Privacy Policy

Effective 16 July 2026

1. Who we are

Karify (karify.in) is operated by Content List Private Limited ("Karify", "we", "us"). This policy explains what personal data we process, why, and the choices and rights you have. It is written to comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") and to align with the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. What we process, and when

Data that stays on your device (we never receive it)

• Calculator inputs and results, including PAN, salary, income, deductions, and the figures used to prepare draft ITR JSON. These are stored in your browser's local storage.

Data we process only if you sign in

• Account data: your email address (and, if you use Google sign-in, the basic profile Google returns), handled through our authentication provider.
• Synced calculations: if you sign in, your saved calculations are stored in our database so you can access them across devices. You can delete them at any time (see Section 6).

PAN, salary, and financial information are "sensitive personal data or information" under the SPDI Rules. We collect such data only with your consent and only for the purposes below.

3. Why we process it

• To provide the calculators and prepare draft returns you request.
• To let you save and sync your calculations across devices (only if you sign in).
• To authenticate you and keep your account secure.

We do not sell your data, use it for advertising, or share it with data brokers.

4. Where your data is stored and who processes it

• Hosting / delivery: Cloudflare Pages (edge delivery of the app).
• Database, authentication & storage: Supabase, hosted in the ap-south-1 (Mumbai, India) region.
• Sign-in with Google: if you choose it, Google processes your authentication.

These providers process data on our behalf under their own security and privacy commitments.

5. How we protect it

• Data in transit is encrypted (HTTPS/TLS).
• Synced data is protected by row-level security so each account can reach only its own records.
• We run no third-party advertising or tracking scripts. The app enforces a strict Content-Security-Policy.
• Any analytics we add are privacy-preserving and cookieless, and do not identify you.

6. Your rights and choices

• Access & correction: your synced data is visible in the app; you can edit or overwrite it at any time.
• Erasure: use Account → "Delete my synced data" to permanently delete your synced calculations. To delete your account entirely, contact us (Section 8).
• Withdraw consent: sign out to stop syncing; data left only on your device stays under your control.
• Local data: clearing your browser storage removes the on-device data at any time.

7. Retention

We keep synced calculations while your account is active. When you delete your data or account, we remove the associated records. On-device data persists only in your browser until you clear it.

8. Grievance Officer

In accordance with the SPDI Rules and the DPDP Act, you may contact our Grievance Officer with any question, complaint, or request regarding your personal data. We aim to acknowledge and address grievances within the timelines required by law.

9. Children

Karify is intended for adults filing their own taxes and is not directed at children.

10. Changes to this policy

We may update this policy as the product or the law evolves. Material changes will be reflected here with a new effective date.