collect the absolute minimum information necessary to connect you with potential lenders. Here is the complete list of information we collect:

Information You Provide Directly

  • Mobile number: Required for account creation and verification through Firebase Phone Authentication. This is your primary identifier.
  • Full name (optional): You may provide your name to personalize lender outreach. You can use the app without providing your name.
  • Email address (optional): Used for support communication and lender outreach if you choose to share it.
  • Loan preferences: When you submit a loan inquiry, we collect the loan amount you are seeking, employment type (salaried, self-employed, business, or gig), monthly income range (in broad buckets such as 25k-50k), city, existing EMI burden (in broad buckets), and the purpose of the loan (personal, business, medical, etc.). All financial information is collected as ranges, not specific figures.

Information We Collect Automatically

  • Anonymized usage data: We collect basic analytics such as which screens you visit, in aggregate form, to improve our Service. We do not use third-party analytics SDKs that profile individuals.
  • Device information: Operating system version and app version, used solely to ensure compatibility and to surface forced-update prompts when necessary.
  • IP address and user agent: Recorded only when you submit our public contact form, exclusively for spam triage purposes.

Information We Explicitly Do NOT Collect

To set clear expectations, here is a list of sensitive information categories we never collect, never request, and never store:

  • We do not collect or request your PAN number, Aadhaar number, voter ID, or any government-issued identity document.
  • We do not request SMS read permission.
  • We do not request access to your Contacts or call your contact list.
  • We do not request access to your Call Logs.
  • We do not request access to your Photo Gallery, Media, or external storage for purposes other than uploading documents that you explicitly select.
  • We do not request, collect, or store any bank account credentials, internet-banking passwords, card numbers, CVV, or OTPs related to banking transactions.
  • We do not pull a credit report or credit score from any credit information company. Submitting your details through Arthya will not affect your credit score because we do not perform a credit pull.

These constraints are hard-coded into our app — the permissions are never even requested from the Android operating system, and the relevant code paths simply do not exist in our application.

How We Use Your Information

Your information is used only for the following purposes:

  1. Account creation and authentication: Your mobile number is used to verify your identity through Firebase Phone Authentication. We do not share your mobile number with any third party for marketing.
  2. Connecting you with lender partners: When you submit a loan inquiry, we share the relevant details with the specific lender you selected, and only that lender. We do not broadcast your information across all lenders on our platform.
  3. Service operation and improvement: Aggregated and anonymized usage patterns help us improve the app's user experience.
  4. Customer support: If you contact us through the support form, we use your mobile number and email to respond to your inquiry.
  5. Legal and regulatory compliance: We retain records as required by applicable Indian laws and produce them only when legally compelled.

When We Share Your Information

We share your information only in these limited circumstances:

  • With lender partners you select: When you submit a loan application tied to a specific lender, we share the information you provided in that application with that lender. Each lender has its own privacy policy and terms of use; their handling of your data after we share it is governed by their policy, not ours. We encourage you to review the lender's privacy policy before submitting.
  • With service providers under contract: We use third-party providers including Firebase (for phone authentication, by Google), MongoDB Atlas or self-hosted MongoDB (for data storage), Cloudflare R2 (for media storage), and email delivery providers. These providers are bound by confidentiality and data-processing agreements and may only use your data to provide the service we contracted them for.
  • When required by law: If we receive a valid legal request from an Indian government authority, a court order, or a regulator with jurisdiction, we will comply to the extent legally required, and we will challenge requests we believe to be overbroad or improper.

We do not sell your personal information to anyone, ever. We do not share your information with marketers, advertisers, or data brokers.

Data Retention

  • Active accounts: We retain your information as long as your account is active.
  • Deleted accounts: When you delete your account, we anonymize your personally identifiable information (mobile, name, email) immediately and schedule complete hard-deletion of the record after 30 days. This 30-day window allows us to comply with any in-flight legal-hold obligations and to recover the account if you change your mind.
  • Loan applications: Retained for the duration required by RBI guidelines for digital lending intermediaries, which is typically 2–3 years from the date of last activity, after which they are anonymized.
  • Contact form submissions: Retained for 1 year for support and spam-triage purposes.

Your Rights Under the DPDP Act, 2023

You have the following rights with respect to your personal data:

  • Right to access: Request a copy of the information we hold about you.
  • Right to correction: Request correction of any inaccurate information.
  • Right to erasure: Request deletion of your account and all associated personal data through the in-app "Delete account" option, or by writing to grievance@shreerajdeepfinance.co.
  • Right to grievance redressal: If you have a complaint, please contact our Grievance Officer (details in the "Contact Us" section of the app).
  • Right to nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please write to grievance@shreerajdeepfinance.co from the email address associated with your account, or contact our Grievance Officer.

Data Security

We take the security of your information seriously and follow industry-standard practices:

  • All data in transit is encrypted with HTTPS (TLS 1.2+).
  • Sensitive credentials are stored using the device's secure storage (Android Keystore), never in plain WebView storage.
  • Database access is restricted to authenticated backend services with role-based access control.
  • We maintain audit logs of administrative actions on user data.
  • We perform regular reviews of our code and infrastructure.

No security system is impenetrable, however, and we cannot guarantee that unauthorized access will never occur. If we discover a breach affecting your data, we will notify you and the Data Protection Board of India in accordance with the DPDP Act timelines.

Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you become aware that a child has provided us with personal information, please contact us so we can remove it.

Cookies and Tracking

Our marketing website at https://shreerajdeepfinance.co uses only strictly necessary cookies for session management. We do not use third-party advertising cookies, tracking pixels, or behavioral profiling tools. Our mobile app does not use cookies because it is not a browser-based experience.

Third-Party Lender Partners

When you submit a loan application through Arthya, the lender you select becomes an independent data controller for the information shared with them. Their use of your data is governed by their own privacy policy and terms of use. We make best efforts to onboard only RBI-registered NBFCs and banks who maintain reasonable data-protection standards, but we cannot warrant their conduct.

Each lender's name, RBI registration status, and link to their privacy policy is shown on their listing in the app before you submit an application.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app and on our website with a revised "last updated" date. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes your acceptance of the revised policy.

Contact Us

For privacy-related questions or to exercise your rights:

You can also contact the Data Protection Board of India if you believe your rights under the DPDP Act have been violated and we have not resolved your complaint to your satisfaction.

Disclaimer: This Privacy Policy is a starting draft. Have it reviewed by a qualified legal professional familiar with Indian fintech regulations (RBI guidelines for digital lending, DPDP Act 2023, IT Rules 2021) before publishing publicly or in the Play Store listing.