Privacy Policy

Effective 27 October 2026 · Applies to the EMI Bro Android app (package com.emibro.app) and this website.

1. Who we are

EMI Bro is published by EMI BRO, a sole proprietorship of Rishi Raj Dutta (Udyam UDYAM-WB-06-0074758), 3rd Floor, Anish Apartment, Old Gramin Bank Road, Lake Town, Siliguri, Darjeeling, West Bengal 734007, India ("we", "us"). We are the data controller for the personal data described here. Contact: support@emibro.in.

2. What we collect and why

EMI Bro is designed so that your financial data stays on your phone. Here is everything the app handles, where it lives and why.

We do not collect your location, contacts, call logs, SMS, precise device identifiers or advertising identifiers, and the app contains no advertising or analytics SDKs.

3. Notification access (auto-capture)

If you switch on Auto-capture spends in Settings and grant notification access in Android settings, EMI Bro reads the notifications posted by a fixed list of payment and banking apps (for example Google Pay, PhonePe, Paytm, bank apps and the SMS app) in order to recognise a debit: an amount paid, sent or debited.

• The notification text is parsed on your device. It is never uploaded, logged or shared.
• Only a recognised debit is kept, as an expense row: amount, a short payee name and a category. Credits, refunds, OTPs, requests, reminders and failed payments are ignored and discarded immediately.
• Notifications from any other app are ignored.
• You can turn this off at any time in Settings → Auto-capture, or by revoking notification access in Android settings. Each captured row has an Undo in the notification and a Remove in the app.

We use this access only for the feature described above, as required by Google Play's policy on the Notification Listener service.

4. AI processing

The coach, the automatic targets, the monthly ladder, the offer reader and the document reader are powered by large language models reached through OpenRouter, a service that routes requests to AI providers (currently OpenAI and Google models). Requests go from the app to a small relay server we operate, which adds our access key and forwards the request. When you use one of these features the app sends the minimum needed for that request:

• For the coach, targets and ladder: your first name, city, salary, rent, food and travel, your balance, the list of EMIs with amounts, due days, months left and rates, your recent expenses, Safe to spend today, your EMI-free date, your targets, streaks and badges, and your question or the recent chat turns.
• For the offer reader and the document reader: the image or PDF pages you chose and the numbers the on-device reader already found.

If you ask Bro AI a question by voice, your phone’s own speech service (Google’s on most Android phones) turns your words into text and reads the reply aloud. EMI Bro itself never records, stores or transmits audio; only the resulting text is sent to the AI provider like a typed question. The microphone is used only while the mic button is active, and the speech service runs under Google’s privacy policy.

We do not send your email, phone number, employer, device identifiers or notification text to the AI provider, and requests carry no account identity. Neither we nor the relay keep copies of requests or answers. Providers process requests under the OpenRouter privacy policy and their own terms; OpenRouter states that it does not use request content to train models. Never type passwords, OTPs or full card numbers into the chat.

5. Sharing

We do not sell personal data and we do not share it with lenders, advertisers or data brokers. The only third parties that process data are:

• Cloudflare: hosts our account server (account and membership records above).
• Brevo: sends our emails (your email address and first name).
• Meta (WhatsApp Business): sends your first sign-in link to your WhatsApp, once (your mobile number and first name). We send nothing else on WhatsApp: no reminders, offers or updates.
• PhonePe (PhonePe Payment Gateway): processes membership payments and UPI AutoPay mandates (the details you enter at checkout).
• OpenRouter and the AI model providers it routes to: AI requests described in section 4.

We may disclose data if required by law or to protect the rights and safety of users.

6. Retention and deletion

• Data on your device stays until you delete it: You → Settings → Delete account removes your profile, money data, expenses and chat history from the phone, and deletes your account and membership records from our server (an active membership is cancelled at the same time).
• If you no longer have the app, use the account deletion page and we will remove your account within 7 days.
• AI requests are not stored by us or by our relay. Provider retention is governed by the OpenRouter terms linked above.
• Payment records are kept by PhonePe, and invoice records by us, as long as tax law requires; they are not used for anything else.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws you may access, correct, export and erase your personal data and withdraw consent. Export is built in (You → Profile → Export your money data) and so is erasure. For anything else, write to support@emibro.in; we respond within 30 days. Our grievance officer can be reached at the same address.

8. Security

Data on your device is stored in the app's private storage, protected by Android's app sandbox and your device lock. Network requests use HTTPS. Passwords are handled by Firebase Authentication and are never stored by the app in plain text.

9. Children

EMI Bro is for adults managing their own finances and is not directed at children under 18. We do not knowingly collect data from children.

10. Changes

We will post any changes here and update the effective date. Material changes are announced in the app.

11. Contact

Write to support@emibro.in. We reply within 30 days.