1. Introduction

Welcome to RUPI ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our personal finance application.

2. Information We Collect

Account Information

• Email address (for authentication)
• Name (for personalization)
• Password (encrypted, never stored in plain text)

Financial Data

• Bank account names and balances (entered by you)
• Transaction details from uploaded bank statements
• Categories and tags you create
• Budget information

What We DO NOT Collect

• ❌ Bank login credentials (we never ask for them)
• ❌ Credit card numbers
• ❌ Aadhaar, PAN, or government ID numbers
• ❌ Real-time location data

3. How We Use Your Information

We use your information solely to:

• Provide and improve our personal finance tracking service
• Parse bank statements you upload
• Power AI chat features to help you understand your finances
• Send important account notifications

4. Data Storage & Security

• Encryption: All data is encrypted at rest and in transit (TLS 1.3)
• Cloud Provider: Data stored on Google Cloud Platform (asia-south1 region)
• Backups: Daily automated backups with 30-day retention
• Access Control: Only you can access your data

5. AI & Third-Party Services

Our AI chat feature uses Google Gemini to process your questions. When you use AI chat:

• Your question and relevant financial context are sent to Google Gemini
• Google does not store or train on your data
• AI responses are generated in real-time and not retained by Google

6. Data Sharing

We DO NOT sell, rent, or share your data with third parties.

Exceptions:

• If required by law (court order, legal process)
• To protect our rights or prevent fraud

7. Your Rights

You have the right to:

• Access: View all data we have about you
• Export: Download your data in standard formats
• Delete: Request complete deletion of your account and data
• Correct: Update or correct your information

8. Data Retention

• Active accounts: Data retained as long as your account is active
• Deleted accounts: Data permanently deleted within 30 days
• Backups: Deleted from backups within 90 days

9. Cookies

We use essential cookies for authentication and session management only. We do not use tracking cookies or third-party advertising cookies.

10. Children's Privacy

RUPI is not intended for users under 18 years old. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

privacy@rupiapp.in