NW Tracker — Privacy & Data

Who we are

NW Tracker is a personal net-worth tracker for individuals in India, published by Increpe Technologies. We are responsible for the data you give us and for what is set out in this notice. If the law requires more of us than this notice describes, the law governs.

If you have a question or a complaint about how your data is handled, or you want to exercise any of the rights set out below, write to support@increpe.com. That address reaches the person responsible for answering it. We will do our best to reply quickly, and to tell you where things stand rather than leave you waiting. Requests are handled one at a time by a person — there is no automated process behind that address.

We are not a bank, a broker, or an investment adviser. We move no money, connect to no accounts, and give no investment advice.

What we collect

Your name and email address, to create and secure your account and to send verification and password-reset codes.

The assets and liabilities you enter, including their names, categories, values, and the history of changes you record.

Your recurring financial obligations — the commitments you record such as rent, utilities, premiums and fees, with their amounts and how often they fall due. We record what you are committed to pay, never what you actually spent: there is no transaction history and no bank connection.

That is the complete list. We collect nothing automatically: no bank connections, no transaction feeds, no advertising or analytics trackers, no location, no contacts, no device fingerprinting.

Why we collect it

Solely to provide this app to you — to calculate your net worth, show how it has changed, and let you export it.

We do not sell your data, share it with advertisers or data brokers, or use it to build a profile of you.

How your data is protected

Your financial figures and the names you give your entries are encrypted with AES-256 before they are stored, using an encryption key unique to your account. Someone with access to our database sees ciphertext, not amounts.

This is strong encryption at rest. It is NOT end-to-end or zero-knowledge encryption: our servers can decrypt your data when there is a legitimate reason to, such as calculating your net worth or generating an export. We say so plainly because the alternative would be misleading.

The reason is a deliberate trade-off. A system that can restore your access through an email password reset must hold recoverable key material. We chose to keep normal password reset rather than claim a guarantee we could not honour.

All traffic between the app and our servers uses TLS. Your login session is stored in your device's secure keychain, not in ordinary app storage.

Where your data physically sits: we use Supabase, a managed database and authentication provider, to store it. Your records are held in Supabase's Mumbai region (ap-south-1), so they stay in India. Supabase processes this data on our instructions and for no purpose of its own. They are the only third party that holds your financial records.

Your rights

Access — you can see all your data in the app at any time, and export it.

Correction — you can edit or delete any entry.

Portability — you can export everything as a CSV file, including your full value history.

Erasure — you can delete your account. This destroys your encryption key and removes your records. You cannot undo it, and neither can we.

Nomination — the DPDP Act lets you nominate someone to exercise these rights on your behalf in the event of death or incapacity. This is not built into the app yet. Until it is, write to support@increpe.com to arrange it, or to act for someone who has died or lost capacity, and we will handle the request individually. We will ask for proof of identity and of your authority before acting on it.

Withdrawing consent

You consented to this processing when you created your account. You can withdraw that consent at any time by deleting your account, which erases your data permanently.

Because the only processing we do is providing the app to you, there is no partial withdrawal: without consent there is nothing for the app to do.

How long we keep your data

For as long as your account exists. We keep no separate archive of accounts after they are deleted.

Deleting your account destroys your encryption key and removes your records immediately.

We take no routine backups of the database, so there is no snapshot holding an older copy of your account and nothing for us to restore from. That is why we can tell you the deletion is final without qualifying it.

Changes to this policy

If we change what we collect or why, we will ask for your consent again and record the version you agreed to. You can see your current consent record in the app under Data & Privacy.