Last updated: 17 October 2026. This policy explains how KittyPay at kittypay.in collects and uses personal data. It is a template — please have it reviewed before going live.
1. Who we are
KittyPay (“we”, “us”) is a record-keeping app that helps kitty / group-savings members track monthly contributions, payment verifications and payouts. KittyPay does not hold, move or process money. The group administrator who operates this site is the data fiduciary for your group’s records.
2. Personal data we collect
- Account details: name, login ID, mobile number, email address (optional) and an encrypted password.
- Group records: groups you belong to, contribution amounts, due dates, payout order and payout records.
- Payment records you submit: amount, date, payment method, UPI / bank transaction reference (UTR) and any screenshot you choose to upload.
- Payout receiving details you add, such as a UPI ID or bank account and IFSC.
- Group chat: messages and images you post in a group’s chat. Images are re-saved on upload, which removes hidden location (GPS) and camera data.
- Technical data: login cookies, IP address and timestamps recorded in the audit log for security.
We do not collect UPI PINs, card numbers, net-banking passwords or OTPs. Never share these with anyone, including administrators.
3. How we use your data
- To run your kitty group: show what is due, verify payments, schedule and record payouts.
- To send in-app notifications (and email, if enabled) about dues, verifications and payouts.
- To keep a tamper-evident audit trail so every change can be traced.
- To secure accounts, prevent fraud and duplicate submissions, and comply with law.
We do not sell your data and do not use it for advertising.
4. Consent and legal basis
We process your data with your consent, given when you accept an invitation or create an account, and for legitimate uses connected with operating your group, in line with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. You may withdraw consent by contacting us; this may mean you can no longer use the service, and records that must be retained (see section 7) will be kept.
5. Who can see your data
- You can see your own records.
- Group administrators and treasurers can see records needed to verify payments and manage the group, including payment screenshots.
- Group chat messages and images are visible to the active members of that group and to administrators and treasurers. Deleted messages are hidden from everyone and their images are removed.
- Other members of your group can see member names, the confirmed payout order and, if the administrator enables it, overall collection progress — not your payment screenshots or contact details.
- Your payout receiving details are visible to group members only while your payout is approved, so they can pay you if your group works that way.
- Our hosting provider stores data on our behalf. We may disclose data if required by law.
6. How we protect your data
Passwords are stored as one-way hashes. Payment screenshots are kept in a protected folder and are only served to authorised users. Access is role-based and every financial change is logged. No system is perfectly secure; please use a strong password and log out on shared devices.
7. How long we keep data
Financial records (contributions, verifications, payouts and the audit log) are kept for as long as your group needs them and for any period required by law, because they are the shared record of money paid between members. Verified records are corrected with new entries rather than deleted. Account details are removed or anonymised on request once they are no longer needed.
8. Your rights
- Access a summary of your personal data and how it is used.
- Correct or update inaccurate data (you can edit your profile; ask your administrator for anything else).
- Request erasure of data that is no longer required to be kept.
- Nominate another person to exercise your rights in case of death or incapacity.
- Raise a grievance (see below).
9. Cookies
We use only essential cookies needed to keep you logged in and to protect forms against misuse. We do not use advertising or tracking cookies.
10. Children
The service is intended for adults (18+). We do not knowingly collect data from children.
11. Contact and grievance officer
For privacy questions, requests or complaints contact the grievance officer at mikgautam78@gmail.com or (support phone — set in KittyPay Settings) (Mon–Sat, 10am–6pm IST). We aim to acknowledge within 48 hours and resolve within 30 days. You may also approach the Data Protection Board of India once it is operational.
12. Changes to this policy
We may update this policy. The “Last updated” date above will change, and significant changes will be notified in the app.