Last updated 15 September 2026
Rupex ("we", "us", "our") is committed to protecting your privacy and being transparent about how your data is collected, used and protected. This policy applies to the Rupex mobile app and this website.
Rupex only uses data you explicitly give it — either typed in directly, or shared with the app yourself using Share to RUPEX (see below). We never scrape your bank, SMS, or notifications in the background, and Rupex has never requested (or needed) the permissions that would allow that.
Rupex never reads your SMS, contacts, call logs or files in the background, and never requests those permissions. Rupex does not collect or store a profile photo, and does not access your device's location.
Share to RUPEX lets you send a payment receipt straight from GPay, PhonePe, Paytm, a bank SMS, or similar apps, using your phone's own Share menu — you decide when to share; nothing is read automatically or in the background.
Nothing shared this way is saved automatically: you always see a confirmation screen first, where you can edit or discard it before it becomes a real expense or income entry.
Your financial data is encrypted at rest using a key unique to your account, and your password is hashed — never stored or visible as plain text, including to us.
If you turn on App Lock, unlocking Rupex uses your device's own fingerprint or face recognition, handled entirely by your phone's operating system — Rupex never receives, sees, or stores your biometric data.
If you enable notifications, we register your device with Firebase Cloud Messaging (a Google service) to deliver reminders such as upcoming EMI due dates. This shares only a device identifier needed for delivery, not your financial data.
You can create an account with an email and password, or sign in with Google. If you use Google Sign-In, we receive your name and email from Google to create or match your account — we never see or store your Google password.
If you use the in-app Rupex AI assistant, your question and a snapshot of that month's figures (such as your budget, spending, and goals) are sent to our AI service provider to generate a reply. This data is used only to generate that response and is not stored on our servers.
We do not sell your data, and we do not share it with third parties for advertising. We use a small number of trusted service providers (such as cloud hosting, push notifications, and email delivery) to operate Rupex, each contractually bound to protect your data and use it only to provide their service to us.
You can export a copy of your data at any time from Profile → Privacy & Data → Export. You can permanently delete your account and data from the same screen — deleting your account permanently erases every record tied to it from our database. This action cannot be undone.
We retain your data for as long as your account is active. If you delete your account, your data is permanently erased from our database.
Rupex is intended for users aged 18 and above and is not directed at children. We do not knowingly collect data from anyone under 18.
We may update this policy as Rupex evolves. Material changes will be reflected by updating the "Last updated" date above; continued use of Rupex after a change constitutes acceptance of the revised policy.
Questions about this policy or your data? Email us at hello@rupexio.in.
Rupex