Privacy Policy
Last updated: 26 September 2026
Twigg is a platform owned and operated by Aadyantax Technologies Pvt. Ltd. (“Twigg”, “we”, “us”, “our”). We are committed to protecting your privacy and personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 and the rules made under it.
This policy explains what data we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It should be read together with our Terms & Conditions.
1. Data We Collect
Information you provide
Name, email address and mobile number.
PAN and date of birth, only where legally required, or where you provide them to open a password-protected credit card statement (see Section 10).
Preferences, goals and feedback.
Financial data via Account Aggregator (with your consent)
Bank accounts and transactions.
Mutual funds, equities and ETFs.
Loans, credit cards and fixed deposits.
Credit card statement data via Gmail (only if you connect it)
Credit card statement emails from recognised card issuers, including the email body and PDF attachments.
Details extracted from these statements: transactions, outstanding balance, minimum amount due, payment due date and card issuer.
Technical data
Device and app usage information.
Logs and diagnostics. These never contain the content of your emails or statements.
2. How We Use Data
We use your data to:
Show your accounts, transactions and investments in one place.
Categorise your transactions and generate personalised financial insights.
Show your credit card transactions and remind you before payments are due.
Enable investment advisory services, if you opt in.
Send you service messages about your account.
Send you updates on WhatsApp, only if you opt in.
Improve product accuracy and security.
Meet legal and regulatory obligations.
We do not sell your data. We do not use your data for advertising.
3. Data Sharing
We share your data only:
With your explicit consent.
With trusted service providers, such as cloud hosting and AI providers, under strict confidentiality and only as needed to run Twigg.
With third-party AI providers, as described in Section 8.
With our SEBI-registered investment adviser partner, only if you opt in to advisory services.
When required by law or by a government or regulatory authority.
We never use your data for advertising or unrelated commercial purposes. Data received through Gmail is subject to additional restrictions, described in Section 10.
4. Data Security & Storage
Data is encrypted in transit and at rest.
Access is restricted to authorised personnel on a need-to-know basis.
Our servers comply with industry security standards.
Gmail access tokens are stored encrypted and used only to fetch credit card statements.
Email content and statement files are never written to logs.
5. Your Rights
You have the right to:
Access or update your data.
Withdraw consent at any time, including disconnecting Gmail or Account Aggregator access from within the app, or opting out of WhatsApp updates.
Request deletion of your data or your account.
Ask how your data is used.
Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
Raise a grievance (see Section 11).
To exercise any of these rights, write to contact@twigg.one.
6. Retention
We keep data only as long as needed to provide the services you use.
Some data may be retained for longer where required for legal or regulatory purposes.
After that, data is securely deleted or anonymised.
Gmail-derived data follows the specific retention rules in Section 10.
7. Children’s Privacy
Twigg is not intended for users under 18 years of age. We do not knowingly collect data from anyone under 18.
8. Use of Third-Party AI Services
Twigg uses large language models (LLMs) from established third-party AI providers to power certain features.
Transaction categorisation
To organise your spending, Twigg uses LLMs to categorise your transactions (for example, “Groceries” or “Travel”). For this, we send transaction descriptions, amounts and dates to our AI providers. This includes transactions from your bank accounts and, if you have connected Gmail, from your credit card statements.
Categorisation is part of Twigg’s core service. You accept it when you agree to our Terms & Conditions and this Privacy Policy, and it does not require the separate consent described below.
AI insights and chat
Twigg also uses LLMs to power personalised video insights and the Twigg AI chat assistant. When you use these features, the following data may be sent to our AI providers to generate your response:
Bank transaction history and spending by category.
Investment holdings (mutual funds, stocks, ETFs, fixed deposits).
Insurance coverage details (health and term).
What we never send
Your emails and credit card statement files (PDFs) are never sent to any AI provider.
How your data is protected
Before any data is sent to an AI provider, we remove your personally identifiable information, including your name, phone number, email address, PAN, and account and card numbers.
Transaction descriptions are sent as they appear in your statements, and may contain merchant names or the names of people you have paid or received money from.
The data is used only to generate the result shown to you.
Our AI providers may keep this data only temporarily, as needed to provide the service and to monitor for abuse. After that, it is deleted.
Our AI providers are not permitted to use your data to train their AI models or to share it with any other party.
We work only with AI providers that are contractually bound to protect your data to standards consistent with applicable Indian law, including the Digital Personal Data Protection Act, 2023.
Your data may be processed on servers outside India, in countries not restricted under that Act.
Your consent for AI insights and chat
AI insights and chat are opt-in.
Before your data is used for these features for the first time, you will see a clear disclosure and be asked for explicit consent.
You can withdraw this consent at any time from Settings → AI Data Sharing.
Withdrawing consent disables AI insights and chat but does not affect your account, linked financial data, transaction categorisation or any other Twigg functionality.
Changes to how AI features use your data
If we change the types of data sent to AI providers, or how that data is used, we will notify you in-app and, where required, ask for fresh consent before the change takes effect.
9. Account Aggregator (AA) Consent Framework
Twigg uses India’s Account Aggregator framework, regulated by the Reserve Bank of India (RBI), to access your financial information.
Explicit and informed consent
We access your financial data only after you give explicit consent through a registered Account Aggregator.
Consent is purpose-specific, time-bound and limited to specific data.
You will always see what data is being accessed, for what purpose and for how long.
Twigg cannot access your data without your approval.
Data minimisation
We access only the minimum data needed to provide the services you request.
We never request blanket or open-ended access.
Consent control and revocation
You can review, modify or revoke consent at any time through your Account Aggregator or within the Twigg app.
When you revoke consent, Twigg immediately loses access to future data.
No credential storage
Twigg does not store your bank login credentials, PINs or passwords.
Authentication and data transfer are handled entirely by the AA ecosystem.
Read-only access
Twigg receives read-only access to your data.
We cannot initiate transactions, move funds or modify your accounts.
10. Gmail Access for Credit Card Statements (Optional)
Why we ask for it
Credit card statements are not yet fully available through the Account Aggregator framework. The statement your card issuer emails you is the most reliable source for your card transactions, balance and due date. Connecting Gmail is optional, and every other part of Twigg works without it.
What we access
If you connect Gmail, Twigg requests read-only access through Google’s gmail.readonly permission.
We search only for emails from recognised credit card issuers’ sender addresses.
We read only the body and PDF attachments of those matching statement emails.
We do not read, store or process any other email in your inbox.
We cannot send, delete or modify any of your emails.
How we use it
Data extracted from your statements is used only to:
Show your credit card transactions, balance and spending insights in Twigg.
Categorise your credit card transactions.
Remind you before your card payment is due.
Statement passwords
Many statement PDFs are password-protected, often using your date of birth or PAN.
If you provide a password, it is used only to open the statement at the time of processing.
Statement passwords are never stored.
What we don’t do
We do not use Gmail data for advertising, including personalised ads, retargeting or interest-based ads.
We do not sell Gmail data.
We do not transfer Gmail data to third parties, except:
- as necessary to provide the features above;
- to comply with applicable law; or
- with your explicit consent.
We never send your emails or statement files to any AI provider. Only the transaction descriptions, amounts and dates extracted from your statements are sent to our AI providers, solely to categorise your transactions (see Section 8). No names, account numbers or card numbers are included beyond what appears in the transaction description.
We do not use Gmail data to develop, improve or train any AI or machine learning model, whether ours or anyone else’s.
No person at Twigg reads your Gmail data, except:
- with your explicit consent for a specific message, such as when you ask for support;
- where necessary for security purposes, such as investigating abuse; or
- to comply with applicable law.
Retention and deletion
Statement emails and PDFs are processed and then deleted immediately. We keep only the extracted statement details described in Section 1.
When you disconnect Gmail in Settings, we stop all access immediately and instantly delete all data obtained through Gmail.
You can also revoke Twigg’s access at any time from your Google Account at myaccount.google.com/permissions.
Google API Services User Data Policy
Twigg’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
11. Grievance Officer
If you have any concern or complaint about how your personal data is handled, please contact our Grievance Officer:
Utkarsh Vijay
Grievance Officer, Aadyantax Technologies Pvt. Ltd.
Email: contact@twigg.one
Address: B1101, Cedar Luxuria, Muhana Mandi Road, Jaipur - 302020
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.
12. Changes to This Policy
We may update this policy from time to time. If the changes are material, we will notify you in-app and, where required, ask for your fresh consent. The “Last updated” date at the top shows when the policy was last revised.
13. Contact Us
Aadyantax Technologies Pvt. Ltd.
Email: contact@twigg.one