Privacy Policy

Effective Date: May 2026

1. The Zero-Knowledge Architecture

VanshWealth is engineered upon a strict Privacy-First, Zero-Knowledge architecture. We understand the highly sensitive nature of multi-generational wealth data. Therefore, all critical inputs—including exact net worth, debt distributions, and legacy vault nominees—are encrypted directly on your local device utilizing military-grade AES-256 protocols before any transmission occurs. Our cloud infrastructure stores this data exclusively as scrambled ciphertext. We do not possess the decryption keys to read, analyze, or access your specific financial values.

2. Data Collection & Processing

To successfully operate the application and provide secure synchronization, we collect and process the following specific data matrices:

  • Account Identifiers & AuthenticationEmail address, Full Name, and Date of Birth to establish secure authentication loops and identity verification. Biometric authentication (Face ID/Fingerprint) is processed entirely locally on your device hardware; we never collect, transmit, or store biometric templates.
  • Approximate Regional LocationWe capture your state of residence (India) or overarching country metadata during registration. This is explicitly required to load accurate regional taxation calculation models and apply localized currency formatting frameworks. We absolutely do not track real-time GPS coordinates, background location, or active physical movements.
  • User Photos & Interface AssetsShould you choose to personalize your command dashboard, our software permits the upload of a profile picture. This image asset is stored securely within an isolated cloud storage bucket and utilized entirely for localized user-interface rendering. Providing this photo is strictly optional and can be removed at any time.
  • Encrypted Payload SynchronizationFinancial ledger entries, asset valuations, debt matrices, and Joint Khata configuration pathways are synchronized to the cloud purely as encrypted ciphertext to enable multi-device access and spouse-syncing capabilities.
  • Telemetry Data & Infrastructure HealthAnonymous, non-identifiable transaction IDs, basic device hardware tokens, and aggregated crash reports are captured to coordinate secure sessions, process premium subscription tier authentications, and ensure global app stability.

3. Strict Non-Disclosure & Third-Party Infrastructure

VanshWealth actively rejects the advertising-supported business model. Your personal identity, location data, and encrypted financial footprints are never sold, rented, brokered, or exchanged with third-party ad networks, financial institutions, or marketing agencies. Data transmission is strictly limited to essential infrastructure partners (e.g., Supabase for encrypted cloud hosting, Resend for email authentication routing, and encrypted billing gateways) solely for the purpose of maintaining operational integrity. All partners comply with global security standards including SOC2 and ISO 27001.

4. Data Retention and Right to Absolute Erasure

You possess ultimate sovereign control over your digital footprint. Users may mandate total account and data destruction through two available vectors:

  • Initiating the automated "Deactivate Account" configuration mechanism embedded directly inside the application's Account Settings pane.
  • Transmitting a direct deletion mandate from your registered email address to our data controller desk at support@vanshwealth.com.

Upon triggering a deletion sequence, your profile identifiers, approximate location metrics, uploaded user photos, and all encrypted cloud tables enter an immediate 30-day secure deactivation hold. During this window, you may reverse the request and restore database access by re-authenticating with your original credentials. If no restoration action is executed within 30 days, your entire digital footprint is permanently, automatically, and irreversibly purged from our live production servers and backup clusters in compliance with the Information Technology Act, 2000 and global data protection frameworks.

*Note: Historical billing meta-records linked to premium subscription checkouts are securely retained only for the duration legally mandated for corporate audit, tax compliance, and anti-money laundering frameworks.

5. Policy Modifications

As our architectural sub-systems evolve, we may update this Privacy Policy. Any material changes to how we handle your encrypted data, location metrics, or personal identifiers will be communicated via direct email or a prominent notification within the VanshWealth application dashboard prior to the changes taking effect.

6. Contact the Data Controller

For legal inquiries, privacy concerns, encryption audits, or manual data erasure queries, our data controller desk is available at:
support@vanshwealth.com