Fineline Privacy Policy

Last updated: October 1, 2026

1. Introduction

This Privacy Policy explains how Mysthetic Inc. (“Mysthetic”, “we”, “us” or “our”) collects, uses, shares and protects information when you use the Fineline mobile application (the “App”) and related services (together, the “Services”).

Fineline is a digital custody ledger for jewellery workshops. It lets workshop owners, managers and karigars record handoffs of gold, silver, stones and other materials by weight and purity.

By using the Services you agree to the practices described in this policy. If you do not agree, please do not use the Services.

2. Roles: workshops and Mysthetic

A workshop owner who creates a workshop in Fineline decides who may join and what is recorded in that workshop’s ledger. The workshop owner is responsible for the business records it keeps in Fineline. Mysthetic hosts and processes that information on the workshop’s behalf to provide the Services, and is responsible for the account information described below.

3. Information we collect

a. Account information

• Phone number – used to sign in with a one-time password (OTP) sent by SMS.
• Name – the name you enter, shown to other members of your workshop.
• Language preference – English, Hindi, Gujarati or Bengali.
• Workshop membership – the workshop you belong to, your role (owner, manager or karigar), assigned processes, and when you joined or were approved.

b. Workshop and ledger information

When you or other members of your workshop use the App, we store:

• Workshop details such as the workshop name and city.
• Ledger entries (“slips”): issues, receipts, transfers, wastage and external movements, including material type, weight, purity, the people involved, dates and times, and any notes or reasons entered.
• The history of each entry (created, accepted, rejected), daily reconciliation summaries, and recorded differences or losses.
• Vendor details entered by a manager, such as a vendor’s name, phone number and address.
• Optional job or order tags, due dates and notes.

c. Device and usage information

• Diagnostics: crash reports, device model, operating system version and app version, collected through Firebase Crashlytics.
• Usage analytics: app events such as screens viewed and features used, collected through Google Analytics for Firebase.
• Security signals: app integrity checks through Firebase App Check (Google Play Integrity on Android, App Attest/DeviceCheck on Apple devices) to protect the Services from abuse.

d. Camera

The App asks for camera access only to scan a workshop’s join QR code. Images from the camera are processed on your device and are not uploaded or stored by us.

e. Information we do not collect

We do not collect your precise location, contacts, photos, email address, or payment card details. Fineline does not process payments.

4. How we use information

We use information to:

• Create and secure your account and verify your phone number.
• Operate the workshop ledger, including showing entries to the right members according to their role.
• Validate ledger entries and keep an accurate, tamper-resistant history.
• Provide support and respond to your requests.
• Diagnose problems, prevent fraud and abuse, and improve the Services.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it for third-party advertising.

5. Who can see your information

• Members of your workshop. Owners and managers can see the workshop’s full ledger and member list, including names and phone numbers. Karigars can see the entries and balances that involve them.
• Service providers. We use Google Firebase and Google Cloud (Authentication, Cloud Firestore, Cloud Functions, Crashlytics, Analytics and App Check) to host and run the Services. These providers process data on our behalf under their own terms and security commitments.
• Legal reasons. We may disclose information if required by law, or to protect the rights, safety or property of our users, Mysthetic or others.
• Business transfers. If Mysthetic is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.

6. Where data is stored

Data is stored on Google Cloud infrastructure. Our backend functions run in the Mumbai (asia-south1) region. Some service providers may process data in other countries; where they do, we rely on their contractual and security safeguards.

7. Data retention

• We keep your account information for as long as your account is active.
• Ledger entries are a workshop’s business records. Accepted entries cannot be edited or deleted by members, so the history stays accurate. The workshop keeps these records while the workshop is active.
• When you delete your account, we delete your account information as described on our Delete Account page. We may keep limited information where required by law or to resolve disputes.
• Crash and analytics data are kept according to Firebase’s retention settings.

8. Security

We use encryption in transit, role-based access rules, server-side validation of ledger entries and app integrity checks to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023, you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information.
• Request deletion of your account and personal information.
• Withdraw consent, which may mean you can no longer use the Services.
• Nominate another person to exercise your rights if you die or become incapacitated.
• Raise a grievance with us, and, if unresolved, with the relevant data protection authority.

To exercise any of these rights, contact us at privacy@mysthetic.com or use our Delete Account page. We may need to verify your identity, usually by confirming your registered phone number.

10. Children

The Services are intended for adults working in jewellery businesses. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page and change the “Last updated” date. For significant changes, we will notify you in the App.

12. Contact us

For questions about this policy or your information:

• Email: privacy@mysthetic.com
• Support: flashpath.app/fineline/support