Privacy Policy

Last updated: August 28, 2026

1. Who we are

UPI Tracker (“the Service”, “we”, “us”, “our”) is operated by Korexhq. This Privacy Policy explains what personal data we collect when you use the Service, why we collect it, and how you can control it.

2. Information we collect

Account information — your email address and a securely hashed password. We never store your password in plain text.
Screenshots you upload — images of UPI payment screenshots you choose to upload for transaction extraction.
Extracted transaction data — amount, date, time, direction (sent/received), counterparty name and UPI ID, app name, and any notes or categories you add.
Usage and activity data — a record of actions you take in the Service (uploads, edits, exports, logins) so you can review your own account history.
Billing information — your subscription plan and status. We never see or store your card, UPI, or bank details; all payment collection is handled directly by Razorpay, our payment processor.

3. How we handle your screenshots

When you upload a screenshot, it’s sent to Google’s Gemini Vision API to extract the transaction details automatically. Screenshots are processed in memory for that single extraction request and are not written to disk or stored on our servers afterward.

We share data only with the service providers necessary to run the Service:

Google (Gemini Vision API) — to extract transaction details from your screenshots.
Razorpay — to process subscription payments. Razorpay receives what it needs to process your payment under its own privacy policy; we never receive or store your card, bank, or UPI credentials.
MongoDB Atlas — our cloud database provider, used to securely store your account and transaction data.

We do not sell your personal data, and we do not use third-party advertising or tracking services.

5. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to protect your account from cross-site request forgery. We do not use advertising or analytics cookies.

6. Data retention and deletion

You can delete individual transactions at any time from the Transactions page. You can also permanently delete all of your transaction data from your account settings. If you’d like your account itself closed and all associated data erased, contact us using the details below.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can exercise most of these directly within the app, or by contacting us.

8. Security

We use industry-standard practices to protect your data, including encrypted password storage, httpOnly authentication cookies, and CSRF protection on every account-changing action.

9. Changes to this policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date above whenever we do.

10. Contact us

Questions about this policy or your data? Contact us at xeronfps@gmail.com.