Security & Privacy at MyTaxLocker

Your Form 16 holds some of your most sensitive personal information. MyTaxLocker is built so that data stays yours — parsed on your device, encrypted at the field level, and never monetised through ads or trackers.

On-device Form 16 parsing

MyTaxLocker reads Part A and Part B of your Form 16 on your device. You do not need to upload the document anywhere for it to be read — the figures are extracted locally and laid out for you to review.

AES-256 field-level encryption with a device-only key

Sensitive personal fields — your PAN, Aadhaar, mobile number and bank details — are protected with AES-256 field-level encryption. The encryption key is generated and held on your device. Because the key never leaves your device, the encrypted fields stay unreadable to anyone without it — including us.

No ads, no third-party trackers

MyTaxLocker carries no advertising and no third-party trackers. Your tax information is not a product to be sold or profiled.

Optional biometric app lock

You can turn on an optional biometric app lock so that your fingerprint or face is required to open the app, adding a layer of protection if your phone is shared or lost.

Account & data deletion (DPDPA)

You can delete your account and your data from within the app at any time. This in-app erasure is aligned with the right to erasure under India's Digital Personal Data Protection Act (DPDPA).

Data residency in India

Your data is hosted in India, in the AWS Mumbai (ap-south-1) region.

Hardened release builds

Release builds of the app are hardened with ProGuard/R8 to shrink and obfuscate the shipped code.