What Agopo does
Agopo (agopo.in) is a personal finance app for India. With your permission, it reads your Gmail to find bank alerts, credit card bills, subscription receipts and similar financial emails, and turns them into a dashboard of your expenses, bills, subscriptions and trends. It also has a timeline of trips and events, an optional family view, and an AI assistant called Po that answers questions about your own finances.
Agopo is built and operated by Navin Lalwani.
What we collect
- Account information — your name, email address and profile picture from Google Sign-in, and your phone number if you add one.
- Financial details from your emails — only from emails that look financial: sender, sender domain, subject, received date, and details we extract such as amount, merchant, category, due date and card last four digits.
- Transactions and records you create — expenses you add or edit, events, categories, and the reminders shown in the app.
- Documents you choose to save — files you upload or save from your email, stored in encrypted storage.
- Basic usage data — simple logs that help us fix problems and count how much the AI is used. No advertising or third-party tracking.
- Notification token — a device token, only if you turn on push notifications.
How we use it
- To show your expenses, credit card bills, subscriptions, timeline and spending trends.
- To remind you about bills, renewals and expiring documents.
- To answer your questions in Po, using only your own data.
- To keep the service secure and working, and to fix problems.
We do not use your data for advertising, and we do not sell it.
Google sign-in
You sign in with your Google account. For this we request only the email and profile scopes, to identify you and show your name and picture.
Gmail access
Connecting Gmail is optional and is a separate permission from signing in. We request Google's gmail.readonly scope: we can only read your email. We can never send, delete or change anything in your mailbox.
When you connect Gmail, Agopo:
- Skips emails that are not financial — obvious non-financial emails, such as promotions and newsletters, are filtered out first.
- Reads the sender, subject and text of financial-looking emails — to work out the amount, merchant, category and dates. This is done automatically.
- Stores only the extracted result — for example amount, merchant, category, due date, sender, subject and message ID. We do not keep the full email text. We keep a one-way hash (a fingerprint that cannot be turned back into the email) so we do not process the same email twice.
- Notes emails that have document-like attachments — based on the subject and file name, so you can choose whether to save them.
AI processing
To read financial emails and answer your questions, Agopo sends the relevant text to Google's Gemini API for processing on our behalf. It is used only to give you these features. No person at Agopo reads your emails. We do not use your data, including data from your Gmail, to train or improve general AI models, and we do not allow others to.
Google API Services User Data Policy
Agopo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Gmail data only to provide the features you see in Agopo. We do not sell it, use it for advertising, or allow humans to read it, except with your consent, for security or abuse investigation, or where the law requires.
Who can see your data
Only you, and family members you invite. Invited family members can see the combined family view you both take part in. We do not share your data with anyone else, other than the service providers below that help us run Agopo.
Service providers
- Supabase — database, sign-in and encrypted file storage. Infrastructure runs on AWS.
- Vercel — app hosting.
- Google — Sign-in, Gmail API, and the Gemini API for AI processing.
How we protect and keep your data
Data is encrypted in transit and at rest. Database access is restricted with Row Level Security, so your data is readable only from your own authenticated session. We keep your data while your account is active. When you delete your account, we remove your data.
Your choices and rights
- Stop Gmail access at any time — in Agopo, go to Settings and choose Disconnect. This revokes our access at Google. You can also go to your Google Account permissions, choose Agopo and select “Remove access”.
- Edit or delete your records — you can edit or delete any transaction, event or document inside the app.
- Delete your account — in Settings, choose Delete account. This permanently removes your account and all your data, and disconnects Gmail.
- Get a copy of your data — email us at the address below and we will send it.
Changes to this policy
If we change how we handle your data, we will update this page and the date at the top.