Privacy Policy

Overview & Applicability

This Privacy Policy applies to the FundFlow application (hereby referred to as "Application") for mobile devices and web platforms, created and maintained by Unio Pvt Ltd (hereby referred to as "Service Provider") as a free service. This service is provided "AS IS".

By downloading, installing, or interacting with FundFlow, you acknowledge and agree to the data handling practices described throughout this policy document.

Information Collection and Use

The Application collects information when you download and use it. This technical and diagnostic information may include:

• Device Telemetry: Your device's Internet Protocol (IP) address, device model, and operating system version.
• Usage Analytics: Timestamps of interaction, navigation flow within the Application, and session duration.
• Account Identifiers: Voluntarily provided credentials such as email address, user ID, and username required to facilitate multi-device cloud synchronization.

The information requested by the Service Provider will be securely retained and utilized strictly as detailed in this policy statement.

Location Data Policy

The Application does not gather precise, real-time GPS coordinates of your mobile device.

Approximate geographical location derived at the coarse city or national level may be utilized to deliver region-appropriate currency symbols (e.g., LKR, INR, USD), local merchant category matching, and localized compliance notices.

Third-Party Services & Infrastructure

Only aggregated, anonymized telemetry is periodically transmitted to trusted infrastructure partners to help optimize stability, crash diagnosis, and overall service delivery.

Below are direct references to the individual Privacy Policies of third-party service providers utilized by FundFlow:

Data Disclosure & Legal Obligations

The Service Provider may disclose collected information only under strict, limited circumstances:

• As required by applicable statutory law, such as to comply with a verified court order, subpoena, or similar legal process.
• When necessary in good faith to defend the rights and safety of our users, investigate fraud, or prevent malicious misuse.
• With trusted service contractors bound by non-disclosure agreements who operate under our strict instructions and data security parameters.

Data Retention & Opt-Out Rights

You can immediately cease all collection of telemetry by simply uninstalling the Application using standard device app management workflows.

User-provided data is retained for as long as your account remains active. If you wish to permanently delete your transaction history, account details, or backups, please refer to our dedicated Data Deletion Policy or contact us directly at dev@unio.lk.

Children's Privacy Protection

The Application is not directed toward children under 13 years of age. The Service Provider does not knowingly collect personally identifiable information from children under 13.

If we discover that a child under 13 has provided personal records without verified parental consent, we will promptly expunge such data from our servers. Parents and guardians may reach out directly to dev@unio.lk for immediate resolution.

Security & Encryption Standards

We implement multi-layered administrative, electronic, and physical safeguards designed to prevent unauthorized access, alteration, or interception of your financial records.

All in-flight communications utilize TLS 1.3 encryption, and at-rest cloud databases are protected by industry-standard AES-256 cryptographic controls.

Changes, Consent & Contact

This Privacy Policy may be updated periodically. Any updates will be reflected directly on this page with a revised effective date. Continued usage of the Application constitutes acceptance of the modified terms.

For any privacy inquiries or assistance, please reach out to our dedicated privacy officer: