This Privacy Policy describes how Essby Fintech Innovations Private Limited (“VybePay”, “we”, “us”, or “our”) collects, uses, and protects your information when you use the VybePay mobile application (the “App”). If you are under 18, your parent or legal guardian must review and accept this policy on your behalf before you use the App.
1. Who We Are
Essby Fintech Innovations Private Limited
CIN: U62099HR2026PTC143178
Registered Address: VO-176, 7th Floor, WeWork HQ 27, B-660, Sushant Lok Phase I, Sector 27, Gurugram, Haryana 122009
Grievance Officer: Anuj Bairoliya
Contact: support@vybepay.com
2. Information We Collect
Information you provide
| What | Why |
|---|
| Name | Account creation and personalisation |
| Phone number | Account identification and family linking |
| Date of birth | Age verification; parental consent for users under 18 |
| Email address | Transactional notifications and weekly reports (optional) |
| Profile photo | Avatar personalisation (optional) |
| 4-digit PIN | App authentication — stored as a secure one-way hash, never in plaintext |
| Family code | Linking parent and teen accounts |
| Virtual activity data | Simulated savings goals, chores, pocket money, trades — educational only |
Automatically collected
- Device type and operating system — for bug diagnostics and compatibility
- App usage analytics (screen views, feature engagement) — aggregated and anonymised, for improving the app
- Push notification token — to deliver streak reminders and family alerts
- Crash and error logs — to fix bugs and improve stability
- IP address in server logs — for security and rate limiting only
What we do NOT collect
- Bank account numbers, UPI IDs, or any payment credentials
- Government ID numbers (Aadhaar, PAN, Passport)
- Biometric data — Face ID or fingerprint authentication happens entirely on your device and is never transmitted to us
- Location data of any kind
- Phone contacts
3. How We Use Your Information
- Provide the App — authenticate your account, display your virtual dashboard, enable family features
- Personalise your experience — recommend lessons, adapt quiz difficulty, time notifications smartly
- Transactional notifications — chore approvals, money requests, streak reminders, weekly reports (you can opt out in Settings)
- Improve the App — analyse anonymised, aggregated usage patterns to fix bugs and add features
- Security and fraud prevention — detect and block abuse, rate-limit requests
- Legal compliance — meet obligations under the IT Act 2000 and DPDP Act 2023
- Investor reporting — only anonymised and aggregated metrics (e.g. total users, feature adoption). No individual user data is ever shared with investors.
4. Children’s Privacy (DPDP Act 2023)
VybePay is designed for users aged 13–19 years.
- Users under 18 must have a parent or legal guardian approve their account before use.
- We do not knowingly allow children under 13 to register without verifiable parental consent.
- Parents linked to a teen account can view their teen’s in-app activity through the parent dashboard.
- Parents may request deletion of their child’s account and all associated data at any time by emailing support@vybepay.com.
- We do not serve targeted advertising to minors. We do not sell or share minors’ personal data with any third party for marketing purposes.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data.
Service providers
We work with a small number of carefully selected third-party service providers to operate the App — for example, cloud infrastructure, email delivery, and app analytics. Each provider is bound by a data processing agreement and is only permitted to use your data to perform services on our behalf. We share the minimum data necessary for each purpose.
We do not disclose the identities of our service providers publicly, as this is commercially sensitive information. If you would like more information, please contact us at support@vybepay.com.
Legal requirements
We may disclose data if required by law, court order, or a valid government request under the IT Act 2000 or applicable regulation. We will notify you of such a request to the extent permitted by law.
Business transfer
In the event of an acquisition, merger, or restructuring, your data may be transferred to the new entity. We will notify you before any such transfer and give you the option to delete your account.
6. Data Retention
| Data | Kept for |
|---|
| Active account | For as long as your account is active |
| Inactive account (no login for 24 months) | Deleted after 90-day advance notice via email |
| Crash logs and analytics | 90 days |
| Support tickets | 2 years from ticket creation |
| After account deletion | Permanently deleted within 30 days |
7. Security
We apply industry-standard technical and organisational measures to protect your data:
- Passwords and PINs are stored as secure one-way hashes — never in plaintext.
- Sensitive credentials on your device are stored in the platform’s secure hardware-backed storage (iOS Keychain / Android Keystore).
- All data in transit is encrypted using HTTPS/TLS. No unencrypted connections are permitted.
- Access to user data is restricted by strict, server-side rules — users can only access their own data and their linked family’s data.
- Third-party service credentials are stored exclusively on our secure server infrastructure and are never included in the app package.
If you discover a security vulnerability, please report it responsibly to support@vybepay.com.
8. Your Rights (DPDP Act 2023)
- Right to access — request a copy of your personal data we hold
- Right to correction — most data can be updated directly in the app; contact us for the rest
- Right to erasure — request deletion of your account and all personal data
- Right to grievance redressal — we respond within 48 hours and resolve within 15 working days
- Right to withdraw consent — opt out of non-essential notifications anytime in Settings → Notification Settings
- Right to nominate — nominate someone to exercise your rights in the event of your death or incapacity
To exercise any right, email us at support@vybepay.com from your registered email address.
9. Analytics and Cookies
The VybePay website and app do not use tracking cookies for advertising. We use first-party analytics tools to collect anonymised, aggregated usage data. You can opt out of in-app analytics in Settings → Privacy & My Data.
10. Changes to This Policy
When we make material changes, we will update the date at the top of this page, send an in-app notification, and for significant changes, request your re-consent before you can continue using the App.
11. Governing Law
This policy is governed by the laws of India, including the IT Act 2000 and the Digital Personal Data Protection Act 2023. Disputes are subject to the exclusive jurisdiction of courts in Gurugram, Haryana.
12. Contact Us