Privacy Policy

Who processes your data

Finesse Enterprises Private Limited, the operator of LekhaLens. For any privacy question, or to ask us to delete your account entirely, write to support@lekhalens.com.

What we collect

Your account email address, the name and phone number you give at sign-up, and the transaction data contained in the bank statements you choose to upload (dates, amounts, descriptions, merchants, categories).

If you write a review

If you submit a review on our reviews page, we store the name and description you chose to display, the rating and text you wrote, and your email address. You do not need an account to write one.

We publish the name, description, rating and text — as written — once someone has read it. Nothing you submit appears on the site until then, and we may decide not to publish it at all. Your email address is never published; we keep it only to reach you about your review, and we do not add it to a mailing list.

We only publish it because you ticked the box saying we may, and we keep a record that you did. You can withdraw that at any time by emailing support@lekhalens.com — we take the review down, with no need to give a reason. A published review is not removed automatically when you delete your account or your data, because most reviews are written by people who never had an account; email us and we will remove it.

How we use it

Solely to provide the app's features to you — displaying and analysing your own finances. We do not sell, rent, or share your financial data with advertisers or other third parties.

Where it's stored

Your data is stored in a managed PostgreSQL database (Supabase). Sensitive statement fields are encrypted at rest — see our Security statement for specifics.

Payments

Card and UPI payments are processed by Razorpay. Your card, UPI or bank details are entered on Razorpay's payment form and are never sent to, or stored on, our servers — we keep only the payment reference, the amount, and what it bought.

AI processing (optional)

Categorisation and insight features are optional. When you trigger them, a summary of the relevant transactions is sent to Anthropic's API to generate the result. This data is not used to train models. If you don't use these features, none of your data is sent for AI processing.

Who else processes your data

We do not sell or share your data, and the only companies that process any of it on our behalf are these:

Supabase — hosts the database your account and transactions are stored in, and handles sign-in.

Razorpay — processes payments. It receives your card, UPI or bank details directly, along with the amount and what it bought; we never see them.

Anthropic — receives a summary of the relevant transactions, and only at the moment you use one of the optional AI features.

No one else receives your financial data. We do not share it with advertisers, data brokers, or analytics providers.

Your control over your data

From the Profile tab you can download a copy of all your data (JSON) at any time, and permanently delete all of it — transactions, uploads, entities and learned rules — with one action. Deletion removes those records from our database and resets your plan; your login stays active so you can start fresh. To close your account entirely, contact us.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights over your personal data. All of them are exercised by writing to us at the address below, and most of them you can exercise yourself from inside the app.

Access and information. You can ask us for a summary of the personal data we hold about you and how we process it, and for the identities of everyone we have shared it with — that list is the section above. The Profile tab's JSON download gives you the data itself, in full, without asking us.

Correction and completion. Your name and phone number are editable on the Profile tab, and every classification the app assigns — the head, the sub-head, your own description of a transaction, and the name shown for a payee — can be corrected by you and will stay corrected. Bank statement lines are kept exactly as your bank issued them, because they are the record we reconcile against; if you believe we have read one incorrectly, write to us. For anything else that is wrong, ask us and we will correct it.

Erasure. Delete all of your data from the Profile tab whenever you like, or write to us to close your account entirely. We erase it when you ask, except for the payment and invoice records described under Retention, which Indian tax law requires us to keep.

Nomination. You may nominate another person to exercise these rights on your behalf if you die or become incapacitated. There is no form to fill in — write to us naming the person and how to reach them, and we will record it against your account. A nominee acting on that nomination should write to us with proof of death or incapacity and proof of their own identity.

Withdrawing consent. You can stop using the optional AI features at any time and nothing further is sent for AI processing; there is no setting to change. Because the rest of your data is what the app exists to show you, withdrawing consent to process it means deleting it or closing your account, both of which you can do as described above.

Grievance redressal

If you are unhappy with how we have handled your data or answered a request, raise a grievance on our contact form — no account is needed — or write to support@lekhalens.com with "Grievance" in the subject line. Either reaches our Grievance Officer, Shreekant Srivastava, at Finesse Enterprises Private Limited, 258 Nehru Nagar, Patna, Bihar 800013, India. We acknowledge grievances within two working days and aim to resolve them within 30 days.

If we have not resolved it within that period, or you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

Retention

We retain your financial data until you delete it or close your account. Deleting your data removes your transactions, classifications, entities and the billing address you gave us.

Two things survive that, because the law requires it of us rather than of you: the record of what you paid, and any tax invoice we issued to you. Indian GST law requires a supplier to keep its invoices for 72 months from the due date of the annual return for that year. A retained invoice carries the name, address and GSTIN that were on it when it was issued, and nothing else about your account.

Contact

Questions about privacy? Email support@lekhalens.com.