Skrumble Privacy Policy

Effective date: 17 July 2026  ·  Skrumble

1. Who We Are

Skrumble is a personal portfolio tracking application developed and operated by Rahul ("we", "us", "our"), based in Rohini, New Delhi, India. You can reach us at rahul@skrumble.space.

2. Information We Collect

We collect only what is necessary to provide the service:

• Account information — your email address and a hashed password, used to authenticate you.
• Broker configuration — your broker API key and secret, stored encrypted in our database. The encryption key is derived from a passphrase (salt) that lives only on your device and is never transmitted to our servers.
• Portfolio data — holdings, transactions, and related financial data fetched from your connected broker accounts on your behalf and cached temporarily to serve the app.
• Gmail data (optional, only if you connect it) — if you choose to connect a Gmail account, Skrumble requests read-only access (gmail.readonly) and reads specific transactional emails — credit card transaction alerts and NPS (National Pension System) statement emails — to extract transaction details (amount, date, merchant, account) shown in your dashboard. We do not read, store, or process any email unrelated to these transaction/statement notifications.
• Usage data — basic server logs (IP address, request timestamps) retained for up to 30 days for security and debugging purposes only.

We do not collect device identifiers, location data, contacts, photos, or any data unrelated to the portfolio tracking function, and we do not read any Gmail message unless you have explicitly connected your Gmail account for transaction/statement parsing.

3. How We Use Your Information

• To authenticate you and keep your session secure.
• To fetch and display your portfolio holdings and performance.
• If you connect Gmail: to automatically scan for credit card transaction alerts and NPS statement emails, extract the transaction details from them, and display those transactions in your portfolio dashboard.
• To cache data so the app loads quickly.
• To respond to support requests you initiate.

We do not use your data — including Gmail data — for advertising, profiling, or analytics, and Gmail data is never used to train machine-learning or AI models. No human reviews the content of your emails except where necessary to investigate a support request you have raised, or to comply with applicable law.

4. How We Protect Your Data

• All data is transmitted over HTTPS/TLS.
• Broker API secrets are encrypted using AES-256 with a key derived from your personal salt passphrase. We cannot decrypt your secrets without your salt.
• Passwords are hashed and never stored in plain text.
• Our servers are hosted in a secured cloud environment with restricted access.

5. Data Sharing

We do not sell, rent, or share your personal data with any third party, except:

• Broker APIs (e.g. Dhan, CoinDCX) — we make requests to these services on your behalf using the credentials you provide. Their own privacy policies apply to those interactions.
• Google APIs — if you connect Gmail, we access the Gmail API solely to read the transactional emails described above. Gmail data is never shared with, sold to, or used by any third-party service, advertiser, or data broker. Skrumble's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Legal obligation — if required by law or a valid court order.

6. Data Retention

Your data is retained for as long as your account is active. You may request deletion at any time (see section 8). Server logs are automatically purged after 30 days. If you connect Gmail, we store only the extracted transaction details (not the raw email body) once processed, and this data is deleted along with your account. You can disconnect Gmail access at any time from Profile → Manage Broker Accounts, which immediately revokes Skrumble's access token.

7. Children's Privacy

Skrumble is not directed at children under the age of 18. We do not knowingly collect data from minors.

8. Your Rights & Data Deletion

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request complete deletion of your account and all associated data.

To exercise any of these rights, email us at rahul@skrumble.space with the subject line "Data Request" or "Delete my account". We will respond within 7 business days.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top. Continued use of the app after changes constitutes acceptance of the revised policy.

10. Contact

For any privacy-related questions or concerns:
📧 rahul@skrumble.space
📞 +91 99997 99050
📍 Rohini, New Delhi, India