Privacy Policy – Griftx

Effective Date: [Insert Date]

Last updated: [Insert Date]

Griftx ("we," "our," "us") is a personal finance and budgeting platform designed for users in Pakistan. We are committed to protecting your privacy in compliance with applicable laws, including but not limited to the regulations set by the State Bank of Pakistan (SBP), SECP, and PTA. This Privacy Policy outlines how we collect, process, and protect your data when you use the Griftx mobile app and website ("Service").

1. Legal Compliance

Griftx is committed to:

  • Complying with SBP guidelines on consumer protection in digital financial services
  • Adhering to SECP regulations for digital platforms
  • Respecting PTA's guidelines on data protection, user consent, and digital content
  • Ensuring alignment with Pakistan's Personal Data Protection Bill (in draft as of now)

2. Information We Collect

2.1 Personal Information

  • Name, email address, mobile number (required for registration)
  • CNIC (only when required for KYC verification, with consent)

2.2 Financial Information

  • Income, spending categories, and budget goals (manually entered by users)
  • Transaction alerts or bank-linked data (if the user opts in through proper consent)

2.3 Device & Usage Data

  • Device type, operating system, and session analytics
  • IP address, time stamps, and referral sources (for security and optimization)

3. Purpose of Data Collection

Your data is collected and used to:

  • Deliver personalized financial insights and budgeting support
  • Improve app performance and user experience
  • Send timely notifications related to expenses, reminders, or updates
  • Ensure user security and fraud prevention
  • Comply with legal, regulatory, or audit requirements

We do not use your personal or financial data for advertising or sale to third parties.

4. User Consent and Rights

By using Griftx, you consent to our use of your data as described in this policy. You have the right to:

  • Access, update, or delete your personal information
  • Withdraw consent to non-essential data collection at any time
  • Contact us to request explanation or restriction of your data usage

5. Data Storage and Retention

  • All data is securely stored on servers in compliance with SBP and PTA guidelines
  • User data is retained only as long as necessary for service delivery or regulatory compliance
  • We follow strict encryption and access protocols to ensure data confidentiality

6. Data Sharing and Third Parties

We may share your data only in the following cases:

  • With third-party service providers (e.g., cloud hosting, analytics), bound by confidentiality
  • With regulatory bodies, law enforcement, or audit authorities if legally required
  • During a merger, acquisition, or restructuring (with prior user notification)

We do not share, sell, or rent your personal data for any marketing purposes.

7. Data Protection Measures

  • SSL/TLS encryption for all data transmissions
  • Role-based access control for data handling
  • Continuous vulnerability testing and internal monitoring
  • Two-factor authentication (2FA) options for user accounts

8. Children's Privacy

Griftx is intended for users aged 18 and above. We do not knowingly collect personal information from children.

9. Grievance Redressal & Contact

If you believe your data has been misused or have any concerns, you may contact our Data Protection Officer:

  • Email: privacy@griftx.com
  • Address: NIC Hyderabad, Pakistan

You may also approach relevant authorities:

10. Updates to the Policy

We may revise this policy from time to time. Users will be notified of significant changes through the app and/or email. Continued use of Griftx after updates constitutes your agreement to the revised terms.