Privacy Policy

This policy explains what Tracker collects, why, who helps us process it and the choices you have. It covers the website at portfolio.reetesh.in and the app you can install from it. Tracker is run by Reetesh Kumar (“we”, “us”).

Tracker is a personal finance tracker. It helps you record spending, income, accounts, loans, budgets, subscriptions, notes and investments, and see them together. Services you connect to Tracker, such as Google, Zerodha or Binance, have their own privacy policies.

Your account

• Your name, email address and whether it is verified, and a profile picture if you add one.
• Your password, which is stored only as a hash, never in plain text.
• Short lived links we email you to verify your address or reset your password.

Sign in and security

• A record of each signed in session: when it started and expires, plus the IP address and browser or device details your browser sends. You see these as your devices in Account.
• If you set an app passcode: a hash of it, failed attempts and any lockout time.
• Tokens you create for an iPhone Shortcut, stored only as a hash, with when each was last used.

What you add

• Expenses, income, transfers, categories, tags, topics, payment methods, merchants and the rules you save for them.
• Banks, cash, cards, loans, EMIs, money people owe you, balance checks and moves between them.
• Budgets, recurring bills, subscriptions, insurance details, notes and topics.
• Crypto, US stock and India stock and fund holdings, trades, dividends, loans and cash balances.
• Text from bank SMS you send through a Shortcut or paste in, kept with the draft it creates so you can check it before confirming.

What we work out

From your records we calculate balances, net worth, daily portfolio snapshots, gains, budgets, spending insights, health scores and tax estimates.

Diagnostics

When a page crashes for you, we save the error message, page path and time to your account, with numbers removed first, so you can see it in Account. Our hosting provider also keeps technical server logs.

These are optional. Each one only runs after you set it up, and you can remove it in the app.

• Zerodha. The Kite Connect API key and secret you enter are encrypted before they are stored. After you sign in to Zerodha we keep the access token it returns and use it to import your holdings, funds and trades.
• Binance. Your API key and secret are encrypted before they are stored. Tracker only accepts keys with reading enabled and refuses keys that can trade, transfer or withdraw. We import balances, trades, Earn, loans and P2P history.
• Wallets. Public wallet addresses you add are sent to Zerion, a blockchain data provider, to read balances, positions and activity. We never ask for private keys or seed phrases.
• Gmail. Explained in full in the next section.

Subscriptions can find your bills in Gmail if you connect it. This is optional and you can disconnect at any time.

What access means

Tracker asks Google for the gmail.readonly permission. Google describes it as permission to view your email messages and settings, and that is what it technically allows. Tracker uses it only to search for receipts and billing emails from known subscription and billing senders or with billing related subjects, and it skips Promotions, Social, Forums, chats and spam. Tracker cannot send, change or delete your email.

What we keep

• Your Gmail address, an encrypted refresh token and how far the search has got.
• For each email looked at: its Gmail message ID, received date, a masked sender name and domain, a masked subject and what was read from it, such as the service, amount, currency, dates and whether it was a payment, renewal, trial, refund or cancellation.
• Senders you mark as not a subscription, and the result of any AI check.

Matching emails are fetched in full so they can be read. We do not store full email bodies, but extracted results may include short masked excerpts that help you check a receipt. Masking replaces links, email addresses, phone, card and long reference numbers and common name patterns before anything is saved or sent.

AI processing

When simple rules cannot read an email confidently, Tracker sends the masked sender, subject and a shortened, masked part of the body to an AI model to pull out the details. To check a suggested subscription it may also send a masked timeline of that service’s emails. These requests go through Vercel AI Gateway to an OpenAI model, currently GPT 4.1 nano, and every request asks the gateway to disallow training on it. Masking reduces personal information but cannot guarantee that all of it is removed.

Tracker asks before a found subscription is added. What you accept becomes your own records.

Limited Use

Tracker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy. In practice:

• We use Gmail data only to find and track your subscriptions and bills, a feature you can see in the app.
• We transfer it only to the providers needed to run that feature, such as the AI processing above, when needed for security or to comply with law, or as part of a merger, acquisition or sale of assets after asking for your explicit consent.
• We never use it for advertising, never sell it and never give it to data brokers.
• We never use it to decide creditworthiness or for lending.
• We do not use it to train general AI or machine learning models.
• No person reads your email data unless you agree for specific messages, it is needed for security such as investigating abuse, it is needed to comply with law, or it has been aggregated and anonymized for internal operations.

Disconnecting

Disconnect from Subscriptions. Tracker then asks Google to revoke its access, deletes the stored connection and token, deletes stored email records that never became a payment or suggestion you used, and dismisses suggestions still waiting for you. Subscriptions and payments you accepted stay, because they are part of your records. If Google cannot be reached, access is still removed in Tracker.

You can also remove access in your Google Account connections. That stops Tracker reading your mail but does not delete what Tracker already stored, so disconnect in Subscriptions as well, or contact us.

• To run Tracker: show your records, totals, charts, budgets, insights and tax estimates.
• To sync the connections you set up and post recurring entries you asked for.
• To email you: verification, password reset, password changed and passcode alerts, and weekly or monthly digests while they are on.
• To keep accounts safe: sessions, the app lock, rate limits and spotting abuse.
• To find and fix errors and keep the app working.
• To comply with law and protect our rights and the safety of users.

We do not sell your personal information. We share it only as follows.

Service providers

• Vercel hosts the app and stores profile pictures in Vercel Blob. Its AI Gateway carries the AI requests described above.
• MongoDB holds the database, through the Prisma library.
• Upstash runs a Redis cache for cached screen data, rate limits and short lived sign in and sync state.
• Resend delivers our emails, so it receives your email address and each email’s content.
• OpenAI, through Vercel AI Gateway, receives the masked email text described above.

Services you connect

Google, Zerodha, Binance and Zerion receive the credentials, tokens or wallet addresses needed to fetch your data, and see those requests.

Market data

To show prices and exchange rates our servers ask CoinGecko, Polygon, Finnhub, Yahoo Finance, Frankfurter, AMFI, mfapi.in, NSE and BSE for the coins, stocks, funds and currencies involved. These requests do not include your name or email address.

When required

We may disclose information when the law requires it, or when it is needed to protect the rights, property or safety of you, other users or us.

• Cookies. A session cookie keeps you signed in for up to 7 days, renewed as you use the app. Short lived cookies protect the steps of connecting Gmail or Zerodha. We use no advertising or analytics cookies.
• Browser storage. Preferences such as hidden amounts are stored on your device, and so are entries you save without signal, until they sync.
• Screen data. A copy of recent screen data is kept on your device for up to a week so the app opens quickly. With a passcode on it is sealed with a key from the server. Signing out clears it.

Hide amounts only covers numbers on screen. It does not encrypt anything, and the data is still on the device. If others use your device, set a passcode in Account and sign out when you are done.

We use HTTPS, store passwords and passcodes as hashes, encrypt exchange keys and the Gmail token, enforce the app lock on the server, and limit repeated attempts. You can see your devices and sign out the others in Account.

No service can promise perfect security. Use a strong, unique password, keep your devices locked, and tell us if you think your account has been misused.

Your information is processed where we and our service providers operate. Depending on the provider and service, this may include countries outside the country where you live, including the United States, particularly for email delivery and AI processing. Privacy laws in those countries may differ from yours.

We keep your information while your account exists, so your history and totals stay correct. When you delete something in the app it is removed from your records. Some records may be kept hidden for a while, for example so an undo works or past totals stay consistent.

Removing a connection deletes its stored keys or token. Records it already imported stay as part of your history unless you delete them. Copies may remain for a time in provider backups and logs.

The app has no button yet to delete your whole account. To ask for it, email rajreetesh7@gmail.com. We will confirm the request comes from you before acting on it.

• Edit your name and photo, and change your password, in Account.
• Set or remove an app passcode, and sign out other devices.
• Turn weekly and monthly digest emails on or off.
• Remove Zerodha keys, disconnect Binance, remove wallet addresses and revoke Shortcut tokens.
• Disconnect Gmail in Subscriptions.
• Edit or delete the entries you have added, and export records from the screens that offer it.

Depending on the laws that apply to you and to Tracker, you may have the right to access, correct, update or erase your personal information, to withdraw consent, to object to or restrict some processing, to receive a copy in a portable form, or to nominate someone to act for you.

To use a right that the app does not cover, email rajreetesh7@gmail.com. We may need to confirm your identity first. Withdrawing consent stops future processing based on it, but not processing already done, and some features may stop working.

If you are unhappy with our answer, you may be able to complain to the data protection authority where you live.

Tracker is meant for adults and is not directed at anyone under 18. If you believe a child has given us personal information, contact us and we will take appropriate steps to remove it.

We may update this policy as Tracker changes. The date at the top shows the latest version. If a change materially affects how we use your information, we will make reasonable efforts to let you know, for example in the app or by email.

For questions, requests or complaints about your privacy or this policy, email rajreetesh7@gmail.com.

Run by

Reetesh Kumar

Email

rajreetesh7@gmail.com

Write from the email address on your Tracker account, or tell us that address, so we can find your account.