Privacy Policy

1. Introduction

Rupix Labs Private Limited (“Rupix”, “we”, “us”) builds privacy-first apps and tools, including Rupix Finance (Budget & Expense Tracker), Rupix Health, Rupix Hub and our partner store apps. This policy explains what we collect, why, and the control you have over your data. Questions? Email support@rupix.io.

Our core principle is local-first: your financial and health records are stored on your own device as the source of truth. Cloud features are optional. Exactly what leaves your device, and how it is protected, depends on the app and the feature; for Rupix Finance this is spelled out in section 5 below, so you never have to guess.

2. Information We Collect

Depending on which Rupix app you use, we may handle:

• Account information — when you sign in with Google or with email, your email address, name (if you give one) and account ID. We never see your Google password; email passwords are stored only as a secure hash by our authentication provider.
• Health & wellness data (Rupix Health) — vitals, diet logs, medications, cycle and fasting data. This is stored on your device and only leaves it if you enable encrypted cloud sync.
• Financial data (Rupix Finance) — expenses, income, budgets and similar records, stored on your device. Some features send data to our servers: Family Hub Cloud Mode (only if you turn it on) and Udhaar records (always). Details in section 5.
• Meal photos (optional AI diet scan) — if you choose to scan a meal, the photo is sent securely to our processing service to estimate food and portions, then used to return that result. It is not used to train any model.
• Transaction alerts (Rupix Finance, optional “Auto-track”) — if you switch it on and grant notification access, the app reads bank, UPI and card alerts on your phone to prepare expense entries for you. This happens entirely on your device and the notifications are never sent to us. See section 6.
• Diagnostics — crash reports and basic performance/analytics (via Firebase) to keep the apps stable.
• Notification token — a push token (Firebase Cloud Messaging) so we can deliver reminders you set.
• Location — only in apps that show nearby partner shops, and only to find shops near you. Rupix Health and Rupix Finance do not collect location.

3. How We Use Your Information

We use the information above only to provide and improve the features you use — running the app, syncing your data when you ask, returning AI diet estimates, sending reminders you set, and fixing crashes. We do not use your personal, health or financial data for advertising profiling.

4. Sharing Your Information

We do not sell your data, and we do not use your personal, health or financial data to train AI models.

We share data only with the service providers needed to run the apps, and only for that purpose:

• Google Firebase — crash reporting, analytics and push notifications.
• Our AI processing service — only the meal photo you choose to scan, only to return a food/portion estimate.
• Supabase — our database and sign-in provider: it stores your account and the data you choose to sync (see section 5), protected by access rules so each account can only reach its own data.
• Cloudflare — the secure network our apps talk to our servers through, and where the optional on-device AI model file is downloaded from.

We may also disclose information if required by law, or to protect rights and safety.

5. Rupix Finance: what stays on your phone and what syncs

Rupix Finance (Budget & Expense Tracker) is built local-first. By default your money data lives on your phone, and the features that use our servers are listed here plainly.

• On your phone, encrypted. Expenses, income, budgets, accounts, savings goals, recurring bills, portfolio and trips are stored in an encrypted database on your device. The encryption key is kept in your phone’s secure storage.
• Never leaves your phone. Portfolio assets and Travel trips are never synced. Money Coach, Ask Coach, receipt scanning and Auto-track all run on your phone: your questions, receipts and notifications are not sent to us or to any AI service. The optional on-device AI model is a one-time download; downloading it sends no personal data.
• Family Hub Cloud Mode (off by default). If you turn it on, your transactions, accounts, budgets, goals and recurring items are copied to our servers over an encrypted (HTTPS) connection so family members can share them. Descriptions, categories and payment modes are end-to-end encrypted when your family space has a family key; amounts, dates and entry types are stored readable by our systems so the app can sync and total them. Turn Cloud Mode off to stop syncing.
• Udhaar (always online). Udhaar records are stored on our servers so both people in a lending or borrowing entry can see them.
• Family notifications. When a family member adds an entry, the alert other members receive includes its amount and description and is delivered through Firebase Cloud Messaging.
• No bank login, no ads, no data sale. The app never asks for your bank password, and your financial data is not sold, used for advertising or used to train AI models.

Our goal is end-to-end encryption for all synced finance data; until that ships, this section describes exactly how it works today.

6. Health & Sensitive Data

Rupix Health is a personal wellness tool, not a medical device, and does not provide medical advice. Your health records live on your device. If you enable cloud sync, the data is end-to-end encrypted with keys only you hold — we cannot read it. Camera-based readings (such as heart rate) and AI meal estimates are approximate, for personal tracking only.

7. Notification Access (Auto-track spends)

Rupix Finance offers an optional feature called Auto-track, which turns your bank, UPI and card alerts into ready-made expense entries so you do not have to type them. It uses Android’s notification access permission, and it is off unless you turn it on yourself in Android Settings.

How it works, precisely:

• Only money alerts are looked at. Every notification is checked on your device for a payment amount and a transaction word. Anything else — messages, email, social and other apps — is discarded immediately and never stored.
• Nothing is uploaded. Notification content is never transmitted to Rupix or any third party. All reading and interpretation happens on your phone.
• Stored briefly, and encrypted. A matched alert is kept encrypted on your device only until the app converts it into a suggested entry, then the original text is deleted.
• You confirm every entry. Nothing is added to your accounts automatically. Suggestions wait for you to accept or discard them.
• You can revoke it any time from Android Settings → Notification access, and delete anything already detected from inside the app.

We do not use this information for advertising, profiling, or model training.

8. Data Retention & Deletion

Because Rupix is local-first, the simplest deletion is on your device:

• On-device data is removed when you delete the relevant records in the app or uninstall the app.
• Account & synced data — in Rupix Finance, go to Profile → Delete my account. You can also email support@rupix.io with the subject “Data Deletion Request” from your registered email. Full steps: rupix.io/delete-account.
• We retain diagnostic/crash data only for a limited period needed to keep the apps stable.

9. Children’s Privacy

Our health and finance apps are intended for users aged 18 and over and are not directed to children. We do not knowingly collect data from children.

10. Contact Us

For any privacy question or request, email support@rupix.io, or write to:

Rupix Labs Private Limited
Surat, Gujarat, India