Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how Rupexi Technologies Pvt. Ltd. (“Rupexi”, “we”, “us”) collects, uses, stores, and protects your personal and financial information when you use the Rupexi app and website. We designed Rupexi to be privacy-first: your financial data is yours, and we never sell it.

1. Information We Collect

  • Account data — name, email, phone number, and password (stored only as a salted hash).
  • Financial data you provide — expenses, budgets, savings goals, and receipts you scan.
  • Connected account data — where you link a bank or card, read-only transaction data via regulated open-banking providers. We cannot move money.
  • Usage & device data — app interactions, device type, and crash diagnostics, used to improve reliability.

2. How We Use Your Information

We use your information to provide the service: categorising expenses, generating AI insights and budgets, detecting subscriptions, sending alerts you have enabled, processing payments, and providing support. AI features process your data to generate personalised recommendations; we do not use your individual financial data to train third-party foundation models.

3. Legal Bases (GDPR / DPDP Act)

Where the EU GDPR or India’s Digital Personal Data Protection Act applies, we process data on the bases of performing our contract with you, your consent (which you may withdraw at any time), our legitimate interests in operating and securing the service, and compliance with legal obligations.

4. Data Sharing

We share data only with service providers who help us run Rupexi (e.g. cloud hosting, payment processing via Stripe, open-banking aggregators), each bound by contract to protect it. We do not sell, rent, or share your financial data with advertisers. We may disclose data where legally required.

5. Data Retention & Deletion

We retain your data while your account is active. You can export your data at any time and delete your account from Settings, or by emailing us; on deletion we remove your personal data within 30 days, except where retention is required by law (e.g. tax records).

6. Your Rights

Subject to applicable law, you may access, correct, export, or delete your data, object to or restrict certain processing, and lodge a complaint with your data-protection authority. Contact us to exercise any of these rights.

7. Security

We protect data with encryption in transit and at rest, access controls, and regular security reviews. See our Security page for details.

8. Changes to This Policy

We may update this policy and will post the new version here with a revised “last updated” date. Material changes will be notified in-app or by email.

Questions about this document? Contact us at privacy@rupexi.app.