Privacy Policy

Effective Date: September 7, 2026
Last Updated: October 13, 2026

SkyloFin ("we", "us", or "our"), operated by Skylo Digital (Proprietorship entity registered under MSME Udyam: UDYAM-MH-23-0433200), operates the website skylofin.com and the SkyloFin mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services in compliance with India’s Digital Personal Data Protection (DPDP) Act and applicable laws.

By using SkyloFin or visiting our website, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. What Information We Collect

Information Stored on Our Servers

When you sign up for SkyloFin, we collect the following basic profile information to authenticate your account and store it securely:

• First and Last Name: From your Google account during sign-in.
• Email Address: From your Google account during sign-in.
• Profile Picture: From your Google account.
• Account Creation Date: When you first registered.

Note: All profile information stored on our servers is protected using industry-standard AES encryption.

Card Change Alerts on the Website

If you ask for card change alerts on skylofin.com, we store the email address you give and what you asked to follow (all cards, one bank or one card). The address is encrypted. We use it only to send those alerts: nothing is sent until you confirm by the link we email you, at most one email a day, and every email has a one-click link to stop. Stopping keeps a record that you stopped, so we never email you again for it; ask us at the address below to delete it entirely.

Information Collected Automatically

When you sign up or sign in, the App tells us your phone model, Android version and SkyloFin app version, so we can help you if the App misbehaves on your phone. Nothing else is collected automatically. The App contains no analytics SDK and no crash-reporting SDK. We do not collect usage statistics, screen views, performance metrics, crash logs or an advertising identifier from your device.

2. How We Use Your Information

We use the collected information exclusively to:

• Create, manage, and authenticate your SkyloFin account securely via Google Sign-In.
• Send essential transactional or account-related notifications.
• Provide responsive customer support.
• Display relevant financial recommendations from affiliate partners (see Section 7).

We strictly DO NOT sell, rent, or trade your personal information to third parties.

3. What We Never Store (Zero Financial Storage Architecture)

Financial privacy is the core pillar of SkyloFin. The App is architected so that no financial transaction data ever touches our servers. Specifically, we NEVER collect or store:

• Bank account numbers, UPI IDs, or Debit/Credit Card details.
• Income, expenditure, or transactional logs.
• Investment, portfolio, or wealth details.
• Personal SMS contents or emails.
• Files stored within your personal cloud storage.

All financial parsing is performed 100% locally on your device, and any generated backups are saved directly to your private Google Drive account. We have zero technical capability to view, access, or decrypt this financial data.

4. How SkyloFin Reads Your Bank SMS

SkyloFin processes financial transaction alerts locally on your device to automate expense tracking:

• Targeted Access: The App strictly parses messages originating from financial/banking sender IDs (e.g. headers containing bank codes) and ignores personal conversations.
• On-Device Processing: SMS text is read locally by the client-side parsing engine. Raw SMS text is never transmitted across the network or stored on remote servers.
• Extracted Data: The extracted parameters (amount, merchant name, date, category) are stored exclusively in your device’s local database and encrypted Google Drive backups.
• User Control: SMS tracking permissions can be toggled off at any time via App Settings.

Google API Disclosure: SkyloFin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.

Anonymized Message Format Reporting

When the App encounters a bank message it cannot read, it may send an anonymized version of the message format to our server so we can improve the parser. Before sending, the App replaces all account numbers, amounts, dates and personal details with dummy values. The anonymized template is not linked to your identity, not linked to any real financial data, and not linked to any bank account or transaction. It contains only the structure of the message so we can add support for that bank’s format.

4b. How SkyloFin Reads Bank App Notifications (Optional, Beta)

Some banks and UPI apps notify you of a payment without ever sending an SMS. If you choose to switch it on, SkyloFin can read those notifications so those payments are tracked too. This is off by default and the app works fully without it.

• A separate, explicit permission: Android does not show a pop-up for this. You must enable SkyloFin yourself on the system Notification Access screen, and you can withdraw it there at any time.
• A fixed list of apps: SkyloFin only reads notifications posted by banking, UPI, card and investment apps on a list built into the app. Notifications from messaging apps, email, social apps or anything else are never opened, and the check is made before any content is read.
• Only the title and the text: nothing else about the notification is read, and only to find an amount, a merchant, a date and an account number.
• On-device, like SMS: the notification text is read on your phone and is never transmitted to us or stored on any server. The same rule in Section 3 applies without exception.
• Beta: this feature is new and still being tested, so it may miss payments. It is labelled Beta inside the app for that reason.

5. Third-Party Services

We integrate with trusted service providers to ensure security and app stability:

• Google Sign-In (Firebase Authentication): Secures your account login without exposing your password.
• Google Drive API: Facilitates encrypted backup synchronization on your own account.

6. Advertising & Free Usage

SkyloFin is 100% free to use, and the app contains no advertising. We do not use AdMob or any other ad network inside the app, and no advertising identifier is read from your device.

Development is funded by referral commission when someone chooses to apply for a financial product through the Offers section, which is described in Section 7. Nothing is shown to you because an advertiser paid for it to be shown.

7. Affiliate Links & Financial Products

SkyloFin may display financial product recommendations (e.g. credit cards, loans, savings accounts) from banks, issuers and affiliate networks we work with. The partner behind any given offer is named on the offer itself.

• Tapping an affiliate link redirects you to the partner’s platform. Information submitted on external sites is governed by the respective partner’s privacy policy.
• We track interaction metrics (clicks/views) within the App to calculate partner referral commissions. No financial application forms or bank details are stored on SkyloFin servers.

8. Cookies & Web Tracking

Our corporate website (skylofin.com) uses standard cookies for session preferences and analytical performance. You can disable cookies via your browser settings. The SkyloFin mobile application itself does not utilize web cookies.

9. Data Security & Rights

• Encryption: Server data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• User Control: You retain full rights to:
  • Request a copy of your server-stored profile data.
  • Request complete account and profile deletion from our servers (fulfilled within 30 days of email verification).
  • Manually delete financial backups directly from your Google Drive account.

10. Grievance Redressal & Contact Us (DPDP Compliance)

In accordance with the Information Technology Act and the Digital Personal Data Protection (DPDP) Act, if you have any questions, concerns, or grievances regarding data privacy, please contact our designated Data Protection & Grievance Team:

• Operating Entity: Skylo Digital (Proprietorship)
• Registration: MSME Udyam: UDYAM-MH-23-0433200
• Grievance Email: support@skylofin.com
• Official Website: https://skylofin.com
• Corporate Location: Nashik, Maharashtra, India - 422003