tribe (tr/be)

Personal finance recommendations for India

tribemoney.ai

TRIBE (TR/BE) — PRIVACY POLICY (INDIA)

Xentury Technologies Pte. Ltd.

[Last Updated: 27 July 2026]

This Privacy Policy (“Policy”) explains how tribe (also styled as tr/be) (“tribe”, “We”, “Us”, or “Our”), operated by Xentury Technologies Pte. Ltd., collects, uses, stores, and shares personal data when individuals in India use Our personal finance recommendation application and related websites or services (the “App” or “Services”).

tribe helps you understand spending, bank balances, and investments, and receive simple next-step recommendations—without manual spreadsheets or uploading statements. With your explicit consent, tribe may connect to your Gmail account via Google OAuth and use read-only access to finance-related emails you already receive (merchant receipts, bank e-statements, broker/SIP confirmations) to build a finance snapshot and recommendations.

PLEASE READ THIS POLICY CAREFULLY. By accessing or using the App or connecting Gmail, you acknowledge this Policy. If you do not agree, do not use the Services or connect Gmail.

Questions about this Policy: legal@tribemoney.ai or support@tribemoney.ai.

• 1. DATA FIDUCIARY / CONTROLLER

For personal data processed in connection with the India-facing App, Xentury Technologies Pte. Ltd., operating as tribe / tr/be, acts as the data fiduciary (controller). We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and other applicable rules.

• 2. WHO THIS POLICY APPLIES TO

This Policy applies to individuals in India who download, register for, access, or use the App for personal finance insights and recommendations. The Services are intended for personal (consumer) use, not enterprise email monitoring or third-party surveillance.

• 3. USERS UNDER 18

The App is not intended for individuals under eighteen (18) years of age. We do not knowingly solicit personal data from children. If you believe a minor has provided personal data to Us, contact Us at legal@tribemoney.ai and We will take appropriate steps to delete such data.

• 4. LAWFUL BASIS AND CONSENT

We process personal data based on your consent and/or as otherwise permitted under applicable law to provide the Services you request. Before Gmail is connected:

• You initiate Google OAuth and review Google’s consent screen;
• We provide in-app disclosure about the purpose of Gmail access (personal finance insights from finance-related email); and
• You may withdraw consent at any time by disconnecting Gmail in the App (where available), revoking access in your Google Account settings, and/or requesting deletion of your tribe account.

• 5. WHAT WE ARE TRYING TO ACHIEVE

Much of a user’s financial life already arrives in Gmail (merchant receipts, bank e-statements, broker/SIP emails). With explicit user consent, tribe reads those emails on a read-only basis and turns them into a finance snapshot and recommendations—for example spend by category, balance signals, portfolio signals, and suggestions such as reducing dining spend or putting idle cash to better use.

tribe is not an email client. We do not send, delete, or modify your mail. We do not offer enterprise monitoring or third-party surveillance products.

• 6. DATA WE COLLECT AND WHY

The table below describes the categories of data We intend to use:

Why message body access is needed. Amounts, merchants, and statement details typically live in email message bodies, not metadata alone. Narrower Gmail scopes are not sufficient for the product purpose described above. Access is limited to the Google-approved scope view your email messages and settings (https://www.googleapis.com/auth/gmail.readonly), plus basic identity scopes (email/profile) as needed to identify your account.

• 7. PURPOSE LIMITATION — WHAT WE DO NOT INTEND

We do not intend to:

• Sell mailbox data;
• Use email content to build advertising profiles or serve ads from email content;
• Read unrelated personal conversations as a product goal (Our product focus is finance-related mail);
• Share Gmail content with unrelated third parties for their marketing; or
• Send, delete, or modify your email messages.

We use Google user data only to provide or improve user-facing features that are prominent in the App’s user interface, consistent with Google’s API Services User Data Policy, including the Limited Use requirements applicable to Gmail.

• 8. HOW GMAIL ACCESS WORKS

• You voluntarily connect Gmail through Google’s OAuth consent screen.
• Scope: read-only Gmail (gmail.readonly) and identity (email/profile as needed).
• We use that access to find finance-related mail and derive insights for display in the App.
• You may revoke access at any time in Google Account → Security → Third-party access / connections, and/or via in-App controls where available.

Demo / verification context. The current build may demonstrate the consent flow and sample insights. Production intent is the same product purpose: personal finance recommendations from finance-related emails you already receive.

• 9. PROCESSORS AND SHARING

We may share personal data only as needed to operate the Services:

• Google — OAuth authentication and Gmail API access (you also remain subject to Google’s terms and privacy policy);
• Hosting, infrastructure, analytics, and support providers — to run, secure, monitor, and support the App, under contractual obligations to process data only on Our instructions;
• Legal / safety — where required by law, regulation, legal process, or to protect rights, safety, and security; and
• Business transfers — in connection with a merger, acquisition, or similar transaction, subject to continued protection consistent with this Policy.

We do not sell personal data. We do not share Gmail content with third parties for their independent advertising or marketing use.

• 10. RETENTION

We retain personal data only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law:

• Google OAuth tokens — retained while Gmail remains connected to your tribe account; deleted or invalidated within 30 days after you disconnect Gmail, revoke Google access, or delete your account;
• Raw email content accessed via the Gmail API — used to extract finance signals; We do not keep a permanent full-mailbox archive. Raw message content We store (if any) is retained for up to 90 days for processing, quality, and security, then deleted or irreversibly anonymised, unless you request earlier deletion;
• Derived insights and account profile data — retained while your account is active; deleted within 90 days after account deletion (except backups that roll off on a delayed schedule, or where law requires longer retention);
• Security, audit, and support logs — typically up to 12 months; and
• Legal holds — longer if needed to comply with legal obligations, resolve disputes, or enforce agreements.

• 11. YOUR RIGHTS

Subject to applicable law (including the DPDP Act), you may have the right to:

• Access personal data We hold about you;
• Correct inaccurate or incomplete personal data;
• Request erasure / deletion of personal data;
• Withdraw consent for processing that is based on consent (including Gmail access), without affecting the lawfulness of processing before withdrawal; and
• Nominate (where applicable) another individual to exercise rights in the event of death or incapacity, as provided under applicable law.

To exercise these rights, email legal@tribemoney.ai or support@tribemoney.ai. You may also revoke Google access at any time via your Google Account settings. Withdrawing Gmail consent may limit or disable finance-insight features that depend on Gmail.

• 12. SECURITY

We implement reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure; We cannot guarantee absolute security.

• 13. INTERNATIONAL TRANSFERS

Personal data may be processed on servers or by service providers located outside India (including where Our infrastructure or Google’s APIs operate). Where We transfer personal data internationally, We take steps consistent with applicable law to protect such data.

• 14. GRIEVANCE REDRESSAL (INDIA)

For grievances or complaints relating to personal data or this Policy, you may contact Our Grievance Officer:

Himanshu Arora, Grievance Officer
Phone: +91 9888253353
Email: legal@tribemoney.ai

We endeavour to redress complaints within a reasonable period, and in any event within timelines required under applicable law (including, where applicable, within one (1) month).

• 15. CHANGES TO THIS POLICY

We may update this Policy from time to time. The “Last Updated” date at the top will change when We do. Material changes will be highlighted in the App or by other reasonable means where required. Continued use of the Services after an update constitutes acceptance of the revised Policy, except where additional consent is required by law.

• 16. CONTACT

Privacy and legal: legal@tribemoney.ai
Support: support@tribemoney.ai
Website: https://tribemoney.ai
Related Terms: https://tribemoney.ai/legal/in/TermsConditions/