SYNARSI

Privacy Policy

Last updated 3 October 2026.

Who we are

Synarsi is operated by Dyntechnik Ventures Pvt Ltd, reachable at bsne@dyntechnik.com. CIN U62099TS2025PTC199748 · GSTIN 36AALCD7769F1Z5 · Registered office: SY. 130P & 115/1P, Nanakramguda Rd, Gachibowli, Seri Lingampally, K.V. Rangareddy 500032, Telangana.

What we collect and why

Account email and password hash
To sign you in.
Your plan numbers
Income, expenses, holdings, units, transactions you import, goals and events, to compute your projections, only if you sign in and sync.
Daily snapshots of your progress
To show your progress over time.
Your notification choices
To serve you.
The question you type in Ask AI, with today's date, your age and the changes you are testing
Sent to OpenAI only to understand the question; the answer is computed by Synarsi from your own numbers. Never sent with your name or email.

What we never do

Your CAS statement file never leaves your device; it is read by your browser. No third-party analytics, no advertising trackers or identifiers, no selling of your data to anyone, no sharing of your data with anyone, no cookies beyond what sign-in strictly needs.

What we do count

On our own servers only: which features and screens are used, tied to your account id when signed in, never containing your financial amounts, so we can improve the product and understand usage in aggregate. These counts never leave our systems and are deleted with your account.

What we keep as proof of agreement

The versions of the terms, privacy policy, and any future pricing terms you accepted or declined, with dates, stored against your account for as long as it exists. This protects both of us.

Where data lives

Using Synarsi needs an account. The free plan stays free; Synarsi Plus is an optional paid subscription (see Terms of Use for pricing). Your plan is kept in your browser's storage on your device and synced to your own account in our database hosted with Supabase in India (Mumbai region), so it follows you across devices; while you are not signed in, it stays in your browser only. Some processing happens on our application server, hosted with Hostinger in India (Mumbai). If you subscribe to Plus, the payment is taken by Razorpay in its own checkout window: your card number and UPI PIN go to Razorpay, never to us. Razorpay sends us payment confirmations, which include the email and phone number you gave it and, for UPI, your UPI ID. Account and billing emails (for example payment receipts) are delivered through Resend; browser notifications, if you enable them, are delivered through your browser's own push service. Ask AI uses OpenAI's API only to understand your question;

Our processors

We use these companies to run Synarsi, each only for the purpose named: Supabase (database and sign-in, India), Hostinger (application hosting, India), GitHub (encrypted weekly database backups, kept 30 days), Razorpay (Plus payments and Autopay renewals, only if you subscribe), Resend (account and billing emails, for example payment receipts), and OpenAI (understanding your Ask AI questions). OpenAI acts as a sub-processor under OpenAI's API data processing terms: content sent to its API is not used to train its models, and OpenAI may retain it for up to 30 days to detect abuse before deleting it. We do not control that 30-day window.

Every store, listed

This is the complete inventory of what Synarsi keeps. Each entry says whether it syncs to your account (only if you sign in) or never leaves your device. A build check compares this list against the code, so a store that is not listed here cannot ship.

Plan numbers
Income, expenses, investing amount, goal income, assumptions, age, loans and credit cards, life events, scenarios. Syncs with an account.
Holdings
Scheme names and codes, units, values, cost lots derived from your CAS, EPF and NPS balances, FDs. Only these derived rows sync; the CAS file itself never leaves your device.
Spending
Transactions from statements you upload plus quick-logs, your category corrections, statement coverage records, and an audit trail of edits. Syncs with an account. The statement file itself never leaves your device.
Check-ins and streak
Which days you checked in and the streak they build. Syncs with an account.
Upload registry
Your named statement sources (nicknames, optional last four digits you typed, statement periods, due dates, import summaries). Syncs with an account. Never file contents or full account numbers.
Tax inputs
Gross income, deductions, regime choice, realized gains you enter. Syncs with an account.
Progress history
Corpus snapshots, milestone history, monthly summaries, alerts and their settings, daily brief state. Syncs with an account.
Dossier
The names, policy numbers, and contacts you type into the family dossier. Syncs with an account.
Preferences
The first and last name you give at onboarding (used only to greet you), notification choices, onboarding and tour progress, remembered statement column layouts. Syncs with an account, except the device theme, which stays local.
Subscription
If you subscribe to Plus: your plan, its status and renewal date, Razorpay's subscription id, and the payment confirmations Razorpay sends us (with the email, phone number and, for UPI, UPI ID given to Razorpay). Kept on our server and deleted with your account. Never full card numbers.
Ask conversations
Your question and Synarsi's answer stay in your browser tab and are not stored on our server. Each question, with today's date, your age and the changes you are testing, goes to OpenAI to be understood, then is forgotten by us. Any Ask conversation saved on our server before this change is deleted with your account.
Consent record
The kind and version of each consent you gave (terms, privacy, messages) and when. Kept as a legal record; when you delete your account it is detached from you and stays only as an anonymous line saying a consent of that version happened.
Usage records
A daily count of Ask calls with token totals (no user id, no question text), and a few product event names tied to your account, such as a notification being sent. The event names are deleted with your account.
Retired features
Telegram and WhatsApp reminders were switched off. Any link record from when they existed is deleted with your account.
Never leaves your device
Uploaded statement files (read in your browser, never transmitted), statement passwords (used in memory only, never stored at all), the device theme, and the cached public market history.

Your rights

See everything we hold about you with the Download everything button. Correct anything: every field is editable. Erase everything: the Delete everything button removes your data and your account from our systems immediately, and cancels any active subscription. Encrypted weekly backups taken before you deleted still hold a copy until they age out, within 30 days; they are used only to recover from a system failure. One exception is outside our systems: anything already sent to OpenAI's API in the days before deletion sits in OpenAI's own up-to-30-day abuse-detection buffer and ages out there on its own schedule, never to be recovered or reused. You may also nominate another person to exercise these rights on your behalf in the event of your death or incapacity, by writing to our grievance contact. You can also write to bsne@dyntechnik.com.

Consent

We ask for your consent when you create an account and when you opt into any messages. You can withdraw it any time by deleting your account or turning the messages off, and withdrawing is as easy as giving it.

Children

Synarsi is for adults. You must be 18 or older to create an account.

Breaches

If personal data is ever compromised we will inform affected users without delay and notify the Data Protection Board of India within 72 hours of becoming aware.

Grievances

You can raise a grievance with our Grievance Officer at bsne@dyntechnik.com; we aim to respond within 15 days. If unsatisfied you may approach the Data Protection Board of India.

Changes

We will show a notice in the app when this policy changes materially.