Bahi Khata is a personal net worth and planning app. You trust it with figures about your money and, if you use the estate plan, with details about the people close to you. This page says what it holds, why, who can see it, and what you can do about it.
1. Who we are
Bahi Khata is run by APVS Consulting Pty Ltd (ABN 89 647 287 830), a company registered in New South Wales, Australia (“we”, “us”). For anything on this page, write to support@yourbahikhata.com.
2. What we hold
When you sign in with Google: your email address and name, and the account identifier and picture Google sends with them. We never see or hold your Google password.
What you enter: your settings (currencies, country of residence, year of birth); your assets, loans and their monthly balances, rates and contributions; your budget, goals and FIRE scenarios; and the transactions from investment statements you upload. We keep a statement’s transactions, its file name and a fingerprint of the file so it is never imported twice, but not the file itself.
About other people: if you use the estate plan, the names, relationships, email addresses and status of the people in it, and your solicitor’s name and email. Add someone only if you are entitled to share their details and they would expect you to.
What the app records as you use it: the days you open it, your membership (when your trial started and ends, and the months you logged on time), each consent you give for AI access, a log of what connected AI apps read and when (never the figures), and when you agreed to these terms.
On your device: cookies that keep you signed in, and browser storage for preferences such as the theme and which sections you have folded. There are no advertising or tracking cookies and no analytics.
We do not connect to your bank or broker: every balance is one you entered or uploaded.
3. Why we use it
Only to run Bahi Khata for you: to sign you in, store and calculate your figures, show your plans, manage your membership, answer you when you write, and keep the service secure and working. We do not sell your information, use it for advertising, or share it with anyone for their own purposes.
4. Who can see it
- You. No other member can see your figures; the database itself refuses them.
- Us, as the operator. Our admin page shows each member’s email, name, plan and trial dates, the days they opened the app and how many assets and loans they hold. The only money figure on it is the total of all members’ assets together, never one member’s. We do not look at your figures unless you let us: Settings → Support lets support see them to fix a problem you have reported, and switches itself off after 7 days. Each time you allow it or turn it off is recorded with the date, so you can always check when it was on. As the operator we can technically reach the database, and we use that only to keep the service running. Your figures are encrypted in transit and at rest, but not end to end: the app reads them in order to calculate them.
- AI apps you connect. Only if you turn on AI access, and only the parts you switch on. What happens to it then is governed by that app’s own terms and privacy policy; see the Terms of use.
- Anyone the law requires. If we are legally required to disclose something, we will disclose only what is required.
5. The services we rely on, and where your information is kept
- Supabase holds the database and runs sign-in. Your data is stored in Sydney, Australia.
- Vercel runs the app, in its Sydney region. Vercel is a United States company.
- Google signs you in, and its Gmail sends the invitation emails we send.
- Market data: prices come from Yahoo Finance, AMFI and mfapi.in, and exchange rates from the European Central Bank. We ask them only for the securities and currencies concerned, never for anything about you.
Some of these companies are based outside Australia and may reach the information they hold for us from there, under their own security and privacy commitments.
6. How it is protected
Everything is encrypted in transit and at rest (AES-256). You sign in with Google, so there is no password here to steal. A sign-in ends after seven days without use, and after 30 days in any case.
7. How long we keep it
For as long as you have an account. Delete account in Settings removes your account and everything in it at once; copies in our database provider’s routine backups expire on that provider’s own schedule. If you were invited but never signed up, the invitation (your name and email) is kept until we remove it, or sooner if you ask.
8. Your choices
- See and correct everything you entered, at any time, in the app.
- Download it: Settings → Export.
- Stop AI apps reading it: Settings → AI access → Stop sharing.
- Delete it all: Settings → Delete account.
- Ask us what we hold about you, or to correct or delete it, at support@yourbahikhata.com.
If you are unhappy with how we have handled your information, write to us first and we will reply within 30 days. If you are still unhappy you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to the data protection authority where you live.
9. Age
Bahi Khata is for people aged 18 and over.
10. Changes to this policy
If we change what we hold, who can see it or which services keep it, we will update this page and ask you to agree again before you next use the app. The date at the top is when this version took effect.
See also the Terms of use.