this is what kompound collects, why, where it lives, who can see it, and how to have it removed. it covers the kompound app and the website at kompound.money, both run by woverp management consultants private limited ("kompound", "we").
| when | what | why | where it lives |
|---|---|---|---|
| you visit kompound.money | nothing beyond the standard server log (ip address, page, time), which cloudflare keeps briefly for security | to serve the pages and keep the site up | cloudflare, india and global edge |
| you book a call on the site | name, phone number, email, the slot you chose | to hold the slot, send the google meet invite, and send a confirmation and a reminder on whatsapp | the adviser's google calendar, our booking record on cloudflare, and meta's whatsapp cloud api for the two messages |
| you message our whatsapp number | your number, your name as shown on whatsapp, and the messages | to reply to you and keep the thread | our inbox on cloudflare; meta carries the messages |
| you sign in to the app | your phone number, and a one-time code sent by google firebase | to know it is you on this device | firebase (google) verifies the code; your phone number stays in the app's secure storage |
| you scan a statement in the app | the cas pdf you upload, and its password if it has one | to read your holdings | sent once to our parser on render; the pdf is not kept after it is read |
| after a scan | what the statement contains: your name, pan and arn if present, email, fund names, folios, units, navs, transactions, dates, and the numbers we compute from them | to show your funds against their index, and to restore your scan when you sign in again | the app's secure storage on your phone, and our database on cloudflare |
| you use the app | crash reports, device model, os version, app version, no personal data | to find and fix bugs | sentry, in the united states |
| a friend invites you by number | your phone number, entered by the friend in the app | to tie your sign-up to theirs if you join | our database on cloudflare, for 30 days or until you join, then deleted |
| you set a monthly check-in in the app | the amount and fund you chose, against your pan | to remind you of what you decided | our database on cloudflare |
the founders and staff who run the product can see saved scans and bookings, so they can help you when you write in and check that the numbers are right. access is by named account, and nobody outside the company has it.
| service | what it does for you | what it receives |
|---|---|---|
| cloudflare | hosts the site, the app's api and our database | everything listed above under "where it lives: cloudflare" |
| google firebase | sends and checks the one-time code when you sign in | your phone number |
| render | runs the parser that reads your statement | the cas pdf and its password, for the seconds it takes to read it |
| google calendar and meet | holds the call you booked and creates the meeting link | your name, email, phone number and the slot |
| meta, whatsapp cloud api | delivers the booking confirmation, the reminder, and any conversation you start with us | your phone number and the messages |
| sentry | collects crash reports | device and app details; we have switched off personal data in what it receives |
| apple app store and google play | distribute the app | whatever you agree to with them; we receive no personal data from them |
each of these has its own privacy policy. some of them (sentry, parts of cloudflare) hold data outside india. by using the app you agree to that transfer for the purposes above, and nothing else.
on the site, the line under the booking form tells you what happens with your details before you confirm. in the app, you agree to this policy when you sign in, and we ask again before reading a statement. you can say no at any point; the only cost is that the feature that needs the data will not work.
under the digital personal data protection act, 2023 you can ask us, at any time, to:
email akshay@kompound.money from the address or number we have for you. we answer within 7 days and act within 30. if you are not satisfied with our answer, you can complain to the data protection board of india, the body set up under the act, once it begins accepting complaints.
data on your phone sits in the operating system's secure storage. everything in transit is encrypted. our database is on cloudflare's infrastructure with access limited to named accounts. no system is perfect; if you think something has gone wrong, write to us first and we will tell you what we find.
kompound is for adults. we do not knowingly collect data from anyone under 18. if you think we have, tell us and we will delete it.
when this policy changes we update the date at the top. if the change matters, the app will tell you on next launch.
Chirag Sandha, director, woverp management consultants private limited. chirag@kompound.money. 35, ground floor, 2nd cross, jogpalya, halasuru, bengaluru 560008. we respond within 30 days, as the act requires.