ZMoney+ App Privacy Policy

What ZMoney+ is, and what it is not

ZMoney+ is an educational personal-finance simulator. Every portfolio in it is funded with virtual capital that has no monetary value and cannot be bought, sold, withdrawn or exchanged. The app does not execute real trades, does not hold or move money, and is not a broker, distributor or investment adviser. ZYNQUEST TECHNOLOGIES PRIVATE LIMITED is not registered with SEBI in any capacity, and nothing in the app is investment advice.

This matters for privacy because it sets the boundary of what we ever need: we never ask for bank credentials, card or UPI details, KYC documents, PAN, Aadhaar, or access to any real investment account.

Information we collect

1. Account information

Creating an account stores your email address and, depending on how you sign in, a hashed password or a Google account identifier. You may also add a display name, a username, a profile picture, a date of birth and a mobile number. A mobile number is only stored if you choose to sign in with one.

You can browse much of the app as a guest, without an account. Guest use is tied to a randomly generated session identifier stored on your device, not to you.

2. What you enter into the simulator

The Financial Health Checkup and the Starter Plan ask you to describe your own finances — monthly income, EMIs, essential and lifestyle expenses, savings, insurance premiums, total loans and existing investments — along with answers about your risk comfort and time horizon. All of it is self-reported and typed by you. We do not fetch it from a bank, a credit bureau, an account aggregator or any other source, and we do not verify it.

We also store what you do in the simulator: virtual trades and portfolios, goals, quiz and learning progress, XP, Z Cash balances and in-app notifications.

3. Consolidated Account Statement (CAS) import — optional

If you choose to import a CAS from CAMS/KFintech, the app sends that PDF and the password you type for it to our own parsing service over an encrypted connection. The PDF and its password are processed in memory only: neither is written to disk, logged, or retained after the request finishes. What is kept is the result — the scheme names, units and values extracted from it — which becomes a portfolio in your account. You can delete that portfolio at any time.

4. Conversations with the in-app assistant

Messages you send to the assistant are stored against your account so the conversation survives closing the app, and are sent to an AI provider to produce a reply (see Third parties). If you use the optional Voice Mode, audio streams from your device directly to the AI provider rather than through our servers; the text transcript is stored like any other message. Voice Mode requires separate consent and the microphone is active only while the voice screen is open.

5. Notifications

If you enable notifications, we store a push token for your device so messages can be delivered to it. A push token identifies a device installation, not a person, and turning notifications off stops its use.

6. Technical information

Our servers keep ordinary request logs (IP address, timestamp, endpoint, status, user agent) for security, abuse prevention and debugging. Sign-in sessions use tokens held on your device.

What the app does not collect

• No bank, broker, card, UPI or wallet credentials — there is nothing to connect.
• No KYC identity documents, PAN or Aadhaar.
• No contacts, calendar, SMS, call logs, photos or camera access.
• No precise or approximate location.
• No advertising identifier, and no advertising or attribution SDK in the Android app.
• No purchases inside the Android app — the store build sells nothing.

Permissions the app asks for

• Microphone — only for Voice Mode, only while that screen is open, and only after you accept its separate consent. Decline it and the rest of the app is unaffected.
• Notifications — to deliver the alerts you opt into.
• File access — to let you pick a CAS PDF to import, and to share or save a file you asked the app to produce.
• Internet and network state — the app is an online service.

How we use this information

• To create and secure your account and keep you signed in.
• To run the simulator: portfolios, goals, the checkup, calculators and reports.
• To show your learning progress, streaks, levels and Z Cash balance.
• To answer your questions through the in-app assistant.
• To send notifications you have enabled, and service emails such as one-time sign-in codes.
• To detect abuse, debug failures and keep the service available.

We do not sell your personal information, and we do not use your financial answers to profile you for advertisers.

Third parties

We use a small number of service providers, each for one job:

• Google Cloud Platform — hosting and the database, in the Mumbai (asia-south1) region in India.
• Google Sign-In — if you choose to sign in with Google. Google tells us your account identifier and email; we do not receive your Google password.
• Google (Gemini) — generates the in-app assistant’s replies and powers Voice Mode. Your message, and the context needed to answer it, are sent to Google for that purpose.
• Groq — a standby AI provider used only when the primary one fails and only where it has been configured for the deployment.
• Gmail (SMTP) — delivers sign-in codes and service email.

Market data (mutual fund NAVs and index levels) is fetched from public data sources. Those requests are made by our servers and carry no information about you.

We also disclose information where the law requires it, or to protect the rights and safety of our users and of ZYNQUEST.

Analytics and advertising

The Android app ships without an analytics or advertising SDK. Product analytics exist in the codebase behind a configuration key that is not set in the published Android build; if that ever changes, this policy and the Play Data safety declaration will be updated before the build that enables it is released.

The news feed can carry sponsored placements. These are sold directly, scheduled by date, and shown to everyone who reaches that position in the feed. They are always labelled as advertising, and they are not targeted using your data — no profile, no advertising identifier, and no information about you is shared with a sponsor.

Where your data is stored

Your account and simulator data are stored in India, in Google Cloud’s Mumbai region. Where a request is handled by one of the providers listed above, that provider may process it outside India under its own terms.

Retention and deletion

We keep your account data for as long as your account exists. Request deletion by emailing zmoneyplusofficial@gmail.com from the address on the account, with the subject “Delete my account”. We will confirm and delete the account and its associated data — profile, financial answers, virtual portfolios and goals, imported CAS holdings, assistant conversations, gamification balances and push tokens — within 30 days.

Two exceptions: server logs age out on their own retention cycle, and we keep whatever a legal or accounting obligation requires us to keep. Anonymous, aggregated counts that cannot be linked back to you may remain.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, and as a matter of policy for everyone else, you can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, and withdraw a consent you previously gave (for CAS import, for the assistant, or for Voice Mode) — withdrawing a consent turns that feature off and does not affect the rest of the app. Email zmoneyplusofficial@gmail.com and we will respond.

Children

ZMoney+ is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, email us and we will delete it.

Security

Traffic between the app and our servers is encrypted with HTTPS. Passwords are stored only as salted hashes, never in readable form. Sessions use expiring tokens. CAS PDFs and their passwords are never written to disk. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data described here — which, by design, excludes the credentials and identity documents a real investment account would require.

Changes to this policy

If this policy changes materially, we will update the date at the top of this page and, where the change affects how your data is used, tell you in the app before it takes effect.

Contact

ZYNQUEST TECHNOLOGIES PRIVATE LIMITED
Kannamangala, Bengaluru North, Karnataka 560049
CIN: U63119KA2026PTC224269
App support: zmoneyplusofficial@gmail.com
Company: zynquestofficial+contactus@gmail.com