Privacy

You can use most of it without an account

Browsing IPOs — the list, the figures, the grey-market premium, the dates — needs no account, and nothing that identifies you is stored for it. The app does count, once a day, that a phone opened it — described below.

An account exists so you can save a PAN and have its allotment checked. That is the only reason to sign in.

What is kept when you do have an account

Everything in this list that identifies you is encrypted before it is stored:

• The email address you sign in with, and the name you give the app if you give one.
• Each PAN you save: the PAN itself, the name on it, the demat account number if you add one, and the UPI ID if you add one.
• The answers a registrar gives when you check a PAN, in the app or on the website. Where shares were allotted or not allotted, the answer is kept for 5allotment, it is deleted after 30 days.
• A record of the wording you agreed to when you first saved a PAN, and the internet address you agreed from — which the law treats as personal, so it is encrypted too.
• Sign-in codes and session keys, stored only as hashes. A code you do not use is deleted, with the address it was sent to, within an hour of running out.
• A message you send from Help and complaints: what you wrote, the email address to reply to, and which bid it is about if you sent it from one. You can send one without an account too.

What is kept about a phone

What the app keeps about a phone is about a DEVICE, with one exception: while somebody is signed in on it, a coded link to their account — so a listing reminder reaches only the people who got shares, and a reminder to approve a UPI request reaches only the person whose bid is waiting for it. Signing out, or deleting the account, removes it.

• Once a day, when the app is opened: a random number the app made when it was installed — not your phone’s serial number, and not linked to your account — with the app’s version, whether alerts are on, and whether somebody was signed in (a yes or no, never who). It lets us count how many phones use the app. Reinstalling the app, or clearing its storage, makes a new number.
• If you turn on alerts, the delivery token for that phone, encrypted, so a message can reach it.
• Whether alerts and the automatic check are switched on, and HOW MANY PANs the phone would check — a count, never the PANs themselves.
• Whether the phone answered when it was woken, so the app can tell you if your own phone is stopping it in the background.
• If the app crashes it sends the fault to us, with anything shaped like a PAN, a demat number, a UPI ID, an email address or a phone number taken out first — on the phone and again on our server.

Who it is sent to

One company gets something about you that is genuinely theirs to use, and it is named here because it is the whole point of the app:

• The REGISTRAR — MUFG Intime, KFin, Bigshare or Maashitla, whichever runs that IPO — receives a PAN when an allotment is checked. That happens when you ask, and also by itself if you switch on the automatic check, which the setting says in those words. From a phone the request goes from your phone rather than from us.
• A message you send from Help and complaints reaches our own email inbox, so we can reply to you — with what you wrote, your email address and, if you sent it from a bid, that bid’s details. If it is about a bid, we may pass it to the broker that placed the bid, who has to answer it.

The companies that run things for us

Four ordinary suppliers make the app work, and each may only do what we ask of it: one delivers our emails, one carries alerts to your phone, one runs our servers and database, and one holds our email inbox (Google’s Gmail), where messages you send us arrive. None of them may use anything of yours for their own purposes, and no advertising or analytics company is involved at any point, because the app contains none.

We remain answerable for what they do with it, and for choosing them.

What is never done with it

Nothing is sold, and nothing is shared for advertising. There is no advertising code, and no analytics company’s code, in the app or on the website — the one count the app makes of its own use stays with us — so there is nothing to sell through.

Nothing you save is used to profile you, and the app gives no investment advice of any kind.

How long it is kept

• Allotment answers where shares were allotted or not allotted: 5 years after the end of the financial year of the allotment, then deleted automatically.
• Allotment answers where there was no application, or the bid never entered the allotment: 30 days.
• Crash reports: 30 days.
• The daily note that a phone opened the app: 40 days.
• Your account and your saved PANs: until you delete them.
• Messages you send from Help and complaints: 5 years, as a record of the complaint, then deleted — also after you delete your account.
• Bids you place through the app: at least 5 years, as the exchange’s rules require — also after you delete your account.
• A PAN you remove takes all its kept allotment answers with it. Saving it again starts with none.

Who it is for

Applying for an IPO in India requires a PAN and a demat account, which means an adult. The app is not meant for children and asks nothing of them.

If this page changes

The date at the top changes with it. A change that affects what is sent to anybody else will be said in the app as well, not only here.

Deleting everything

Account → Delete my account, in the app or on this website. It takes one confirmation, and it takes everything at once: your saved PANs, every allotment answer kept for them, your name and your sign-in address. It cannot be undone. Two records are kept even then, for at least five years: bids you placed through the app, which the exchange’s rules require, and messages you sent us from Help and complaints.