Privacy Policy for My IPO App - Bulk Apply Nepal
Last updated: May 12, 2026
This Privacy Policy explains how My IPO App, developed by Zima Digital, handles your information.
---
1. Information We Do NOT Collect
We do not collect, transmit, or store any of your personal information on our servers. We have no database or backend server that holds your Meroshare username, password, PIN, CRN, or BOID/Demat number.
---
2. Information Stored Locally on Your Device
The App stores the following data exclusively on your device:
- Meroshare Credentials (username, password, PIN, CRN, bank details): Stored using expo-secure-store, which uses device-level hardware encryption. This data never leaves your device and is never sent to our servers.
- BOID/Demat numbers and account names: Stored locally for the IPO result check feature.
- App preferences (language, theme): Stored locally using AsyncStorage.
- News and IPO data cache: Stored locally to improve loading speed.
- Portfolio data cache: Stored locally to avoid repeated network requests.
- User notes: Stored locally on your device only.
---
3. How the App Uses Your Credentials
Your credentials are used solely to authenticate directly with the official Meroshare/CDSC servers (webbackend.cdsc.com.np) on your behalf. The App acts as an interface — your credentials go directly from your device to Meroshare's official API. We never intercept or log this data.
---
4. Third-Party Services
The App connects to the following external services:
- Meroshare / CDSC (webbackend.cdsc.com.np) — For login, IPO application, and portfolio data
- CDSC IPO List (cdsc.com.np) — For current IPO listings
- MeroLagani (merolagani.com) — For financial news
- Nepal Rastra Bank (nrb.org.np) — For forex/exchange rate data
- App Backend (render.com) — or app notices, maintenance status, and push notification delivery (device/app info only; no credentials or sensitive data sent).
---
5. Notifications
The App may send local push notifications to remind you about upcoming Meroshare account or password expiry dates. These notifications are generated on your device and do not involve any external server.
---
Device and App Information
When you enable push notifications, the App collects limited device and app information to deliver notifications reliably. This includes your device type (e.g., Android/iOS), app version, and device name. This information is used solely for app functionality (such as sending notifications) and is not used for tracking or advertising. No sensitive personal information is collected or shared.
--
7. Backup and Export
The App provides an optional backup feature that allows you to export your account data as an encrypted file to your device. The export is encrypted with a passphrase you provide. This file stays on your device and is never uploaded anywhere by the App.
---
8. Children's Privacy
This App is intended for use by adults (18 years and older) who are investors in the Nepal Stock Exchange. It is not directed at children under the age of 13.
---
9. Data Security
All sensitive credentials are protected using device-level encryption via expo-secure-store. We follow a local-first, zero-knowledge architecture, meaning neither the developer nor any third party has access to your Meroshare credentials.
---
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected in the "Last updated" date above.
---
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
myipoapp@gmail.com