DATA LOCATION
India-first storage, with clear cross-border limits.
Posture reviewed: 17 September 2026
WealthWallah is not currently an India-only data system. The financial plan stays on your device unless account saving is enabled. The development database is in Mumbai, while hosting, authentication, security, support, and service-administration data may be processed outside India.
Current private preview
- Device plan: profile and calculator inputs are stored in the browser on the device you use.
- Optional analytics: off by default and device-only in this preview. Financial input values are not recorded in analytics events.
- Account storage: production account sync is not active. The connected development database must not hold real user data.
Database region
The connected Supabase development project uses the specific AWS region ap-south-1, South Asia (Mumbai). Supabase states that a project's selected region determines where its primary project data is stored, while also warning that region selection is a data-location control rather than proof of regulatory compliance.
The separate production project must also be created in a specific India region before account saving is enabled.
Where cross-border processing may occur
Website delivery, sign-in, abuse prevention, operational logs, support, and service administration use provider infrastructure that has not been contractually verified as India-only. Users should therefore assume that limited account identifiers and technical information may be processed outside India. WealthWallah will not claim full localization unless every relevant provider and data flow is verified.
Transfer posture
The Digital Personal Data Protection Rules, 2025 permit transfers outside India subject to requirements the Central Government may specify. WealthWallah will maintain a processor and transfer inventory, follow applicable government restrictions, and update this page if the production architecture changes.
Before public account launch
- Create the separate production database in Mumbai and verify its region.
- Review provider terms, subprocessors, transfer mechanisms, retention, deletion, and backup handling.
- Record every production data flow, including authentication and security logs.
- Update the privacy notice and consent notice with verified operator and processor details.