Privacy Policy

Mr. Fino is a financial-education product operated by RETURNX EDUMODE LLP (“we”, “us”, “our”), registered at Chennai, Tamil Nadu, India.

This Privacy Policy covers the Mr. Fino website and the Mr. Fino mobile app for iOS and Android — both run on the same account and the same backend. It explains what data we collect, why we collect it, how we keep it safe, and what choices you have. By using Mr. Fino, you agree to this policy.

We only collect the data needed to run the product:

• Account data — name, email, password (hashed), phone number (if you verify it) and email-verification status.
• Personal details — date of birth, dependants, city, occupation. You enter these once and can edit them anytime.
• Assessment inputs — your income, expenses, savings, debt, insurance and habit answers. Used only to compute your Mr. Fino score and personalise your report and action plan.
• Vault entries — what you choose to record about what you own, owe and are protected by: the item and where it is held, its value or outstanding balance, the monthly amount going in or out, renewal and maturity dates, the nominee you have named, and — where you add them — the policy or account number, your agent or advisor's name, phone and email, and your own remarks.
• Papers — files you choose to upload against a Vault entry or a Papers row (a policy PDF, a property paper, an identity document). We store the file, its name, type and size. Nothing is extracted from it and nothing is read out of it.
• Financial Lifestyle check-up — if you take it, your answers and the AI-written report generated from them.
• Messages you send us — questions submitted through the “Ask Mr. Fino” bubble, the contact form, quote or help requests, and live-chat messages in the app. Our team reads these to respond to you.
• Game activity — level progress, answers, scores and money-saved figures from the in-app money games, so your progress syncs across devices.
• Payment records — if you buy a paid plan: the plan, amount, payment status and the payment reference from our payment processor. We never see or store your card, UPI or bank credentials (see “Payments” below).
• Push notification tokens — if you enable notifications in the app, a device push token so we can deliver alerts. Removed when you sign out or disable notifications.
• Usage telemetry — basic device, browser and page-view information so we can debug issues and improve the product.
• Activity & security logs — records of key account actions (such as logins, profile changes and payments) including your IP address and device/browser user agent, used for security, fraud prevention and support. Retained for up to 180 days.

We do not ask for your bank login, scrape your bank statements, or pull data from any third-party financial provider.

This is the section that matters most, so it is written plainly rather than carefully.

The figures you enter are yours to read, and nobody else's. That covers your check-up answers, everything in your Vault — values, balances, EMIs, renewal dates, nominee names, policy and account numbers, your agent's contact details and your own remarks — and every document you store in Papers. Inside Mr. Fino, they are visible on your own signed-in screens and nowhere else.

Almost nobody here can read them, and we log the ones who can. Most of the internal console cannot show your figures at all: our support and admin tools show which fields you have filled, how many entries a section holds, when you last edited it, your score and the ratios the score is computed from — not the amounts. That is how those screens are built, not a rule we ask staff to follow.

There are two deliberate exceptions. The first: a support screen lists the members who have a Vault date falling due, and it shows what that item is, what it costs and its policy or account number — because an agent cannot offer help with a renewal they cannot name. It is limited to items with a date arriving, it is restricted to staff granted that specific permission, and every single time somebody opens it we record who they were and which day they looked at. You can ask us for that record.

The second: staff granted a separate permission can see the answers behind your score and your Financial Lifestyle check-up (your income, spending, EMIs, cover and the check-up responses), so a coach can help you with your actual numbers. Every time one of them views these, we record who it was and whose answers they opened.

When we choose who receives a message (for example “members with a loan”), the console checks only whether you have a loan or a policy in your answers or your Vault — never the amount, the lender or the policy itself.

Outside those two screens, the rest stays unreadable to us: your other holdings, your nominee names, your agent's contact details, your remarks and the contents of every document you store. Those values are not sent to the console at all.

We do not sell, rent, trade or share your financial data. Not with advertisers, not with insurers, lenders, brokers or distributors, not with our referral partners, not with data brokers. It is never used to target advertising, and it never leaves the processors listed in “Third-party processors” below, each of which is contractually bound and none of which is permitted to use it for its own purposes.

There are exactly two exceptions, both named here so that the promise above stays true:

1. The Financial Lifestyle add-on, if you buy it. That add-on exists to give you a written report and a qualified person's sign-off on it. To produce it, your check-up answers are sent to Anthropic (Claude), acting as our processor under contract, which writes the report and does not use your data to train its models. A reviewer at Mr. Fino then reads that report in order to sign it off and add their own note — that human review is the service you paid for. If you do not buy the add-on, neither of these happens, and your data is never sent to Anthropic.
2. A lawful order. If a court or a competent Indian authority compels disclosure, we comply. We will tell you unless we are legally barred from doing so.

Documents are stored privately. A file you upload is never given a public address. When you open one, we issue a link that works only for you and expires shortly afterwards. Deleting the entry deletes its documents with it, and deleting your account deletes the stored files themselves, not just the records pointing at them.

Deleting your account removes all of it — Vault entries, documents in Papers, check-up answers, any Financial Lifestyle report, your assessments and your score history — in a single pass. See “Your rights” below for exactly what survives and why.

Strictly to operate Mr. Fino:

• Compute your 0–100 Financial Health Score and breakdowns.
• Generate your personalised report, action plan and progress history.
• Send transactional emails (verification, password reset, score summary) and — if you have the app with notifications on — helpful nudges about your score, games and requests. You can turn app notifications off in your device settings at any time.
• Process paid-plan purchases and issue invoices.
• Respond to your messages and support requests.
• Diagnose bugs and improve the product.

• We never sell your data.
• We never share your data with advertisers.
• Our staff never read your nominee names, your remarks or your uploaded documents, and cannot: the internal console is built so that it cannot show them. Your other figures are visible to staff in one place only — the support screen for Vault dates falling due, described in section 3 — and every use of it is logged.
• We never share your financial data with insurers, lenders, brokers, distributors or our referral partners.
• We never read your bank account or credit-card statements.
• We never connect to your bank, and we never ask for a bank login or a one-time passcode belonging to any bank or payment app.
• We never store your card, UPI or banking credentials — payments are handled entirely by our payment processor.
• We never use your data to train an AI model of our own, and the processor that writes Financial Lifestyle reports is contractually barred from training on it.

Your account and assessment data is stored on managed MongoDB Atlas infrastructure with encryption at rest. All traffic between your browser or app and our servers uses HTTPS/TLS. Passwords are hashed with bcrypt (12 rounds) — we cannot read them, even internally.

Web sessions use HttpOnly JWT cookies issued via NextAuth, which protects against XSS-based token theft. The mobile app authenticates with short-scope bearer tokens kept in your device's secure storage (Keychain on iOS, Keystore on Android). Every request to our API is validated server-side with strict schemas before it touches the database.

The app also keeps a small local cache of your own data on your device (your sections, score and game progress) so screens load instantly; it is scoped to your account and cleared when you sign out.

Paid plans are processed by Razorpay. Your card, UPI or bank details go directly to Razorpay and never touch our servers — we receive only the payment reference, amount and status needed to activate your plan and issue an invoice. If you turn on auto-renew, the recurring payment mandate is created and held by Razorpay; we store only its subscription reference and status, so we can show your renewal date and stop it when you turn auto-renew off. Invoices are issued by RETURNX EDUMODE LLP. See Razorpay's privacy policy for how they handle payment data.

We rely on a small number of vendors to run the service. Each receives only what it needs and is bound by its own contractual privacy terms:

• MongoDB Atlas — encrypted database hosting.
• Vercel — application hosting and CDN.
• Resend — transactional email delivery (account verification, password reset, score summary).
• Wacto — WhatsApp delivery of one-time passcodes. Your phone number is shared with Wacto only to send the OTP when you verify or sign in by phone.
• Razorpay — payment processing for paid plans (see “Payments” above).
• Expo — push-notification delivery for the mobile app (your device push token is shared to deliver alerts).
• Anthropic — writes your Financial Lifestyle report from your check-up answers, only if you buy that add-on. Anthropic processes the data on our instructions and does not use it to train its models. Nothing is sent to Anthropic for members who do not buy the add-on.
• Vercel Blob — private storage for documents you upload to Papers. Files are stored without public addresses and are reachable only through short-lived links issued to you.

We do not run third-party advertising or analytics scripts that identify you personally.

We use first-party cookies only:

• Authentication — an HttpOnly session cookie that keeps you signed in on the web.
• Referral attribution — if you arrive through a partner's link, a mrfino_ref cookie remembers the partner's code for 30 days so the referral can be credited if you sign up or contact us (see “Referrals” below).
• Preferences — small conveniences such as remembering a dismissed banner.

We do not use third-party tracking cookies.

Mr. Fino has a partner programme. If you reach us through a partner's referral link (or enter their code at signup), we record which partner referred you. That partner can see that their referral converted — including the basic contact details you provide on signup or in a referred enquiry — so we can credit them. Partners never see your assessment inputs, score details, messages or payment information.

The in-app money games store your level progress and scores so they sync across devices. The leaderboard is pseudonymous by design: other players see a generated handle (like “Player #12345”) and your scores — never your name, email or any personal detail.

You can access and edit your data from your account settings on the web (/my/settings) or in the app. The same screen has a Danger Zone where you can deactivate or permanently delete your account yourself — no email or support ticket needed. You can still write to hello@mrfino.com if you would rather we did it for you; we act on those requests within 30 days.

Deactivating pauses your account: notifications stop and your profile goes quiet, but nothing is deleted. Sign back in at any time and we will offer to reactivate it.

Deleting happens immediately, and cannot be undone. We confirm it with a code sent to your registered email (and WhatsApp, if your number is verified), then erase your assessments, reports, your Vault and everything in it, the documents you stored in the Papers (the files themselves, not merely the records pointing at them), your Financial Lifestyle check-up and any report written from it, your plan, requests, support and community messages, notifications, personal details, game progress, activity logs and the account record itself. Messages you posted in a community group remain in place as “deleted message” placeholders so other members’ conversations stay readable, with your name and content removed.

Two things deliberately survive. Paid invoices are kept as long as tax law requires, with your account reference and payment metadata stripped so they can no longer be linked back to you. And we keep a single record of the deletion itself — your name, email address and phone number, plus the dates the account was opened and closed and who closed it — so we can show that the request was honoured. Aggregated, fully-anonymised analytics may also be retained. Activity and security logs for accounts that have not been deleted (including IP address and device/browser user agent) are kept for up to 180 days for security, fraud prevention and support, then deleted.

Mr. Fino is intended for users 18 or older. We do not knowingly collect data from anyone under 18.

If we make material changes, we'll update the effective date at the top of this page and notify signed-in users by email when appropriate. Continued use after a change means you accept the updated policy.

Questions about this policy? Email hello@mrfino.com or visit our contact page.