Privacy Policy

Effective date: June 1, 2026 · Version 1.0

1. Who We Are

FreeBy44 is operated by Dreamverna, a software company based in India. This Privacy Policy explains what personal data we collect when you use FreeBy44, how we use it, and your rights over it. It is written in plain language to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable IT Act rules.

FreeBy44 is a privacy-first website. We do not connect to your bank, we do not read your financial accounts, and we do not use your data for advertising. Everything you enter is entered manually by you, for you.

2. What Data We Collect

We collect two categories of data:

A. Account Data (from Google OAuth)

Your name
Your email address
Your Google profile picture (optional, display only)

We receive this from Google when you sign in. We do not receive your Google password or access any other Google services.

B. Financial Data (entered manually by you)

Asset names, categories, and current values
Monthly snapshot data (invested and current amounts per asset)
Monthly income, total investments, and total expenses
Outstanding liability names, amounts, and EMIs
Insurance policy details (provider, coverage, renewal dates)
FIRE settings (target corpus, SWR, inflation rates, expense baseline)
Milestones and sinking fund targets

This data is entered entirely by you. We never pull it from banks, brokerages, or any external financial source.

C. Session Data

NextAuth.js uses a secure, HTTP-only session cookie to keep you logged in. This cookie contains no financial data — only your authentication token. It expires when you log out or after a period of inactivity.

What we do NOT collect: bank account numbers, card details, Aadhaar, PAN, passwords, location data, device identifiers, or any data from third-party financial platforms.

3. How We Use Your Data

We use your data solely to provide the FreeBy44 service to you:

Authenticate your identity and maintain your session
Store and display your financial data across sessions
Compute your dashboard metrics, FI ratio, and corpus projections
Show milestone progress, savings rate, and lifestyle creep signals
Generate the Monthly Plan section on the Cash Flow page

We do not use your data for advertising, profiling, analytics resale, model training, or any purpose beyond operating the website for you.

4. Data Storage and Third-Party Processors

Your data is stored and processed by the following services on our behalf:

MongoDB Atlas

All financial data you enter is stored in a MongoDB Atlas cloud database. MongoDB Atlas is operated by MongoDB, Inc. and is subject to MongoDB's security and compliance standards. Data is encrypted at rest and in transit.

Vercel

The website is hosted and served by Vercel, Inc. Vercel processes web requests to deliver the website to your browser. Vercel may log standard request metadata (IP address, timestamp) for security purposes.

Google (OAuth only)

Google provides authentication via OAuth 2.0. We receive only your name, email, and profile picture from Google. We do not access your Gmail, Google Drive, or any other Google service. Google's use of data during authentication is governed by Google's Privacy Policy.

No other third parties receive your data. We do not use advertising networks, analytics platforms (e.g. Google Analytics), or data brokers.

5. No Selling or Sharing of Your Data

Dreamverna does not sell, rent, or share your personal or financial data with any third party for their own purposes — ever. Your financial data is yours. The only parties who ever access it are the infrastructure providers listed above (MongoDB Atlas, Vercel), and only to the extent necessary to operate the service.

6. Data Security

We take reasonable technical measures to protect your data:

All data is transmitted over HTTPS (TLS encryption)
Data at rest is encrypted via MongoDB Atlas
Authentication is handled by NextAuth.js with secure, HTTP-only session cookies
Database access is restricted by IP allowlist and credential-based authentication
No financial data is logged in plain text in server logs

No system is perfectly secure. In the event of a data breach affecting your personal data, we will notify you via email within a reasonable timeframe as required by applicable law.

7. Your Rights Under the DPDP Act, 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights over your personal data:

Right to Access: You can request a summary of the personal data we hold about you and how it is being used.

Right to Correction: You can update or correct your data directly within the website (assets, settings, cash flow entries, etc.). For account-level data (name, email), please update it via your Google account.

Right to Erasure: You can request permanent deletion of your account and all associated financial data at any time by emailing [email protected]. We will process the request within 30 days.

Right to Grievance Redressal: If you have a concern about how we handle your data, contact us at the email below. We will respond within 7 business days. If unresolved, you may raise a complaint with the Data Protection Board of India once it becomes operational.

8. Data Retention

We retain your data for as long as your account is active. The value of FreeBy44 compounds over time — your historical snapshots are what make trends and projections meaningful — so we keep your data until you request deletion. If you request account deletion, all your data is permanently removed within 30 days.

9. Children

FreeBy44 is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. For significant changes, we will notify you via the email linked to your Google account or via an on-site notice before the changes take effect.

11. Contact and Grievance Officer

For any privacy-related questions, data access requests, correction requests, or deletion requests, contact us at:

Dreamverna

India

[email protected]

Response time: within 7 business days