Privacy Policy for Mapital

1. Introduction & Privacy Philosophy

Welcome to Mapital, a local-first, privacy-focused personal wealth application developed and operated by Sriam Systems Private Limited ("Company", "we", "us", or "our"). Mapital is designed to give you visibility and control over your financial information and planning.

Our core principle is Privacy by Construction:

• Local-First: Your financial records are primarily stored on your device in an encrypted local vault.
• Private by Design: We do not intentionally send your unencrypted financial records to our servers.
• No Selling of Personal Data: We do not sell, rent, monetize, or share your data with advertisers, data brokers, or third-party marketing networks.

By downloading, installing, or using the Mapital mobile or desktop application, you agree to the collection and use of information in accordance with this Privacy Policy.

This policy covers the Mapital app, our website, and our support communications. Their privacy practices may differ: the app is designed for local financial-record management, while the website may process the information needed to operate and secure the site and respond to visitors.

2. Information We Process & Collect

Because Mapital is built as a local-first system, we strictly minimize the information processed on cloud infrastructure.

A. Information Stored on Your Device

The following information is created and managed directly on your device, or in storage locations you personally control:

• Financial Data: The financial records and plans you create in Mapital.
• Attachments: Files you choose to add to a financial record are stored locally on your device.
• Vault Access Material: Information used to protect and recover your local vault.
• Backups (optional):If you create a backup, you may export it or save it in a location you choose, including personal cloud storage. The financial content in the backup is protected before you export or upload it, and we do not have access to its unencrypted contents.

B. Information Processed by Cloud Services (Control-Plane)

To provide account-based features, optional sharing and synchronization, and app reliability, Mapital processes limited information through cloud services:

3. How We Use Your Information

We process the minimal data described above exclusively for the following purposes:

1. Core Functionality: Authenticating your account, rendering your personal financial dashboard locally, and managing your local vault.
2. App Stability & Performance: Monitoring crash rates and resolving technical glitches through diagnostics.
3. Optional Sharing and Sync: Providing the sharing or synchronization features you choose to enable.
4. Subscriptions: Processing purchases and recording your subscription tier if you choose a paid plan.
5. Security & Compliance: Preventing unauthorized access, enforcing account protection, and responding to legal/regulatory requirements.
6. Website & Support: Operating, securing, and improving our website and responding to questions or requests you send us.

We DO NOT:

• Access or read financial records stored in your local vault as part of operating Mapital.
• Serve third-party targeted advertisements or track you across external websites/apps.
• Receive or store your full payment card number. Purchases are processed by the app store (Apple App Store, Google Play) or our payment provider, who share only your subscription status and entitlement with us.

4. Third-Party Service Providers

We use carefully selected service providers to operate account-based features, app reliability services, and our website. These providers process information only as needed to provide their services to us.

• Google Cloud: Used to operate Mapital's application backend and to process the limited account, service-operation, and optional-sharing information needed to provide the app.Privacy Policy:Google Privacy Policy
• Cloudflare: Used to host and protect our website and online services. When you visit the website, Cloudflare may process standard web-request information, such as IP address, browser or device information, security logs, and cookies. Privacy Policy:Cloudflare Privacy Policy
• App Store / Google Play (or our payment provider): Used to process subscription purchases if you choose a paid plan. Payment card details are handled by them, not us; we receive only your subscription status and entitlement. Privacy Policy:Apple Privacy Policy/Google Privacy Policy

We may add service providers as Mapital evolves. If a change materially affects how we process personal information, we will update this policy as required.

5. Private Sharing & Syncing

If you choose to use Mapital's shared wealth or household features:

1. You control what information you share, including portfolio summaries and, where available, transaction-level details.
2. Content is protected before it is shared or synchronized and is available only to the devices or household members you authorize.
3. To provide sharing and delivery, we process protected content only to relay it between the devices or household members you authorize. We do not use that content for advertising, profiling, or other unrelated purposes.
4. Protected content may be held briefly on our servers, in encrypted form only, until it is delivered to the intended recipient's device or the delivery window expires — whichever comes first — after which it is deleted. We cannot read its contents while it is queued.
5. You can change or stop sharing through the app's available controls. This prevents future sharing, but it cannot remove information that an authorized recipient has already received, retained, exported, or shared outside Mapital.

6. Data Retention & Deletion Policy

A. On-Device Vault Erasure

• You can delete your local vault at any time using the app's available deletion controls.
• Removing the app or clearing its data may remove locally stored information from your device.
• Deleting your local vault or removing the app does not delete encrypted backups you previously stored in your own cloud storage account or exported elsewhere. You manage and delete those copies directly through the storage provider or location where they reside.

B. Cloud Account Deletion

• You can request deletion of your Mapital account at any time, using the account-deletion option in the app or by contacting us.
• We handle verified account-deletion requests in accordance with applicable law. We may retain limited information where needed for legal, security, or fraud-prevention purposes.

C. General Retention

We retain cloud-based account, service-operation, diagnostic, website, and support information only for as long as reasonably necessary to provide the relevant service, meet the purposes described in this policy, or comply with applicable obligations. We may retain information in aggregated or de-identified form where permitted by law.

7. Data Security Safeguards

We use reasonable technical and organizational safeguards designed to protect your information, including:

• Safeguards for financial records stored in the local vault and for applicable transmissions.
• Access and authentication controls for account-based features.
• Measures designed to minimize sensitive information in diagnostics and logs.

No method of electronic storage or transmission is completely secure. While we work to protect your information, we cannot guarantee its absolute security.

8. Your Privacy Rights

Depending on your location, you may have rights under applicable privacy laws. To make a request, contact us using the details below.

• Data Rights: You may have rights to access, correct, export, restrict, or delete your personal information.
• Local-First Design: Your financial records are primarily stored on your device; optional features may process the limited information described in this policy.
• US State Residents: If you live in a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, or Virginia), you may have the right to access, correct, delete, or obtain a copy of your personal information, and to opt out of the sale or sharing of personal information — which we do not do.
• EEA / UK Residents: If applicable law grants you GDPR-equivalent rights, you may have the right to access, rectify, erase, restrict, or port your personal information, and to object to certain processing.
• International Transfers: Cloud services may process limited information outside your country. Where required by applicable law, we will use appropriate safeguards for such transfers.

9. Children's Privacy

Mapital is a general-audience financial-management app and is not designed specifically for children. We do not knowingly collect personal information from children in violation of applicable law. If we learn that we have done so, we will take appropriate steps to delete that information or obtain any required consent.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect app updates, new feature additions, or legal changes. We will update the "Last Updated" date and provide additional notice where required by applicable law.

11. Contact Us

If you have questions, feedback, or data privacy requests, please contact us. For general privacy questions, use our Email below; for a formal grievance or complaint, use our Grievance Officer contact: