Privacy Policy
Novance AI · Last updated: 3 November 2026
Novance AI (the “app”) is operated by OMDEVARAM TECH PRIVATE LIMITED (“we”, “us”). This policy explains what personal data the app handles, why, who receives it, how long we keep it, and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 (the DPDP Act) and Google Play’s requirements. We ask for your consent before we handle your data for each of the purposes below.
1. Who can use Novance AI
Novance AI is for people who are 18 years of age or older. It is not intended for children, and we do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.
2. The data we handle
| Account details | Your name (first and last), your mobile number, and your email address if you choose to give one. Used to create your account, to sign you in, and to match your credit file. |
|---|---|
| Sign-in codes | When you sign in we send a one-time code by SMS to your mobile number. We keep only a scrambled (hashed) version of the code, for a few minutes. |
| Transaction details from your SMS | Only if you allow SMS access. See section 4. |
| Credit information | Only if you consent. Your credit score, credit accounts (cards and loans), payment history and enquiries, obtained from Experian. See section 5. |
| What you enter | Cards you add, manual transactions, income, expenses, loans and goals. |
| AI assistant | The questions you type, and figures calculated from your own data to answer them. See section 6. |
| Usage data | Which screens you open and which buttons you use, with a random session id, the app version and the platform (Android). It is linked to your account while the account exists, and we use it to fix problems and improve the app. |
| Subscriptions and payments | When paid plans are offered, payments are handled by Google Play. We receive a purchase token (a reference Google gives us for the purchase), the plan, dates and status, and we check them with Google. We never see or store your card number. |
| Email (optional) | If you choose to connect an email account (not available in every version), we look only for bank statements and receipts, to find transactions. No other email content is read or stored. |
We do not collect your location, contacts, photos, or advertising identifier.
3. What we do not do
- We do not sell your personal data, and we do not share it for advertising or marketing.
- The app contains no advertising and no third-party advertising tools.
- We do not upload the text of your SMS messages, and we do not read your personal messages.
4. SMS access
Why. The app asks for permission to read and receive SMS so it can find transaction alerts from your banks and card issuers, and show your spending, card use and rewards.
How. Messages are read and analysed on your phone. The app picks out transaction alerts from known financial senders and ignores messages that are not transaction alerts.
What leaves your phone. Only the details extracted from a transaction alert: the issuer, the last four digits of the card, a short merchant name, a short keyword that matched, the amount, the date, the type of transaction, and how confident the analysis is. The message text itself is not uploaded.
Your choice. SMS access is optional and asked for separately. You can withdraw it at any time in your phone’s Settings (Apps → Novance AI → Permissions), and you can erase the SMS-derived data in the app under Settings → Delete my data.
5. Credit information and Experian
With your consent, we request your credit information from Experian Credit Information Company of India Private Limited (“Experian”), a credit information company.
What we send to Experian. Your first name, surname and mobile number, and your email address if you gave one, so that Experian can match your credit file.
What we receive. Your credit score, your credit accounts (cards and loans) with their status and payment history, and the enquiries made on your file.
What we use it for. Only to show you your score and insights inside the app and to answer your questions about them. We do not use it to decide anything about you, and we do not pass it on to lenders.
Your choice. You can withdraw your consent, and erase this data, in the app under Settings → Delete my data → Credit bureau data. Deleting your account removes what we hold. Experian keeps its own records under its legal obligations, and deleting your Novance AI account does not change your credit file at Experian.
6. The AI assistant
When you ask the assistant a question, we send your question, and figures calculated from your data to answer it (for example a spending breakdown, goal progress, or credit score insights), to our AI provider, Sarvam AI. We do not include your name, mobile number or email address in what we send. This data is processed under the provider's own terms. Please do not type personal identifiers into the assistant.
7. Who receives your data
| Amazon Web Services (AWS) | Hosts our servers and database, in its Asia Pacific (Mumbai) region. |
|---|---|
| SMS2Orbit (sms2orbit.net) | Delivers sign-in codes by SMS. It receives your mobile number and the message. |
| Experian | Credit matching and reports, as described in section 5. |
| Sarvam AI | The AI assistant, as described in section 6. |
| Google Play | Payments and subscription billing, when paid plans are offered. |
| Authorities | Only where the law requires it. |
These providers handle your data only to provide their service to us, under our agreements with them.
8. Where your data is kept, and how it is protected
Your data is stored on AWS in India (Mumbai). It is encrypted in transit (HTTPS) and at rest. Access is limited to authorised staff, with extra sign-in protection and restrictions on where they can connect from. If a data breach affects you, we will tell you and the authorities as the law requires.
9. How long we keep your data
- While your account exists, we keep your data so the app can work.
- When you delete your account, your account and its data are deleted straight away. See how to delete your account for exactly what is deleted and what is kept.
- Backups. Encrypted backups of our database are kept for 14 days, so deleted data disappears from them within 14 days.
- Usage data is anonymised when you delete your account.
- Payment records, if we hold any, are kept without any link to you for 10 years because tax and accounting rules require it.
- A minimal record of the deletion (date, internal id, last 4 digits of the mobile number, and the IP address of the request) is kept for 1 year.
10. Your rights and choices
Under the DPDP Act you can: ask for a summary of the data we hold about you; ask us to correct it; ask us to erase it; withdraw your consent at any time; nominate another person to exercise these rights for you; and complain to us, and to the Data Protection Board of India if you are not satisfied.
Most of this you can do yourself in the app (Settings). You can delete your account on this page even if you no longer have the app, or by writing to us at support@novance.ai. We reply within 30 days.
11. Changes to this policy
If we change this policy in a way that matters to you, we will tell you in the app before it takes effect. The date at the top shows when it was last updated.
12. Contact and grievances
Grievance Officer / Data Protection contact: Cithira Puthirann, support@novance.ai, OMDEVARAM TECH PRIVATE LIMITED.