This Privacy Policy explains how Ghoghamba CardMate collects, uses, protects and retains your personal information when you use our credit card management application.
1. Overview and Legal Compliance
Ghoghamba CardMate ("we," "our," or "us") is deeply dedicated to maintaining the highest standard of privacy protection for users of our credit card management application. Our data handling procedures strictly conform to India’s Digital Personal Data Protection Act (DPDPA), 2023, along with relevant financial technology guidelines released by the Reserve Bank of India (RBI). We gather and manage personal information strictly under principles of explicit consent, purposeful collection, and stringent data minimization. We enforce modern technical safeguards and organizational policies to secure your data against any unpermitted access or compromise. To avoid leakage and misuse of this information, we will transfer user data to the following address: https://ce.ghoghambacardmate.com
2. Data Categories, Purpose of Collection, and Safety Protocols
To provide seamless credit tracking, enhance account protection, and ensure overall stability, we process the specific categories of data outlined below:
Phone Number (Mandatory)
Purpose & Usage: Required for verifying your identity, sending One-Time Passwords (OTPs), linking your credit accounts, and delivering critical transaction alerts.
Protection: Encrypted using industry-standard AES-256 algorithms and kept within isolated database architecture.
Email Address (Optional)
Purpose & Usage: Used for account recovery, delivering monthly statement digests, and addressing support queries.
Protection: Handled through secure communication tokens; never shared with third parties for promotional purposes.
Camera and Image Information (Optional)
Purpose & Usage: Allows you to scan physical card statements, capture identification documents for KYC, or attach billing receipts.
Protection: Accessible only when actively triggered by you in the foreground. No background recordings take place, and images are transmitted via encrypted pipelines.
Emergency Contact Information (Mandatory)
Purpose & Usage: Functions as a secondary contact route reserved solely for unusual account security locks or urgent anti-fraud verifications.
Protection: Stored in pseudonymized/hashed forms with restricted staff access. It is strictly never used for sales or telemarketing.
Identifiers: User ID, Device ID, and Advertising ID (Optional)
Purpose & Usage: User and Device IDs maintain stable user login sessions and guard against unauthorized takeovers. Advertising IDs tailor in-app promotional experiences.
Protection: Disassociated from your real identity. Advertising IDs can be reset or turned off at any time via your device settings.
Approximate Location Data (Optional)
Purpose & Usage: Confirms that app requests originate within authorized geographic regions in India to detect potential unauthorized remote transactions.
Protection: Converted into generalized regional coordinates; we do not track or archive your continuous movement history.
Application Crash Logs (Mandatory)
Purpose & Usage: Helps our technical team analyze system failures, patch software bugs, and keep the application operating smoothly.
Protection: Stripped of all personal identifiable details prior to transmission to our error monitoring systems.
Installed Application List (Mandatory)
Purpose & Usage: Inspects installed software packages for rogue remote-access applications or financial malware targeting your credit information.
Protection: Processed on-device through temporary hash comparisons; no permanent list of your apps is ever compiled or uploaded.
Call Log Access (Optional)
Purpose & Usage: Enables immediate automated cellular verification during account sign-up without manual intervention.
Protection: Invoked exclusively during the registration window. Call records are never read, copied, or stored on server infrastructure.
Device Environment Data (Storage, Battery, Bluetooth, Hardware, Memory, Network Status, Sensors) (Mandatory)
Purpose & Usage: Evaluates hardware parameters, storage capacity, power levels, network status, and sensor metrics to construct a unique security fingerprint, protecting against automated bot attacks.
Protection: Combined into a non-reversible cryptographic hash token strictly used for platform integrity and rendering optimization.
SMS Permission (Optional)
Purpose & Usage: Parses financial SMS messages (such as credit card alerts, due date notices, and balance updates) to automatically build your financial tracking dashboard.
Protection: All analysis occurs locally on your phone. Personal and non-financial messages are strictly filtered out and never processed.
3. Storage, Rights, and Data Retention
- Data Security in Transit: All network communication is fortified with Transport Layer Security (TLS 1.3).
- Retention Policy: Records necessary for financial compliance are retained as mandated by Indian legal guidelines.
- User Privacy Rights: You possess the right to revoke consent or request the complete deletion of your profile and data through our support channels. Non-statutory records will be erased within 15 business days.
4. Official Contact Information
- Official Website: https://www.ghoghambacardmate.com
- Privacy Policy Link: https://www.ghoghambacardmate.com/privacy-policy
- Customer Support Email: business@ghoghambacardmate.com
Questions about this policy? Reach out to our team.