LEGAL

Privacy Policy

Last updated 26 July 2026

Rupex ("we", "us", "our") is committed to protecting your privacy and being transparent about how your data is collected, used and protected. This policy applies to the Rupex mobile app and this website.

1. Information We Collect

Rupex is a manual, deliberate expense tracker — we don't scrape your bank or SMS. Everything below is entered directly by you:

Rupex never reads your SMS, contacts, call logs or files, and never requests those permissions. Rupex does not collect or store a profile photo, and does not access your device's location.

2. How Your Data Is Protected

Your data is stored on our servers and transmitted over an encrypted (HTTPS) connection. Your financial data is encrypted at rest, and your password is hashed — never stored or visible as plain text, including to us.

3. Signing In

You can create an account with an email and password, or sign in with Google. If you use Google Sign-In, we receive your name and email from Google to create or match your account — we never see or store your Google password.

4. Rupex AI

If you use the in-app Rupex AI assistant, your question and a snapshot of that month's figures (such as your budget, spending, and goals) are sent to our AI service provider to generate a reply. This data is used only to generate that response and is not stored on our servers.

5. Data Sharing

We do not sell your data, and we do not share it with third parties for advertising. We use a small number of trusted service providers (such as cloud hosting and email delivery) to operate Rupex, each contractually bound to protect your data and use it only to provide their service to us.

6. Your Rights

You can export a copy of your data at any time from Profile → Privacy & Data → Export. You can permanently delete your account and data from the same screen — deleting your account permanently erases every record tied to it from our database. This action cannot be undone.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data is permanently erased from our database.

8. Children's Privacy

Rupex is intended for users aged 18 and above and is not directed at children. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We may update this policy as Rupex evolves. Material changes will be reflected by updating the "Last updated" date above; continued use of Rupex after a change constitutes acceptance of the revised policy.

In short: you enter your own data, we encrypt the sensitive parts, we don't sell it, we don't read your SMS, and you can export or delete everything whenever you want.

10. Contact Us

Questions about this policy or your data? Email us at hello@rupexio.in.