PayFlow Privacy Policy & Support

1. Privacy Commitment & Local Storage

PayFlow is engineered on a strict zero-cloud data minimization principle. All session calculations, payment leg histories, and parsed QR metadata are stored locally on your device using encrypted Isar database instances.

PayFlow does NOT collect, aggregate, or sell any of your personal financial records, UPI IDs, transaction amounts, or bank details.

2. What PayFlow Never Asks For

• Your 4-digit or 6-digit UPI PIN
• One-Time Passwords (OTPs)
• Bank passwords, debit card numbers, or CVVs

All authorizations occur strictly within your chosen official UPI application (such as PhonePe, Google Pay, PayTM, BHIM, or Cred).

3. NPCI & RBI Security Compliance Standards

PayFlow operates strictly bounded by NPCI (National Payments Corporation of India) security guidelines, UPI AutoPay frameworks, and RBI cybersecurity regulations:

• Strict Non-Storage of Secrets: PayFlow never stores, accesses, or logs your 4-digit or 6-digit UPI PIN, OTPs, or banking credentials.
• Delegated Authorization: All payment authorizations and PIN entries take place exclusively within official, NPCI-approved UPI participant applications (e.g. PhonePe, Google Pay, PayTM, BHIM, Cred).
• NPCI AutoPay & Mandate Handoff: Automated split payment sequences adhere to official NPCI e-mandate and UPI Lite protocol specifications.

4. Non-Circumvention & Compliance Notice

PayFlow is a transaction planning and records assistant. It is not a bank, payment aggregator, or UPI participant. Smart Split is a convenience layout feature and does not circumvent bank transaction limits, merchant charges, or regulatory guidelines.

5. Official Support & Inquiries

For support, legal questions, or privacy requests, contact our team directly at:

Email: berryloopofficial@gmail.com