Data privacy
Open books. Private people.
Khula Aashiana exists to show every member where the society's money goes. That only works if the people behind the numbers can trust us with their details.
So the society's finances are open to its members, while each person's own information is shared only as far as the law and the society's bye-laws require, and never outside the society.
How we protect your society's data
These safeguards are built into the app itself, not promises for later.
Stored in India
Your society's database is kept in Mumbai. The app's servers also run in Mumbai.
The database decides who sees what
Access rules sit inside the database itself, not just the app, so a member of one society can never read another society's records.
Two people for every money movement
Whoever records a payment, invoice or bill run cannot approve it. A second office-bearer must, and both names are kept.
History that cannot be rewritten
Posted entries are never edited or deleted. Each change is chained to the one before it, and a monthly seal lets members check nothing was altered.
Your dues stay private
Other members see the society's totals, not what each flat owes, unless the general body resolves to publish a named list.
Encrypted connections
Every page and sign-in uses HTTPS. Our database provider also encrypts the data it stores.
No card details, ever
Online payments are entered on Razorpay's pages. We never receive card numbers, UPI PINs or banking passwords.
Never sold. Partners see nothing
We never sell personal data. Partner offers are labelled, never appear on money screens, and a partner learns nothing about you unless you choose to share your details for one offer.
Laws and standards we follow
Each one says exactly where we stand. We would rather tell you what we have not done yet than show a badge we have not earned.
- Following
Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025
Our notices, consent, rights handling, security safeguards and breach reporting follow India's data protection law. Its main obligations apply from 13 May 2027, and we are building to them now.
- Built in
Maharashtra Co-operative Societies Act, 1960
Members' right to the society's records is the reason the app exists. It tracks the 45-day limit for supplying copies of records, the billing caps and the audit deadlines, each with its legal source.
- Through Razorpay
PCI DSS (card payment security)
Card payments are handled by Razorpay, which states that it is PCI DSS Level 1 certified. Card data never reaches Khula Aashiana.
- Not certified
ISO/IEC 27001 and other certifications
We hold no security certification yet. We will list one here only after an independent auditor has certified us.
Your rights
You can ask what data is held about you, have it corrected, withdraw consent, and nominate someone to act for you. Financial records are corrected with a visible correcting entry rather than deleted, because societies must keep their books by law. The Privacy Policy explains how.
If something goes wrong
If personal data is ever exposed, we will tell your society and the people affected without delay, explain what they can do, and report it to the Data Protection Board of India as the law requires. Questions or concerns: write to connect@khulaaashiana.com. We reply within 7 days.