CA Mode
Privacy policy
CA Mode runs on the computer it is installed on. This is the same notice each profile reads and accepts before it can chat, connect INDmoney or save history.
What is saved, and where
Everything below is saved on the computer that runs CA Mode: this computer, or the server your team hosts it on. Your profile name, a scrypt hash of your PIN, the optional profile details, savings goals and decisions you enter yourself, your INDmoney connection tokens and, with Google sign-in, your Google account ID and email address. CA Mode never saves details the assistant infers from your chats. If you choose to save history: your chats (each kept 30 days after its last message, at most 50) and a daily snapshot of your INDmoney net worth, allocation and holdings for the retention period you pick, the holdings from any CAS statement you upload (the last 12; never the PDF, its password, or your name, PAN or contact details), and the portfolio change investigations you run (the last 50: the snapshots compared, the figures computed from them, the checks and the result), and a record of the steps behind each chat answer (the last 200, none older than 30 days: the start of your question, which data was read and a short preview of it, the figures CA Mode calculated from it, the checks on the answer and how long each step took; never the answer itself or your PIN, tokens or PAN). Everything is in a SQLite file readable only by the account that runs CA Mode. INDmoney tokens are encrypted with a key kept outside that file.
Locked with your PIN
Your saved chats, answer records, portfolio snapshots, investigations, CAS holdings, profile details, goals and decisions are encrypted with a key that only your PIN or your recovery code can unlock. Other profiles, and anyone with a copy of the database, cannot read them. Whoever runs a hosted copy could change the app to capture your PIN, so only use one run by someone you trust. After the app restarts you enter your PIN again. If you forget your PIN, your recovery code lets you set a new one. If you lose both, your saved history cannot be recovered by anyone.
Signing in with Google
Where CA Mode is set up for Google sign-in, Google tells CA Mode your Google account ID, email address, whether it is verified, and your name. CA Mode keeps the account ID and email address (the address encrypted with the same key as INDmoney tokens) to know which profile is yours, and uses your name only to suggest a profile name; it never sees your Google password and has no access to your Gmail, Drive, contacts or anything else in your Google account. Google learns that you signed in to CA Mode, under Google's own privacy policy. Signing in does not unlock your saved history: your PIN still does. The account link is part of your export and is deleted with your profile.
What whoever runs CA Mode can see
Where an admin page is turned on, the people who run this copy can see a list of profiles with each one's name, Google email address, plan, the number of questions asked today, when it was created and last used, whether it accepted this notice, whether INDmoney is connected and when the last snapshot was taken, and whether its PIN is locked after wrong guesses. From that page they can change your plan, clear a PIN lock, sign your profile out on every device, or delete your profile and everything it owns. The admin page cannot open your PIN-locked history: your chats, goals, decisions, profile details and portfolio snapshots are not shown there.
Where your questions go
To answer you, your message, recent chat history, and the profile details, goals and decisions that bear on your question (with figures calculated from them) go to the AI model you select, along with any INDmoney or snapshot data Portfolio Analyzer reads for that answer. With Ollama the model runs on a computer controlled by whoever runs CA Mode (this computer, or for a hosted copy the operator's own machine, reached over an encrypted private network) and is not sent to any AI company. With OpenAI or Groq it is sent to that company and handled under its own data policy. Portfolio Analyzer reads from INDmoney with read-only access and cannot trade or move money.
Private mode
Chats are kept in memory only and are gone when you sign out or the app restarts. No portfolio snapshots are taken, CAS statements cannot be uploaded, investigations and answer records are not saved, and switching to private mode deletes the chats, answer records, snapshots, investigations and CAS holdings already saved for this profile. Your INDmoney connection tokens, profile details, goals and decisions are still saved; disconnect INDmoney or remove your saved goals and decisions on the Goals page to delete them.
In your browser
CA Mode sets one cookie, which keeps this browser signed in to your profile (and, during Google sign-in, ties Google's answer to this browser), and remembers your theme, agent and model choice in this browser. It has no advertising and no third-party analytics or tracking. Pages load fonts from Google Fonts and the chart library from cdn.plot.ly, so those services see this computer's IP address when the app opens.
Page-view counts
If you save history, CA Mode adds one to a daily count each time you open one of its pages, such as Goals or Portfolio Overview. Only the date, the page name and the number are stored: not your profile, what you typed, which chat or investigation you opened, your IP address or your browser. The counts stay in the same SQLite file for 90 days, are never sent anywhere, and can be read by whoever runs CA Mode. Because they are not linked to you, they are not part of your export and are not removed when you clear history or delete your profile. Private mode is never counted.
Usage limits
A copy of CA Mode shared with other people may limit how much it can be used; a copy for one computer has no limits unless whoever runs it sets them. Your profile's plan (Free, Individual or Team) is stored with it, changed only by whoever runs this copy, and is part of your export; the daily question limit applies only to the Free plan. With a daily question limit, the number of questions your profile asked today and yesterday is stored (never what you asked); it is not part of your export and is deleted with your profile. With request rate limits, the times of recent requests from your IP address and profile are kept in memory only, for about an hour at most, and never saved. If sign-up includes a Cloudflare Turnstile check, the sign-up form loads it from challenges.cloudflare.com, which sees your IP address and browser details to tell people from bots.
Your controls
From your profile you can change these choices at any time, export your data, clear your saved history, disconnect INDmoney, or delete the profile and everything stored for it. The Goals page shows the goals, decisions and profile details the assistant can use, and lets you edit or remove them.