Privacy Policy

Last updated: 24 September 2026

3AM ("we", "us") is a personal finance app that turns your bank and card transaction emails into spending insights, reports and payment reminders. This policy explains what data we access, how we use it and how you control it.

Data we access and collect

• Google account data: your email address and basic profile (name), used to sign you in.
• Gmail data: with your permission we request the read-only Gmail scope. We look only for transaction-related emails from banks, card issuers and payment providers, and extract details such as merchant, amount, date, category and credit card due dates.
• App data: your preferences and settings inside the app.

Data we never collect

• Net banking passwords, UPI PIN, card PIN, CVV or OTP
• Contacts, photos, phone calls or SMS
• Your emails that are not related to transactions

How we use your data

Only to provide the features you see in the app: spending dashboards, categories, reports, search and credit card due reminders. We do not use Gmail data for advertising, profiling for ads, or to train advertising or general-purpose AI models.

Google API Services User Data Policy

3AM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not allow humans to read your Gmail data unless you give explicit consent for specific messages, it is needed for security or to investigate abuse, or the law requires it.

Sharing

We do not sell your personal data. We do not share it with third parties except service providers that host our infrastructure and process data only on our behalf, or where required by law.

Storage and security

Data is encrypted in transit (HTTPS) and at rest. We do not store the full content of your emails, only the extracted transaction fields needed for the app. Access to our systems is restricted.

Retention and deletion

We keep your data while your account is active. When you delete your account or ask us to, we delete your data and stored Google credentials from our active systems within 30 days. See how to delete your account.

Revoking Gmail access

You can withdraw access at any time at myaccount.google.com/permissions by selecting 3AM and choosing "Remove access". We will stop reading your email immediately.

Changes and contact

If we change this policy we will update the date above and notify you in the app for significant changes. Questions: support@3amfin.com.