Privacy policy
- Your FD records, bank details and documents stay on your phone, encrypted. We can't see them.
- You sign in with Google so Kosh can recognise you and restore your backup.
- Backups are encrypted on your phone and stored in a hidden Kosh folder in your own Google Drive. Kosh can't see any other files in your Drive.
- We don't use analytics or advertising, we don't sell data, and we don't share it for advertising.
- Who we are
- What stays on your phone
- Google sign-in and your Google data
- What we store and why
- What we never collect
- Permissions
- Who processes data
- How long we keep it
- Your choices and rights
- Children
- Changes
- Contact and grievances
1. Who we are
Kosh is an Android app published by EazyLife Tech Solutions ("we", "us"). It helps you record your bank fixed deposits and track the interest they pay you. This policy explains what information the app handles, why, and your choices. Under India's Digital Personal Data Protection Act, 2023, we are the data fiduciary only for the account data described in section 4. We never receive your FD records.
2. What stays on your phone
Everything you enter in Kosh is stored in an encrypted database in the app's private storage on your phone. The encryption key is protected by Android's hardware-backed Keystore. This includes:
- your fixed deposits (bank, FD number, amount, rate, dates, payout details, notes) and payout records;
- your banks and the last four digits of the accounts you choose to add;
- FD advice documents (PDFs or photos) that you attach;
- your name and date of birth. Your date of birth is used only to apply the senior-citizen TDS limits.
Kosh does all its calculations on your phone and works offline. Your fingerprint never reaches Kosh: Android checks it and only tells the app whether it matched.
3. Google sign-in and your Google data
You sign in with your Google account. Kosh requests:
- Basic profile (name, email address, profile photo) and a Google account identifier, to recognise you and find your backup on a new phone.
- Google Drive app data (
drive.appdata): access only to a hidden folder that belongs to Kosh in your Drive. Kosh can't see, open or change any of your other Drive files.
Kosh uses that folder only to store and restore your encrypted backups. Backups are encrypted on your phone (AES-256) before they're uploaded, so the files in your Drive can't be read without the backup key. The files count toward your Drive storage, and you can remove them at any time (see section 9).
Kosh's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, and no person at EazyLife Tech Solutions reads it.
4. What we store and why
| Data | Purpose | Stored by |
|---|---|---|
| Google account email, name, photo URL and a Firebase user ID | Signing you in and recognising you on a new phone | Firebase Authentication (Google) |
| Your backup key, wrapped with your backup password if you set one, plus backup details (date of the last backup, device ID, app version) | Restoring your encrypted backup after a reinstall or on a new phone. Only you, while signed in, can read it. | Cloud Firestore (Google), in Delhi, India |
| Encrypted backup files | Restoring your data | Your own Google Drive, in Kosh's hidden folder |
If you set a backup password, your key is wrapped with that password on your phone. Then neither Google nor we can open your backup, and if you forget the password the backup can't be restored. Without a backup password, anyone who gets into your Google account could restore your Kosh data, so we recommend turning on 2-Step Verification for your Google account.
5. What we never collect
We never receive your FD records, account balances, documents, contacts, location or anything from other apps. We don't use analytics, crash reporting or advertising SDKs. If we add crash reporting in a future version, we'll update this policy and the Play Store data safety section before that version ships. If you email us, we receive your email address and what you write, and use it only to reply.
6. Permissions
| Permission | Why |
|---|---|
| Internet | Google sign-in, backups and restores |
| Biometrics (fingerprint) | Unlocking the app; Android does the check |
| Notifications | Payout, maturity, 15G/15H and backup reminders. Asked when you first turn a reminder on. |
| Run in the background | Scheduled backups |
Kosh doesn't ask for storage access. You choose each document to attach with Android's file picker.
7. Who processes data
Google LLC provides Google sign-in, Firebase Authentication, Cloud Firestore and Google Drive (Google privacy policy, Firebase privacy). Your Firestore data is stored in India; other Google services may process data outside India. We may disclose the limited data we hold if the law requires it.
8. How long we keep it
- Account data and backup key: until you delete your account (section 9).
- Backups: Kosh keeps your latest backup and the one before it in your Drive, until you delete your account or remove the files.
- Data on your phone: until you delete it, sign out, or uninstall the app.
- Support emails: up to 24 months after the conversation ends.
Security: data is encrypted on your phone, in transit (HTTPS) and in your backups.
9. Your choices and rights
- Delete your account in the app: Settings › Account › Delete account. This deletes your Kosh account, your backup key and your Drive backups, then clears the app on your phone. If you can't use the app, follow the steps on Delete your Kosh account.
- Remove Drive access at myaccount.google.com/connections. You can delete the hidden backup from Google Drive › Settings › Manage apps › Kosh › Delete hidden app data.
- Access and correction: everything Kosh holds about you is visible and editable in the app. Email us for a copy of your account data.
- Nominate a person to exercise your rights if you die or become unable to act.
- Complain to us (section 12). If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Children
Kosh is meant for adults managing their own deposits. It isn't directed at children under 18, and we don't knowingly collect their data.
11. Changes
If we change how Kosh handles data, we'll update this page and the date at the top, and tell you in the app before the change takes effect when it matters.
12. Contact and grievances
EazyLife Tech Solutions · srv021@gmail.com. We reply to privacy questions and grievances within 30 days.