Privacy Policy

• Taking the assessment as a guest keeps everything in your browser. Nothing is sent to us until you create an account.
• We store what you tell us in the assessment — income, expenses, savings, debt, insurance and goals — so your report exists and unlocks on your next visit.
• All the maths runs on your device. Your financial answers are never sent to an advertising, analytics or social network.
• We never ask for bank logins, card numbers, UPI IDs, PINs or OTPs, and we never store them.
• We do not run analytics, tracking pixels, or third-party advertising, and we do not sell or share your personal information for marketing.
• Only two companies process data for us: Supabase (accounts and database) and Razorpay (payments).

The rest of this page is the detail behind those points.

Freedom Checkup is operated by [LEGAL BUSINESS NAME] (the “Company”). [BUSINESS ADDRESS] is our registered address. For any question about this policy or your data, contact us at freedomcheckup@gmail.com.

This policy applies to the Freedom Checkup website and Service. It should be read alongside our Terms of Use.

We collect only what the Service needs in order to work. There are three groups of it: what you choose to tell us, what the payment provider necessarily handles, and what your browser sends us as a matter of course.

We do not collect the contents of your email inbox, your contacts, your location, your contacts list, or any information about your browsing on other websites. We do not build behavioural or advertising profiles.

If you create an account, we collect:

• Email address — required to create an account and to receive a password reset link. If you sign in with Google, this is the email address associated with your Google account.
• Password — for email registration. Your password is hashed by Supabase and is never stored or seen by the Company in a readable form.
• Name and profile image — only if you choose to sign in with Google, in which case we receive the name and picture from Google. We use the name only to prefill the payment checkout; we do not display it or store it in our database.
• Account identifiers and timestamps — a user identifier, and the date your account was created.

As a guest, you can take the whole assessment without an account. In that case your answers and results are stored in your own browser’s local storage and are not transmitted to us. We do not see them, cannot recover them, and have no copy.

Once you are signed in, we store each assessment you take against your account so your report is available when you sign in again, on any device. For each assessment we store:

• A unique assessment identifier, the date it was created, last updated, and completed.
• Whether it is finished or still in progress, and whether it is a standard checkup or a journey recheckup.
• The answers you gave (see the next section).
• Whether it has been unlocked, and its payment status (see below).

You can see every assessment stored against your account in the Freedom Progress section of your dashboard, and you can start a new one at any time.

The assessment asks for, and we store on your behalf once you are signed in, the financial information you choose to enter. In practice this is:

• Your first name, date of birth, and marital status.
• Your monthly take-home income, any other income, your working hours and days, and your expected income growth.
• Your housing situation and monthly housing costs, essential and discretionary expenses, other loan repayments, total debt outstanding, and the interest rate and remaining term on that debt.
• Your cash and emergency savings, your existing investment corpus, monthly investing, and other assets.
• Whether you hold term life and health insurance, and the amount of cover.
• The financial goals you select, and the amount and target year for each.

If you take part in the 21-day programme, we also store your daily check-ins: the amount you spent, saved and invested that day, any avoidable-spending category and amount you flag, and your answer to that day’s question — which may include free text you type yourself. Please don’t include account numbers, identity documents or other people’s personal data in free-text answers.

We do not connect to your bank, pull statements, or verify your figures against any external record. What you enter is what we hold.

Your Freedom Age, health score, projections, insights, roadmap and goal analysis are calculated from your answers using our own calculation engine. The results themselves are derived from data you have already given us and are not collected as a separate category of personal information.

Where you are signed in, we store a copy of your latest answers alongside the calculated results in your browser’s local storage so your report can be re-displayed instantly. Your Freedom Plan PDF is generated entirely in your browser and downloaded straight to your device. The PDF file is never uploaded to us or stored on our servers. The fonts used to render it are served from our own domain, not from a third-party font service.

We do store, server-side, the milestone reports generated at Day 7, Day 14 and Day 21 of the programme, and the result of a free recheckup completed after Day 21, because these belong to your account’s journey history.

Payments are taken on Razorpay’s hosted checkout page. Your card, UPI or netbanking details are entered directly with Razorpay. They never pass through Freedom Checkup and we never receive or store them. We are not able to see, retain or refund to your card details, because we do not have them.

When you start a payment, we pass your email address (and your Google display name, if you signed in with Google) to Razorpay so the checkout can be prefilled. Razorpay’s handling of that information is governed by Razorpay’s own privacy policy.

When a payment succeeds, we store the following against your assessment, and nothing more:

• The Razorpay order reference.
• The Razorpay payment reference.
• A payment signature — a one-way verification code that lets us prove to Razorpay that a given payment is genuine. It is not a card detail.
• The payment status and the date and time the payment was made.
• That the report has been unlocked.

We use these references to confirm that your payment was received and for the correct amount, and to investigate any payment problem you report. We do not use them for marketing, and we do not share them with anyone except where required by law or to enforce the payment.

The Service is a web application, so your browser necessarily exchanges technical information with our servers simply to load a page. In practice that means our servers receive the request, your browser’s user-agent string, and the address of the page you requested.

We do not read your IP address to build a location profile, and we do not use it for advertising. It may be visible to our hosting and database providers in their ordinary server logs for security and troubleshooting, as any web server necessarily does.

Freedom Checkup sets no cookies of its own. The only cookie the Service relies on is Supabase’s authentication cookie, which holds your signed-in session so you stay logged in between pages and visits.

Your browser’s local storage is used to remember your work. It holds:

• freedom-checkup:answers:v1 — your current assessment answers, saved as you go so you can leave and come back.
• freedom-checkup:results:v1 — a copy of those answers and the results calculated from them, so your dashboard can be re-displayed without recalculating.
• freedom-checkup:assessment-meta:v1 — your local assessment identifier, when it was created, and your account id once the assessment has been linked to you.
• freedom-checkup:unlock-intent:v1 — a short-lived note of which assessment you were trying to unlock, so an account sign-in step returns you to the right place.
• theme — your light or dark display preference, set by the theme library rather than by us.

This information stays in your browser and is not sent to us as a result of being stored there. Signing out ends your session but does not automatically erase these local items, because they are needed to show your report again on a return visit. To remove them from a device, clear site data for this site in your browser settings, or start a fresh assessment from the “Retake” control in the dashboard, which clears the local copy. On a shared or public device, clear site data before you leave.

We use your information only to:

• Create and operate your account, and keep you signed in.
• Calculate and display your assessment, results and report.
• Store your reports so you can access them again on any device.
• Confirm payments and unlock the reports you have paid for.
• Record your 21-day programme progress, streaks and milestone reports.
• Keep the Service secure, prevent misuse, and debug errors so it keeps working.
• Respond to you when you contact us, including payment and support queries.
• Comply with our legal obligations where we are required to.

We do not use your financial information for advertising, and we do not sell it. We do not use it to build a profile of your spending habits for any purpose beyond operating the Service.

Because the calculations run in your browser, your answers are not sent to us in order to be analysed — we receive them only so your report can be stored and shown again.

We do not sell your personal information, and we do not share it for anyone else’s marketing.

We share information only with the following service providers, and only to the extent needed to run the Service:

• Supabase — provides our database and handles account registration, sign-in, sessions and password resets. Your email address, your hashed password and your stored assessment and journey data are processed by Supabase on our behalf.
• Razorpay — processes your payment and communicates the payment reference, status and amount back to us. They also receive your email address and, if you signed in with Google, your name, as checkout prefill.
• Our hosting and email providers — [HOSTING PROVIDER AND ANY TRANSACTIONAL EMAIL PROVIDER]. Our host delivers the site and stores it in its own infrastructure.

We may also disclose information where we reasonably believe we are required to do so by law, court order or a competent authority, or where disclosure is necessary to protect our rights, users or the public. If we are asked to hand over data in response to a legal request, we will tell you unless we are legally prevented from doing so.

If the Company is ever sold, reorganised or transferred, information may be transferred as part of that transaction. [ANY ADDITIONAL NOTICE REQUIRED FOR A CHANGE OF CONTROL]

We take reasonable steps to protect your information:

• All traffic to the Service is encrypted in transit using HTTPS.
• Accounts, assessments, journey data and payments are stored in a Supabase Postgres database protected by row-level security, so a signed-in user can only read and write their own rows.
• Payment confirmation happens on our servers, and a payment is only accepted if it was made against an order this Service created, for the correct amount and currency. The payment signature is compared in constant time. The secret key used to verify payments is held only on the server and is never sent to a browser.
• Sensitive columns — the unlock flag, payment status and payment references — cannot be modified by a browser or a signed-in user directly, only by our server.

No method of transmission or storage is completely secure. If you believe your account has been compromised, sign out, change your password, and contact us.

We keep your account and your assessment data for as long as your account exists, so that your reports remain available to you. Payment references are retained alongside them to evidence a purchase and to handle any later payment query. [RETENTION PERIOD — TO BE CONFIRMED BY THE BUSINESS]

Journey progress and milestone reports are kept with your account for the same reason, and are removed along with the account. [WHETHER A SHORTER PERIOD APPLIES TO PROGRESS DATA, AND WHY]

Information held in your own browser stays there until you clear it, change devices, or start a fresh assessment — see the cookies and browser storage section above.

When your account is deleted, or when we delete your data at your request, we remove your information from our active database. Any residual copies held in backups are not actively used and are overwritten on our normal backup cycle.

You can:

• See your data. Every assessment, result and journey day associated with your account is visible to you in the dashboard.
• Correct it. You can change the answers in an assessment, or start a new assessment, and your report is recalculated accordingly.
• Clear your local copy. Clearing site data, or starting a fresh assessment, removes the answers, results and unlock intent held in your browser.
• Sign out. You can end your session at any time from the account menu.
• Ask for a copy, a correction, or deletion. Contact us using the details in the Contact us section below and we will action it. [RESPONSE TIMEFRAME AND ANY APPLICABLE FEES]

We have not implemented a formal statutory privacy-rights programme, and we make no claim of compliance with the GDPR, the CCPA/CPRA, or India’s Digital Personal Data Protection Act. If you are in a jurisdiction where you have specific statutory rights, contact us and we will do our best to help. [STATUTORY REPRESENTATIVE, IF APPLICABLE — E.G. EU OR INDIA REP]

You can ask us to delete your account and the data associated with it. This is handled by email, because the Service does not currently offer a self-serve delete button. Email freedomcheckup@gmail.com from the address on the account with the subject “Delete my account”.

To help us find and delete the right records, please include the email address on the account. We may ask you to confirm that you are the account holder before we act.

On receiving a verified request we will delete your account together with the assessments, results, journey progress, milestone reports and payment records associated with it. Because your reports are linked to your account, deleting the account removes them too — so please download anything you want to keep before you ask.

Some information may have to be retained where we are legally required to keep it, for example payment records for tax or accounting purposes. Where that applies we will tell you what we are keeping and why. [STATED PERIOD AND OBLIGATION FOR RETAINING PAYMENT RECORDS]

Deleting your account also does not remove information already held in your own browser’s local storage; clear site data on each device you used. [EXPECTED COMPLETION TIME FOR A DELETION REQUEST]

Freedom Checkup is not directed at children and is not intended for anyone under 18. We do not knowingly collect information from children.

If you believe a child has created an account or provided us with personal information, please contact us using the details in the Contact us section below and we will delete it.

We may update this policy from time to time. The “Last Updated” date at the top of the page shows when the current version took effect, and where a change is material we will highlight it. [HOW MATERIAL CHANGES WILL BE NOTIFIED, E.G. EMAIL OR IN-APP NOTICE]

Continuing to use the Service after a change means you accept the updated policy. Previous versions are available on request.

For any privacy question, or to make a request about your data:

• Email: freedomcheckup@gmail.com
• Business: [LEGAL BUSINESS NAME]
• Address: [BUSINESS ADDRESS]

Our terms of use are at Terms of Use, including the financial disclaimer that applies to every result Freedom Checkup produces.