Your money, your data.
What Rupya collects, why it needs it, who else handles it, and how to take it with you or delete it. In plain words.
Last updated
The short version
- On the phone only, your entries never reach us.
- With an account, we keep what you enter so it's on every device. It isn't end-to-end encrypted.
- We never ask for bank passwords or card numbers, never show ads and never sell your data.
- You can export everything, or delete your account and everything in it, from Settings.
Who we are
Rupya is a personal money manager, built and run by Dhruv Vasisht in India ("Rupya", "we", "us"). For the information you keep in a Rupya account, we decide how it's used, which makes us its data fiduciary under India's Digital Personal Data Protection Act, 2023. This policy covers the website, the web app and the Android and iPhone apps.
Two ways to use Rupya
On the phone only. The phone app can run without an account. Your entries live in a private database on the phone and never reach our servers, so we can't see them, back them up or recover them. Keeping a backup is up to you.
With a Rupya account. Your entries are stored on our servers so the same data is on the web and on every phone you sign in on. The rest of this policy is mostly about this way. You can move your data between the two from Settings, Your data.
What we collect with an account
- Account details. Your name, email address and password. The password is stored only as a one-way bcrypt hash, so nobody can read it. We also keep your currency, time zone, the day your month starts and which summary emails you want.
- Your money records. The accounts, balances, categories and entries you add, with their amounts, dates, notes and descriptions. For each import we keep the file name and how many entries came in, so you can undo it. The imported file itself isn't kept.
- Signed-in devices. For each device: a label such as "Chrome on Windows", the kind of device, its IP address and browser details, when it was last used and, on phones, the operating system and app version. You can see this list in Settings and sign any device out.
- Activity history. A record of changes in your account, such as an entry edited or a setting changed, with the time, the device and its IP address. It helps you and us spot anything you didn't do.
- Notification address. If you allow notifications on a phone while signed in, the address that phone receives them at is kept with its session and removed when you sign out.
- Very big exports. An export too big to download straight away is built on our servers and kept for 7 days so the link we email you works. Then it's deleted.
What we never collect
Rupya doesn't connect to your bank. We never ask for bank passwords, card numbers or UPI PINs, and the apps don't read your contacts, location, messages or photos. There are no advertising identifiers.
If a future feature needs something new, like reading bank SMS, it will stay off until you turn it on, and this policy will say so before the feature arrives.
How we use it
- To run Rupya: keep your data in sync and work out balances, totals and charts.
- To send the emails the service needs, such as email verification, password resets and export links, and the summary emails you choose.
- To keep accounts safe, for example by limiting repeated sign-in attempts and signing out a device whose sign-in looks stolen.
- To find and fix problems, using technical logs that leave out sign-in tokens.
We don't show ads, sell or rent your data, build profiles for anyone else, or use your data to train AI models.
Who else handles it
A few companies run parts of Rupya for us. They handle your data only to provide that service to us:
| Company | What it does | Where |
|---|---|---|
| Supabase | Stores the database and very big export files | Tokyo, Japan |
| Render | Runs the Rupya API | Singapore |
| Vercel | Hosts the website and counts visits | Worldwide edge network |
| Resend | Delivers Rupya's emails | Outside India |
| Upstash | Queues background jobs, such as a summary email to send | Outside India |
| Expo | Issues the address a phone receives notifications at | Outside India |
This means your account data is stored and processed outside India. We share data with anyone else only when the law requires it, and never for marketing.
How we protect it
- Everything travels over encrypted connections.
- Sign-in tokens are stored only as hashes and change as you use Rupya. If an old one is used again, that device is signed out.
- Export files sit in private storage and open only through a signed link that expires.
- The phone apps keep your sign-in in the phone's secure storage.
Your account data isn't end-to-end encrypted. The people who run Rupya can technically reach the database, and do so only to keep the service running or when you ask for help. No system is perfectly secure. If a breach affects your data, we'll tell you and the Data Protection Board of India as the law requires.
How long we keep it
We keep your data for as long as you have an account. You can delete your account from Settings at any time. Your account and everything in it, including activity history and export files, are then removed from the live database straight away. Copies in our providers' backups expire on their own schedule, after a short time.
Very big export files are deleted after 7 days, whether or not you delete your account.
Your choices and rights
Under the Digital Personal Data Protection Act, 2023, you can:
- Get a copy. Export everything to Excel or CSV whenever you like, or ask us for a summary of what we hold.
- Correct it. Edit your details and entries in the app, or ask us.
- Delete it. Delete your account from Settings, or ask us.
- Change your mind. Turn summary emails off in Settings or with the link in any of them. Deleting your account withdraws your consent for everything else.
- Nominate someone to use these rights for you if you die or can't act yourself.
- Complain. Write to us first. If you aren't satisfied with our answer, you can go to the Data Protection Board of India.
Children
Rupya is for people aged 18 and over. If we learn that an account belongs to someone younger, we'll delete it.
Changes to this policy
When this policy changes, the date at the top changes too. If a change affects how your data is used, we'll email account holders before it takes effect. The terms of service cover the rest of how Rupya works.
Contact and grievances
Write to vasisht.dhruv7@gmail.com. If you have a Rupya account, write from its email address so we can tell it's you. We aim to reply within 30 days.