Download

Privacy Policy

Last Updated: 28/08/2026 This Privacy Policy describes how Gudbuks collects, uses, stores, shares, and protects information relating to You in connection with Your access to and use of the Platform and the Services. This Privacy Policy is incorporated into, and should be read together with, the Terms of Use in Part A. By using the Platform, You consent to the collection and processing of Your information as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

  • Identity and contact information: name, mobile number, email address, date of birth, PAN, and (where required for KYC) government-issued identity documents.
  • Account and profile information: login credentials, security questions, and preferences.
  • Manual Data: information You choose to enter about non-financial and digital assets and liabilities, including property, gold, chit funds, business assets, informal loans, documents, and — if You choose to store them — credentials or passwords.
  • Family Protection information: names, relationships, and contact details of any Trusted Contact(s) You nominate, and the permissions You configure for them.
  • Payment information: billing details for Your Subscription, processed through third-party, RBI-authorised, PCI-DSScompliant payment gateways. Gudbuks does not itself store Your full card details.
  • Communications: information You provide when You contact customer support or otherwise correspond with Gudbuks.

1.2 Financial Information Collected Through Account Aggregator Infrastructure

  • With Your explicit, revocable consent, Gudbuks (through regulated Account Aggregator infrastructure) retrieves Financial Information from Financial Information Providers, such as details of Your bank accounts, EPF/PPF/NPS balances, mutual fund and demat holdings, insurance policies, and loans.
  • This access is strictly read-only. Gudbuks does not collect Your net-banking passwords, UPI PINs, or other transaction credentials, and cannot initiate any transaction on any linked account.

1.3 Information Collected Automatically

  • Device and usage information: including device model, operating system, unique device identifiers, IP address, browser type, app version, crash logs, and general usage patterns (such as features accessed and time spent), collected to operate, secure, and improve the Platform.
  • Location information: where You have granted the relevant device permission, used to support certain features and for fraud/security purposes.
  • Cookies and similar technologies: as described in Clause 4 below.

1.4 Information from Third Parties

  • Information from Financial Information Providers and Account Aggregators (as described above), KYC/identity-verification service providers, analytics providers, and payment gateways.

2. How We Use Your Information

We use the information described above to:
  • create and administer Your Account and provide the Services, including Auto-Fetch, Manual Data storage, the Expense Tracker, the AI Wealth Assistant, and the Family Protection Feature;
  • verify Your identity and complete KYC and eligibility checks where required;
  • process Your Subscription and payments;
  • generate the insights, alerts, predictions, and reports produced by the AI Wealth Assistant, based on data in Your Account;
  • operate the Family Protection Feature, including monitoring inactivity and, where triggered in accordance with Your instructions, contacting and sharing information with Your Trusted Contact(s);
  • detect, investigate, and prevent fraud, unauthorised access, and other security incidents;
  • provide customer support and respond to Your queries and grievances;
  • send You service-related communications, reminders, and (where You have consented) promotional communications, via email, SMS, WhatsApp, push notification, or phone;
  • comply with applicable law, regulatory requirements, and lawful requests from courts, regulators, or law enforcement; and
  • analyse, in aggregated or de-identified form, usage trends to improve the Platform.

3. How We Share Your Information

Gudbuks does not sell Your personal information. We may share information as follows:
  • With Account Aggregators and Financial Information Providers, solely to the extent necessary to give effect to a data-fetch consent You have granted, in accordance with the AA Master Directions;
  • With service providers and sub-processors who support Gudbuks’ operations, such as cloud hosting providers, KYC/identity-verification vendors, payment gateways, analytics providers, and customer-support tooling providers, under contractual obligations to protect Your information and use it only for the purposes for which it was shared;
  • With Your Trusted Contact(s), only in accordance with the Family Protection Feature and the permissions You have configured, and only after the applicable inactivity and notification process described in Clause 9 of the Terms of Use has been followed;
  • With regulators, courts, law enforcement agencies, or other governmental authorities, where required by applicable law or a valid legal process;
  • With Gudbuks Group entities, for the purposes described in this Privacy Policy; and
  • In connection with a merger, acquisition, restructuring, or sale of assets, subject to the acquiring entity agreeing to honour the commitments in this Privacy Policy.

4. Cookies and Similar Technologies

We use cookies, SDKs, and similar technologies on the Platform to remember Your preferences, keep You signed in, understand how the Platform is used, and improve performance and security. You can control cookies through Your browser or device settings; disabling certain cookies may limit some features of the Platform.

5. Data Security

  • Gudbuks implements industry-standard technical and organisational security measures, including encryption of data at rest and in transit, multi-factor authentication, role-based access controls, and network security controls, designed to protect Your information from unauthorised access, alteration, disclosure, or destruction.
  • No method of transmission or storage is completely secure. While Gudbuks takes reasonable steps to protect Your information, You acknowledge that You provide information to the Platform at Your own risk, and Gudbuks cannot guarantee absolute security.
  • In the event of a data breach affecting Your personal information, Gudbuks will take appropriate steps to investigate and remediate the breach and will notify affected users and/or the relevant authorities as required under applicable law.

6. Data Retention

Gudbuks retains Your information for as long as reasonably necessary to provide the Services, comply with legal and regulatory obligations (including recordkeeping requirements applicable to Account Aggregator-sourced data), resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the data and applicable law. Upon deletion of Your Account, Gudbuks will delete or anonymise Your personal information, except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Your Rights and Choices

  • Access and correction: You can access and update most of Your information directly through the Platform, or by writing to info@gudbuks.ai.
  • Consent withdrawal: You may withdraw consent for Auto-Fetch of Financial Information, or for optional communications, at any time through the Platform’s consent-management settings, without affecting the lawfulness of processing carried out before withdrawal.
  • Account deletion: You may request deletion of Your Account and associated data through the Platform, subject to the retention exceptions described in Clause 6.
  • Family Protection settings: You may add, modify, or remove Trusted Contacts and their associated permissions at any time before the Family Protection Feature is triggered.
  • Marketing opt-out: You may opt out of promotional communications at any time using the unsubscribe option provided, or by contacting info@gudbuks.ai.

8. Children’s Information

The Platform is not intended for, and Gudbuks does not knowingly collect personal information from, individuals under 18 years of age. If Gudbuks becomes aware that it has inadvertently collected information from a minor without appropriate consent, it will take steps to delete such information.

9. Third-Party Links and Services

The Platform may contain links to, or integrations with, third-party websites, applications, or services (including Financial Information Providers, Account Aggregators, and payment gateways). This Privacy Policy does not apply to those third parties, each of which maintains its own privacy policy. Gudbuks encourages You to review the privacy policies of any third party before providing Your information to them.

10. Data Storage and Localisation

Your information is hosted on secure servers located in India, and Gudbuks endeavours to comply with applicable data localisation requirements, including those prescribed for Account Aggregator-related data under RBI guidelines. Gudbuks does not knowingly transfer personal information outside India except where necessary to operate the Services and permitted under applicable law.

11. Changes to this Privacy Policy

Gudbuks may update this Privacy Policy from time to time to reflect changes in its practices, technology, legal requirements, or other factors. The updated version will be posted on the Platform with a revised “Last Updated” date, and, where required by law, You will be notified of material changes. Your continued use of the Platform after such changes constitutes Your acceptance of the updated Privacy Policy.

12. Grievance Officer / Data Protection Contact

For any questions, concerns, or complaints regarding this Privacy Policy or the handling of Your personal information, or to exercise any of the rights described above, please contact:
Email: info@gudbuks.ai Address: No 99/3, Ambe Towers, Sahakar Nagar G Block, Bangalore-560092, Karnataka, India