Privacy Policy

Last Updated: October 10, 2025

Privacy at a Glance

Your data is encrypted

Bank-level 256-bit encryption

No selling your data

We never sell to third parties

You own your data

Export or delete anytime

Indian compliance

Compliant with IT Act 2000

1. Introduction

Welcome to Lekhhaa (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our expense tracking and financial management application.

By using Lekhhaa, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you register for Lekhhaa, we collect:

  • Name and email address
  • Account credentials (encrypted password)
  • Business information (if applicable)
  • Profile information you choose to provide

2.2 Financial Data

To provide our services, we collect and store:

  • Income and expense transactions
  • Transaction amounts, dates, and descriptions
  • Category and payment method information
  • User-generated notes and tags

2.3 Technical Information

We automatically collect certain information:

  • Device information (type, OS, browser)
  • IP address and location data
  • Usage data and analytics
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve Lekhhaa's features and functionality
  • User Support: To respond to your inquiries and provide customer support
  • Security: To protect against fraud, unauthorized access, and security threats
  • Analytics: To understand how users interact with our service and improve user experience
  • Communication: To send important updates, security alerts, and promotional messages (with your consent)
  • Legal Compliance: To comply with applicable laws and regulations

4. Data Security

We implement robust security measures to protect your data:

  • Encryption: All data is encrypted in transit (SSL/TLS) and at rest (AES-256)
  • Secure Authentication: Password hashing with bcrypt and secure session management
  • Access Controls: Strict access controls and regular security audits
  • Data Centers: Hosted on secure, compliant infrastructure
  • Regular Backups: Automated backups with disaster recovery procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We continuously work to improve our security practices.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

  • With Your Consent: When you explicitly authorize us to share information
  • Service Providers: With trusted third-party service providers who assist in operating our service (under strict confidentiality agreements)
  • Legal Requirements: When required by law, court order, or government authority
  • Business Transfers: In case of merger, acquisition, or sale of assets (with notice to you)
  • Protection of Rights: To protect our rights, property, or safety, and that of our users

6. Your Rights and Choices

Under Indian law and international privacy standards, you have the following rights:

  • Access: Request a copy of your personal data we hold
  • Correction: Update or correct your personal information
  • Deletion: Request deletion of your account and associated data
  • Data Portability: Export your data in a machine-readable format
  • Opt-out: Unsubscribe from promotional communications
  • Withdraw Consent: Withdraw consent for data processing (where applicable)

To exercise these rights, please contact us at privacy@lekhhaa.com

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal, accounting, or security purposes. Backup copies may persist for up to 90 days.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. These include:

  • Essential Cookies: Required for authentication and security
  • Analytics Cookies: Help us understand usage patterns
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. For more details, see our Cookie Policy.

9. Children's Privacy

Lekhhaa is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately, and we will take steps to delete such information.

10. International Users

Lekhhaa is primarily designed for users in India. If you access our service from outside India, please note that your information may be transferred to, stored, and processed in India where our servers are located. By using Lekhhaa, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the “Last Updated” date. For significant changes, we will provide additional notice, such as an email notification.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Compliance & Standards

Lekhhaa is committed to compliance with:

  • Information Technology Act, 2000 (India)
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • General Data Protection Regulation (GDPR) principles
  • Industry best practices for data security and privacy