Privacy Policy

Last updated: 10 November 2026

How TingPaisa collects, uses and protects your information.

Who we are

TingPaisa is an Android app that turns a phone into a UPI payment soundbox. It is owned and run by Formonix Communications LLP (LLPIN AAY-8716, GSTIN 19AAIFF0132E1ZV), North 24 Parganas, West Bengal, India ("we", "us"). We are the Data Fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023.

This policy covers the TingPaisa app, the website tingpaisa.in and our support channels. By creating an account you agree to it.

Summary

• Your payment records stay on your phone. We do not upload them.
• Our server keeps only what is needed to run your account: your mobile number, plan, referral and support details.
• We never see your UPI PIN, bank password, card details or bank balance, and we never move money from your account other than the plan fee you approve through UPI Autopay.
• We do not sell your data and do not show ads.

Information we collect

Account. Your mobile number, sign-in times, the phones signed in to your account, your plan dates, payment status of your subscription, referral code and the friends who joined with it.

Payments read on your phone. With your permission (Notification Access), the app reads the title and text of notifications from UPI and banking apps (such as PhonePe, Google Pay, Paytm, BHIM and bank apps) to find the amount and payer name of money you receive. It ignores notifications from other apps. The amount, payer name, app name, time and notification text are saved only in a database on your phone.

Shop details. Your shop name and UPI ID, used only on your phone to make your payment QR code.

Subscription payments. Our payment partner Razorpay processes the plan fee and the UPI Autopay mandate. We receive the subscription and payment status and reference numbers. We do not receive your UPI PIN or bank login.

Alerts the app could not read (optional). If a payment app shows an alert with an amount that TingPaisa could not understand, the app can send that alert's wording to us so we can fix detection for everyone. Before it leaves your phone, account numbers, reference numbers, phone numbers and UPI IDs are hidden. You can turn this off any time in Settings → Improve payment detection.

Support. Messages you send us by email or through the in-app help chat, and our replies.

Technical data. Our servers keep standard logs (IP address, time, request) for security and to fix faults.

What we do not collect

TingPaisa does not ask for SMS, contacts, call log, location, camera, microphone or storage permission. It does not read your OTPs, bank balance or other apps' messages. When you sign in, Android may offer your SIM's phone number and may ask your permission to read only the one OTP message we sent; this is handled by Google Play services on your phone and you choose whether to allow it.

Why we use your information

• To create your account and sign you in with a one-time password (OTP).
• To start, renew and cancel your plan, and to show your plan status.
• To run the referral programme and prevent misuse of offers.
• To announce payments, show reports and make your QR code (on your phone).
• To answer support requests and send service messages about your account or plan.
• To keep the service secure, fix faults and improve payment detection.
• To meet legal, tax and accounting duties.

We process this data with your consent, which you give when you sign up and grant permissions, and where needed to provide the service you asked for or to comply with law.

Who we share it with

We share data only with service providers who help us run TingPaisa, and only what each one needs:

• Razorpay – subscription payments and UPI Autopay mandates.
• Fast2SMS – sending the OTP SMS to your number.
• Hostinger – our servers and support email.
• Google – Play services on your phone (phone-number suggestion, OTP reading with your permission, app updates).
• Anthropic – the AI model that drafts replies in the in-app help chat. Only the chat messages are sent, not your payment records.

We may also disclose data when required by law, a court or a government authority, or to protect the rights and safety of our users and the public. We do not sell or rent personal data.

How long we keep it

• Account data – while your account is active. After you ask to delete your account, it is erased 7 days later (signing in again within those 7 days cancels the request).
• Offer records – to stop the first-month offer and referral rewards being claimed again, we keep a one-way code made from your number and a note of whether these were used. Your number cannot be read back from this code.
• Payment and invoice records – for as long as tax and accounting laws require (generally 8 years).
• Unread-alert samples – at most 60 days.
• Support messages – up to 12 months.
• Server logs – up to 90 days.
• Data on your phone – until you delete it in the app or uninstall the app.

Security

Connections between the app and our servers are encrypted (HTTPS). Sign-in uses one-time passwords with limits on attempts. Access to our systems is restricted, protected with strong passwords and two-step sign-in, and logged. No system is perfectly secure, but we work to protect your data and will inform you and the authorities of a personal data breach as the law requires.

Your rights and choices

• Access and correction – ask us for a summary of the data we hold about you, or to correct it.
• Erasure – delete your account in the app (Settings → Account → Delete account) or by email. See how account deletion works.
• Withdraw consent – turn off Notification Access in Android Settings at any time; the app then stops reading notifications. You can also turn off unread-alert sharing in Settings.
• Nominate – you may nominate another person to exercise your rights in case of death or incapacity.
• Complain – contact us using the details below. If you are not satisfied, you may approach the Data Protection Board of India.

To use any of these rights, email us from your registered number's account details or write from the app. We may need to confirm it is you.

Children

TingPaisa is meant for shop owners and businesses. It is not meant for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy as the app or the law changes. The new version will be posted here with a new date, and important changes will be shown in the app.

Contact and grievances