Legal

Privacy Policy

How FinActiv collects, uses, stores and protects your information — and the choices you have.

Effective: 1 September 2026 Last updated: 7 September 2026 Acuity Insights Pvt. Ltd.
In short: We use your data to power your financial score and planning insights. Account Aggregator access is read-only, consent-based and revocable. We do not sell your personal data. You can request access, correction or deletion anytime.

1. Who we are

FinActiv (“FinActiv”, “we”, “us”, or “our”) is a brand of Acuity Insights Private Limited, a company incorporated in India. We provide financial health scoring, planning tools and related digital services through our website and mobile applications (together, the “Services”).

This Privacy Policy explains how we handle personal information when you visit our websites, use our apps, or otherwise interact with FinActiv.

2. Scope

This policy applies to personal data processed in connection with:

  • the FinActiv website (home, blog, calculators and related pages);
  • the FinActiv mobile applications and web app at app.finactive.net; and
  • customer support and communications with you.

It does not cover third-party websites, banks, Account Aggregators, or apps that we do not control. Their privacy practices are governed by their own policies.

3. Information we collect

Information you provide

  • Account details — mobile number, name, and other profile fields you choose to share.
  • Onboarding & assessments — answers to risk, behavioural and planning questionnaires.
  • Communications — messages you send to support, feedback, or survey responses.

Information from linked financial accounts

  • With your explicit consent, financial information fetched via the RBI-regulated Account Aggregator (AA) framework — for example bank balances and statements, mutual fund / demat holdings, loans, and insurance details, as permitted by your consent artefact.

Information collected automatically

  • Device & usage — device type, OS, app version, IP address, approximate location derived from IP, crash logs, and product interaction events needed to operate and improve the Services.
  • Cookies & similar tech — see Cookies below.

4. Account Aggregator data

When you link accounts through AA:

  • access is read-only — we never receive your banking passwords, and we cannot initiate payments or move money;
  • data flows only through the regulated AA network under a consent you approve;
  • you can revoke consent at any time from FinActiv or your AA / FIU journey; revocation stops further fetches;
  • we use linked data to compute scores, insights and planning recommendations for you.
Important: Insights and scores are for informational and planning purposes only. They are not investment advice, a guarantee of returns, or a substitute for professional advice.

5. How we use information

We process personal data to:

  • create and manage your account and authenticate you (for example via OTP);
  • provide scoring, dashboards, simulations, calculators and planning features;
  • personalise content and recommendations based on your profile and linked data;
  • send transactional messages (login OTPs, security alerts, service notices);
  • respond to support requests and investigate abuse or fraud;
  • improve product quality, reliability and security (including analytics and debugging);
  • comply with applicable law, regulatory requests and our legal obligations; and
  • with your consent where required, send product updates or marketing — which you can opt out of.

6. Sharing & disclosure

We do not sell your personal data. We may share information only as needed with:

  • Service providers who help us operate the Services (hosting, messaging/OTP, analytics, customer support tools), under contractual confidentiality and security obligations;
  • Account Aggregators / financial information providers as part of the consent-based AA flow you initiate;
  • Professional advisors (legal, audit) under confidentiality;
  • Authorities when required by law, regulation, court order, or to protect rights, safety and security; and
  • Business transfers — if we undergo a merger, acquisition or restructuring, subject to appropriate safeguards.

7. Security

We use administrative, technical and organisational measures designed to protect personal data, including encryption in transit and at rest, access controls, and monitoring. No method of transmission or storage is 100% secure; we work to reduce risk and respond to incidents promptly.

8. Retention

We retain personal data only as long as needed for the purposes described above, including to provide the Services, resolve disputes, enforce agreements, and meet legal / regulatory retention requirements. When data is no longer required, we delete or anonymise it where reasonably practicable. After you revoke AA consent, we stop fetching new AA data; previously fetched data is handled per this retention approach and your deletion requests.

9. Your rights

Subject to applicable Indian law (including the Digital Personal Data Protection Act, 2023, as and when applicable to us), you may request to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • withdraw consent where processing is based on consent (including AA consent);
  • request deletion of your account / personal data, subject to legal retention needs;
  • opt out of non-essential marketing communications.

To exercise these rights, contact us using the details in Contact. We may need to verify your identity before fulfilling a request.

10. Cookies & similar technologies

Our websites may use cookies or local storage to remember preferences, keep sessions secure, and understand aggregate usage. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

11. Children’s privacy

FinActiv is intended for users who can form a valid contract under Indian law (generally 18 years or older). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be notified in-app or by email / SMS where appropriate. Continued use of the Services after an update means you acknowledge the revised policy.

13. Contact us

For privacy questions, data requests, or complaints, contact:

If you are unsatisfied with our response, you may escalate as permitted under applicable law / regulatory grievance mechanisms.