What they may do · DPDP §6(4)
What CASHe (Bhanix Finance and Investment Limited) does with your data
Reads your financial SMS with machine-learning models, monitors installed apps, can read and send mail from your Gmail, keeps data for ten years and lets third-party ad firms track you across sites — though it says it never touches contacts or call logs.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
CASHe (Bhanix Finance and Investment Limited)’s own policy says “We may share your personal information with other corporate entities and affiliates to help detect and prevent identity theft, fraud and other potentially illegal acts; correlate related or multiple accounts to prevent abuse of our services, to facilitate joint or co-branded services, where such services are provided by more than one corporate entity, or if required to do so in course of our business operations.”
Our summary shares personal information with corporate entities and affiliates, and separately lists RBI-registered lending partners, regulated third-party service providers (payment gateways, credit bureaus, KYC validators), call centres and banks, and regulatory or judicial authorities; customer information may also transfer as an asset in a merger or acquisition. The policy states data is not sold, rented or leased to any third party.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
CASHe (Bhanix Finance and Investment Limited)’s own policy says “We use third-party advertising companies to serve ads to the users of the Website. These companies may use information relating to the User’s visits to the Website and other websites in order to provide customised advertisements to the User.”
Our summary third-party advertising companies serve ads using information about the user's visits to this and other websites in order to customise those advertisements; the policy also says the App collects information to provide 'more relevant ads' and that third-party advertising companies may display advertisements in the App.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
CASHe (Bhanix Finance and Investment Limited)’s own policy says “Your interaction with online targeted content (such as advertisements) that we or service providers on our behalf provide to you via third party websites and/or applications.”
Our summary lists the user's interaction with targeted content served on third-party websites and applications as a source of collected data; also sets cookies to record which pages were visited and which links were clicked, and collects and monitors the list of apps installed on the device for 'credit profile enrichment'.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
CASHe (Bhanix Finance and Investment Limited)’s own policy says “All data and information collected, processed, stored, or generated pursuant to the provision of services shall be retained for a period of 10 (ten) years from the date of collection, termination of relationship, closure of account, or completion of the relevant transaction or service.”
Our summary sets a ten-year retention period running from collection, closure of the account or the end of the relationship, allows retention beyond that period for court orders or regulatory investigations, accounts classified as fraud/defaulter or under recovery, and audit, statutory or tax compliance, and keeps KYC, loan history, transaction history and CIBIL data after account deletion.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
CASHe (Bhanix Finance and Investment Limited)’s own policy says “We will ensure that biometric data is stored/collected in the systems, only in accordance with applicable law and the IT RSP Rules.”
Our summary addresses biometric data expressly, saying it is collected or stored only as permitted by applicable law and the IT RSP Rules, and elsewhere that the company does not store biometric data 'unless mandated by applicable law'. A user image is collected to cross-check and verify the user's authenticity, and camera and microphone are accessed one-time for onboarding/KYC with explicit consent.
-
Trains AI models on your content
Your photos, messages or activity are used to train machine-learning models.
What this costs you. This one has no undo. Once your content is inside a trained model, no erasure request can lift it back out.
Show me where they say that
CASHe (Bhanix Finance and Investment Limited)’s own policy says “The data is accessed by our machine learning models only.”
Our summary financial SMS content is accessed by the company's machine learning models for credit risk assessment, and Gmail access is taken to power 'AI-driven credit and grievance redressal services'. The policy describes machine-learning processing and AI-driven features; it does not expressly state that user data is used to train models.
CASHe is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does CASHe (Bhanix Finance and Investment Limited) do with my personal data?
According to CASHe (Bhanix Finance and Investment Limited)'s own privacy policy, read on 2026-08-14, it discloses 6 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, processes your face or other biometrics, trains ai models on your content.
Can I withdraw my consent from CASHe (Bhanix Finance and Investment Limited)?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does CASHe (Bhanix Finance and Investment Limited) track me for advertising?
Yes — CASHe (Bhanix Finance and Investment Limited)'s published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one CASHe (Bhanix Finance and Investment Limited) declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy