Privacy policy
What MoneyHQ collects, why, where it is stored and how to have it deleted.
Last updated 12 October 2026
This policy explains what information MoneyHQ ("we") handles when you use this website and the MoneyHQ app atapp.moneyhq.in.
What we collect
- Account: your email address and a one-way hash of your password (we never store the password itself).
- Broker session: when you click Login with Kite, Zerodha gives us a session token for market data. We store it encrypted and use it only to read market data. It expires every day. We never receive your Zerodha password or PIN.
- Your journal: stocks you shortlist and the notes you write about them.
- Technical logs: standard server logs (IP address, time, the page or API path requested) kept for security and troubleshooting.
The website itself uses no tracking cookies and no third-party analytics. The app uses one cookie to keep you signed in.
What we don't do
- We don't sell or rent your data.
- We don't place orders, move money or read your holdings or funds.
- We don't share your journal with anyone.
Where it is stored
On servers we operate in Amazon Web Services' Mumbai region (India). Data is sent over HTTPS, and the broker token is encrypted at rest. Database backups are kept for 7 days.
Your choices
You can disconnect Kite at any time from the account menu in the app (Disconnect Kite), which deletes the stored token. To delete your account and journal, email support@moneyhq.in from your account's address; we will confirm once it is done.
Changes
If we change this policy, we will update the date above.