Privacy Policy

Last updated: 19 October 2026

3AM ("we", "us") is a personal finance app that turns your bank and card transaction emails into spending insights, reports and payment reminders. This policy explains what data we access, how we use it and how you control it.

Data we access and collect

• Google account data: your email address and basic profile (such as your name), used to sign you in.
• Gmail data: with your permission, 3AM uses read-only Gmail access to identify transaction-related emails from banks, card issuers and payment providers. We extract details such as merchant, amount, date, category and credit card due dates.
• App data: your preferences and settings inside the app.
• Failed-message diagnostics: if an email cannot be parsed, its message content and relevant headers may be temporarily retained to troubleshoot parsing failures and improve parsing reliability.

Data we never collect

• Net banking passwords, UPI PIN, card PIN, CVV or OTP
• Contacts, photos, phone calls or SMS
• Your emails that are not related to transactions

How we use your data

Only to provide the features you see in the app: spending dashboards, categories, reports, search and credit card due reminders. We do not use Gmail data for advertising, profiling for ads, or to train advertising or general-purpose AI models.

Google API Services User Data Policy

3AM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not allow humans to read your Gmail data unless you give explicit consent for specific messages, it is needed for security or to investigate abuse, or the law requires it.

Sharing

We do not sell your personal data. We do not share it with third parties except service providers that host our infrastructure and process data only on our behalf, or where required by law.

Storage and security

Data is encrypted in transit (HTTPS) and at rest. Email addresses and retained failed-message content are encrypted. We take steps to prevent plaintext email addresses and message bodies from being written to application logs, and access to our systems is restricted.

Successfully parsed email content is not retained in the failed-message log. If parsing fails, the relevant message content and headers may be temporarily stored for troubleshooting and improving parsing reliability. This temporary storage is limited to failed-message handling and is not intended to be a permanent archive of your Gmail messages.

Retention and deletion

Failed-message records, including retained message content and relevant headers, are automatically deleted from 3AM's active system after seven days. Other account and transaction data is retained while your account is active. When you delete your account or ask us to, we delete your data and stored Google credentials from our active systems within 30 days. See how to delete your account.

Deletion from active systems does not necessarily mean that every copy in backups or third-party infrastructure is erased immediately; any such copies are handled under applicable retention and deletion procedures.

Authentication and Gmail access

3AM uses Google's OAuth 2.0 authorization flow with PKCE. 3AM does not store Gmail refresh tokens on its server. Gmail processing is intended to be limited to a maximum window of approximately 45 minutes while you are using the app, subject to access-token validity, the implementation of session controls, and your authorization. This is an application processing limit, not a guarantee that every Google access token expires after 45 minutes.

Revoking Gmail access

You can withdraw access at any time at myaccount.google.com/permissions by selecting 3AM and choosing "Remove access". After revocation is recognized by the app, Gmail processing will stop. You can also stop using 3AM and delete your account; see how to delete your account.

Changes and contact

If we change this policy we will update the date above and notify you in the app for significant changes. Questions: support@3amfin.com.