Privacy policy

The short version

NikiPri stores only what it needs to run the features you use — your account, your groups and teams, your expenses and your tasks. We do not sell your data, we do not share it with advertisers, and we do not track you across other apps or websites.

What this page covers

This policy covers both the NikiPri website and the NikiPri app, which is live on Google Play and the App Store. The two collect very different amounts of data, so they are described separately below.

What we collect on this website

Nothing. This is a static page. It has no sign-up form, no analytics, no advertising scripts and no cookies. Our hosting provider records standard server logs (such as your IP address and browser type) as part of serving the page, which is normal for any website.

What the app collects

To run the features you choose to use, the app stores:

• Your account — your name, email address, username, and (if you add one) your UPI ID and profile photo.
• Your money records — the expenses you add, who they are split with, and what has been settled.
• Your tasks — your lists, tasks, and who they are assigned to.
• Your teams — the teams you belong to, matches, RSVPs and attendance.
• Notification tokens — so we can send you the reminders you asked for.

We never see or store your UPI PIN, your bank credentials, or your card details. NikiPri does not open your UPI app or start a payment for you: it shows the payee's UPI QR code and their UPI ID, you pay them from your own UPI app the way you would pay anyone, and then somebody records it as paid. The payment happens entirely between your bank and theirs.

Usage and crash data

To find out which features get used and what is breaking, the app records how it is used — which screens you open and for how long, which actions you take (adding an expense, RSVPing, completing a task), failed API calls, and crashes. Sign-in and sign-up attempts are included, successful or not, because people getting stuck at the front door is something we need to be able to see.

Two rules limit what this can ever contain, and they are enforced in code rather than by policy:

• Nothing you typed is ever included — no names, descriptions, notes, task titles, messages or amounts. The server accepts only a fixed list of technical fields and rejects anything else outright.
• Identifiers are stripped— a screen is recorded by its shape (“a team page”), never the specific team, and identifiers are removed from recorded addresses before they are sent.

This data goes to two places: our own servers in India, where we delete it after 180 days, and Google Firebase (Analytics and Crashlytics), which gives us crash reports and device information and handles that data under Google's own terms. Some of it is recorded before you sign in — that is how we can tell whether sign-up itself is working — and it is not linked to an account until you have one.

You can turn all of it off. Settings ▸ Privacy ▸ "Share usage & crash data". It is a setting on your device rather than on your account, so it works before you sign in and while you are offline; switching it off stops collection at the source, including crash reporting, and discards anything already waiting to be sent. Nothing here is used for advertising, and none of it is sold.

The app asks for no location permission and reads no location, and it never reads your contacts: choosing someone from your address book uses your phone's own contact picker, so the app receives only the single contact you tap.

Who can see your data

Only the people you share it with. The members of a group see that group’s expenses; the members of a team see that team’s matches and dues. We do not sell or rent your personal data to anyone, and we do not use it for advertising.

Where your data lives

On servers in India (Mumbai region), with encryption in transit. Access is limited to the people who need it to operate and support the service.

Two things leave those servers, both to Google, and both may be processed outside India: the usage and crash data described above, and push notifications, which are delivered through Firebase Cloud Messaging — so a notification’s text passes through Google in order to reach your phone. We use no advertising networks and no third-party trackers.

Your choices

You can view and edit your profile at any time, turn notification channels off, turn usage and crash data off entirely, and ask us to delete your account and its data. Email us and we will action a deletion request within 30 days. Some records may be retained where another member of a shared group needs them for their own settled history.

Contact

Questions about this policy, or want your data deleted? Write to [email protected].