Privacy Policy

BloomFolio Technologies Pvt Ltd, Ahmedabad, Gujarat, India. Contact: privacy@bloomfolio.in.

Account data — name, email address and a password (stored only as a salted bcrypt hash). Provided by you when you sign up.

Usage data you create — watchlist symbols, lesson progress, streaks, XP, badges, posts, comments, reactions, poll votes, notification preferences, dividend goal, theme preference and whether you chose to make your portfolio public.

Portfolio data — currently the Service shows illustrative demo holdings only. If you later connect a broker, we will only receive read-only holdings data with your explicit consent and will update this Policy first.

Payment data — if you subscribe to Pro, payments are processed by Razorpay or Stripe. We receive only a transaction reference, plan, amount and status. We never see or store card, UPI or bank details.

Marketing lists — email address if you join the waitlist or newsletter, together with the time of your consent.

Device data — if you enable push notifications, a push subscription or Firebase device token. Standard server logs (IP address, browser type, timestamps) are kept for security for up to 30 days.

We do not collect government IDs, PAN, bank details, precise location, contacts or advertising identifiers, and we do not use third-party analytics or advertising trackers.

To provide the Service you signed up for (performance of contract / consent under DPDP).

To send service notifications you have turned on — streak reminders, ex-dividend alerts, replies to your posts (consent; you can switch each off in Settings).

To send waitlist or newsletter emails you opted in to (consent; unsubscribe any time).

To keep the Service secure, prevent abuse and comply with law (legitimate use permitted by law).

We never sell personal data and never use it for behavioural advertising.

We use one strictly necessary cookie (`access_token`, HttpOnly, session authentication) and the browser's local storage for your login token, theme choice and whether you dismissed the install/cookie banners. No analytics or advertising cookies are set. See our Cookie Policy for details.

Processors — hosting (Emergent / cloud infrastructure), database hosting, Razorpay and Stripe (payments), Firebase Cloud Messaging and browser push services (notifications). Each is bound by contract to process data only on our instructions.

Other users — your name, handle, posts, comments, badges and streak are visible to other users. Your portfolio summary is visible only if you switch it to public in Settings; exact ₹ values are hidden unless you opt in when sharing.

Legal — if required by law, court order or to protect rights and safety.

Our servers may be located outside India. Where data leaves India, we rely on contractual safeguards and only transfer to countries not restricted by the Central Government under the DPDP Act.

Account data is kept while your account is active. When you delete your account (Settings → Delete account) we erase your profile, posts, comments, progress, notifications and device tokens within 30 days, except payment records we must keep for 8 years under Indian tax law.

Waitlist and newsletter emails are kept until you unsubscribe. Server logs: 30 days.

Under the DPDP Act (and GDPR where applicable) you may: access a copy of your data (Settings → Download my data), correct it (edit profile), erase it (Settings → Delete account), withdraw consent (notification toggles, unsubscribe links), nominate a person to exercise your rights, and raise a grievance.

Email privacy@bloomfolio.in for any request. We respond within 30 days. If unsatisfied, you may complain to the Data Protection Board of India.

The Service is for users aged 18 and above. We do not knowingly collect data from children. If you believe a minor has registered, contact us and we will delete the account.

Passwords are hashed with bcrypt, traffic is encrypted with TLS, access tokens are short-lived and HttpOnly. No method is 100% secure; please use a unique password.

Grievance Officer, BloomFolio Technologies Pvt Ltd, Ahmedabad, Gujarat, India. Email: privacy@bloomfolio.in. Complaints are acknowledged within 48 hours and resolved within 30 days as required by the IT Rules, 2021.

We will post any changes here and update the date above. Material changes will be announced in-app or by email.