1. Introduction

PocketWallet is operated by [Your Company Name / Legal Entity Name], a company incorporated under the laws of India with its registered office at [Your Full Registered Address, e.g., Lucknow, Uttar Pradesh, India] (hereinafter referred to as “we”, “us”, “our” or “PocketWallet”).

This Privacy Policy explains how we collect, use, disclose, store, protect and process your personal information when you download, install, access or use the PocketWallet mobile application (“App”), website at https://pocketwallet.co.in/ or any related services (collectively, the “Platform”).

By using the Platform, you consent to the collection, use, sharing and protection of your information as described in this Policy. If you do not agree, please do not use the App or services.

This Policy is governed by Indian laws, including the Information Technology Act, 2000 and rules thereunder (including SPDI Rules, 2011), the Digital Personal Data Protection Act (as applicable), RBI guidelines on digital payments / UPI, and other relevant regulations. We do not offer services outside India.

2. Information We Collect

We collect only information that is relevant and necessary to provide, improve and secure our wallet, UPI payments, recharge, bill pay and related services.

Information you provide directly:

• Personal details: Name, mobile number, email address, date of birth, residential address.
• KYC / identity documents: PAN, Aadhaar (number / Virtual ID for e-KYC only — optional alternatives accepted), Voter ID, driving license, passport, photographs, selfies/videos for verification.
• Financial details: Bank account numbers, UPI IDs, linked debit/credit card details (handled securely via PCI-DSS compliant partners — we do not store full card/CVV), wallet balance, transaction history.
• Other: Nominee details (if provided), purpose-specific information for services availed.

Automatically collected / device information:

• Device details: Device ID, model, OS version, IP address, browser type, mobile network.
• Location: Precise / approximate location (coarse and fine) — used strictly for fraud prevention, risk management, transaction validation (e.g., location-based restrictions per NPCI/RBI rules), nearby merchant/ATM discovery (if feature enabled), and regulatory compliance. We do not collect background location unless you explicitly enable a feature requiring it and give consent.
• Usage & transaction data: App interactions, timestamps, transaction amounts, merchant names, payment modes, success/failure status.
• Other: OTPs received, crash logs, performance metrics.

We may receive information from third parties (banks, payment gateways like Razorpay/PhonePe/Paytm, UIDAI for e-KYC, credit bureaus for risk checks — only with your consent or as required by law).

3. How We Use Your Information

We use your information for legitimate purposes only:

• Account creation, identity verification (KYC/e-KYC as mandated by RBI/NPCI/UIDAI).
• Processing UPI payments, wallet loading, transfers, recharges, bill payments.
• Fraud detection, risk assessment, AML compliance, preventing unauthorized transactions.
• Providing customer support, resolving disputes, sending transaction alerts/notifications.
• Improving services, analytics (aggregated/anonymized), personalization (with consent).
• Complying with legal/regulatory obligations (RBI, NPCI, courts, government agencies).
• Marketing/offers (only with your explicit consent — you can opt-out anytime).

We minimize data processing and do not use it for unrelated purposes.

4. Cookies and Similar Technologies

We (and authorized partners) use cookies, SDKs and similar technologies for security, analytics, session management and essential functionality. You can manage preferences in your device/browser settings, but disabling may limit features.

5. Sharing and Disclosure of Information

We share information only as necessary and permitted:

• With payment processors, banks, NPCI, merchants — strictly to complete transactions.
• With UIDAI/NSDL for e-KYC authentication.
• Service providers (cloud, analytics, fraud tools) under strict confidentiality agreements.
• Affiliates / group companies (if any) for internal operations.
• Regulatory/government authorities, law enforcement, courts when required by law.
• In case of merger, acquisition or reorganization (successor entity bound by this Policy).

We do not sell your personal data or share it for third-party marketing without explicit consent.

6. Data Storage, Security and Retention

• Data is stored in India (or with providers compliant with Indian data localization rules).
• We use encryption (in transit & at rest), firewalls, access controls, regular audits and industry-standard measures (PCI-DSS for payments).
• Retention: As long as needed for service provision, legal/compliance requirements (typically 5–10 years for transaction/KYC records per RBI), or fraud prevention. After purpose ends, data is deleted/anonymized unless law requires otherwise.

No security system is 100% secure — you must protect your login, OTP, device and not share credentials.

7. Your Rights and Choices

Subject to applicable law, you may:

• Access, correct or update your information.
• Withdraw consent (may limit services).
• Opt-out of marketing communications.
• Request deletion (subject to legal retention).

For requests: Contact our Grievance Officer (details below).

Enable app lock / biometric in the App for added security.

8. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect data from children. If we learn we have, we will delete it.

9. Links to Third Parties

The Platform may link to third-party sites/services. We are not responsible for their privacy practices — review their policies.

10. Changes to this Policy

We may update this Policy. Changes will be posted here with the updated date. Significant changes may be notified in-app or via email. Continued use constitutes acceptance.

11. Grievance / Contact Officer

For privacy queries, complaints or data requests:

We will respond within timelines prescribed under applicable law.