Security & Privacy

Key capabilities

• No net-banking credentials and no account-aggregator consent, ever
• PIN lock on idle, with backend-enforced attempt lockout
• Privacy mode masks every amount on screen
• DPDPA consent captured at signup and withdrawable from Settings

Protecting the session itself

Sessions are held in HttpOnly cookies rather than browser storage, with role-aware access and a refresh-token flow. A PIN lock engages after a configurable idle period, and repeated wrong attempts are locked out server-side, not just in the interface.

Reading it in public

Privacy mode masks every figure on screen with one toggle — for a commute, a shared desk, or a screen-share.

Your data, and your consent

Built for India's Digital Personal Data Protection Act: consent is captured explicitly at signup and can be withdrawn from Settings at any time. Analytics cookies stay off until you accept them, there are no third-party advertising cookies, and nothing is sold.

What MyArthIQ is not

It organises and clarifies. It does not sell financial products, take commissions, or offer advice, and it is not a SEBI-registered investment adviser. Insights are informational — significant decisions deserve a qualified professional.