How your credentials are stored

LaganiLabs stores your MeroShare username and password exclusively on your device using AES-256 encryption. They are never transmitted to or stored on LaganiLabs servers. Every time the app needs to submit an IPO application, it decrypts your credentials locally and communicates directly with the MeroShare API on your behalf.

Your credentials are encrypted with AES-256 before being saved to your device's secure storage (iOS Keychain or Android Keystore). The encryption key is derived from a combination of your device hardware ID and a per-installation secret — meaning even if someone obtained a backup of your device storage, they could not decrypt your credentials without the original device.

Our servers store only your LaganiLabs account information: email address, subscription status, and application history metadata (IPO name, date, result). We never see your MeroShare username, password, DP ID, CRN, or bank account details. You can verify this in our Privacy Policy linked in the app footer.

For an extra layer of protection, you can enable biometric lock (Face ID / fingerprint) in Settings > Security. When enabled, LaganiLabs will require biometric authentication before decrypting credentials or submitting any application — even for Auto Apply confirmations.

Uninstalling LaganiLabs removes all locally stored credentials from your device. If you reinstall and reconnect your MeroShare accounts, new encrypted credentials are generated. No credential data is retained by LaganiLabs after uninstall.