What they may do · DPDP §6(4)

What Slice does with your data

slice, now a small finance bank, collects biometric data, selfie and video KYC, location, contacts, SMS access and the list of apps on your phone, shares data with credit bureaus, NPCI and business partners, targets offers at your spending patterns, and keeps records after your account ends.

• Shares your data with partners

  Passed to group companies, advertisers or analytics firms you never chose.

  What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.

  Show me where they say that

  Slice’s own policy says “With vendors or service providers, business partners, to provide you with the Services, facilitate account creation, provide technical or customer support, send you communications via emails, messages or tele-calling to inform you about the Services, or products, offers or services that may be of interest to you, push notifications to your electronic device on Our behalf, and collect, process and settle payments.”

  Our summary shares information with vendors, service providers and business partners — including for marketing communications about products and offers — and, in the preceding item of the same list, 'With financial institutions, credit information companies, Account Aggregators, NPCI, RBI, UIDAI, CKYCR or other regulatory agencies'; information may also pass to a buyer or successor in a merger or sale of assets.

• Builds an advertising profile of you

  They watch what you view, tap and buy, and use it to decide which ads you see.

  What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.

  Show me where they say that

  Slice’s own policy says “To provide relevant promotional offers or rewards to you, based on your consumption patterns;”

  Our summary uses the user's consumption patterns to decide which promotional offers and rewards to present; the location clause separately says location is collected to 'offer you customized promotions', and the cookies section states that cookies 'can also help ensure marketing you see online is more relevant to you and your interests.'

• Follows you onto other websites and apps

  Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.

  What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.

  Show me where they say that

  Slice’s own policy says “We may periodically collect information of apps installed on your mobile device for the purpose of enabling financial services like credit facilities.”

  Our summary periodically collects the inventory of other apps installed on the user's device, for credit facilities and risky-app detection; a separate clause states the Bank may receive information about the user from 'third party business partners, technical or other sub-contractors, analytics providers, search information providers' and combine it with information collected on its own platform.

• Keeps your records long-term

  Held on after you stop using the service.

  What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.

  Show me where they say that

  Slice’s own policy says “We will keep the Information we collect on our systems or with third parties (All further details can be found here) for as long as required for the purposes set out above or even beyond the expiry of transactional or account based relationship with you: (a) as required to comply with any legal and regulatory obligations to which we are subject, or (b) for establishment, exercise or defence of legal claims, or (c) as specified in this Privacy Policy, or (d) in accordance with your specific consents.”

  Our summary keeps information, on its own systems or with third parties, for as long as required and expressly beyond the end of the account or transactional relationship; the deletion section adds that 'Bank may continue to retain certain Information to comply with Applicable Laws.' No maximum period is stated in the policy itself — it is deferred to a separate record-retention document.

• Processes your face or other biometrics

  Face matching, liveness checks or similar.

  What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.

  Show me where they say that

  Slice’s own policy says “We may require access to your device’s camera for a seamless experience, for clicking your selfie for KYC purposes, and/or for video KYC, or to upload photos for profile updation and/or as may be required for KYC purposes, or for uploading any other necessary documents on the Portal, including for KYC verification.”

  Our summary takes camera access for selfie KYC and video KYC, and takes 'one-time access of microphone of Your device to facilitate on-boarding on the Portal through/for Video KYC verification'; the identity-information list expressly includes 'biometric data', signatures and photograph, and CCTV images are collected at branches, offices and ATMs.

Questions

Every use above is one Slice declared in its own published privacy policy, which we read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours and is labelled as ours. Nothing here is inferred.

Saaph.in is a DPDP consent and request management platform operated by Ronin Works Private Limited. It is a communication facilitator, not your legal or authorised representative. The DPDP Act 2023 commences in stages up to May 2027, so a request made today asks for voluntary compliance and records the date you asked. Our privacy policy