Privacy Policy

1. Introduction

Rupix Labs Private Limited (“Rupix”, “we”, “us”) builds privacy-first apps and tools, including Rupix Finance (Budget & Expense Tracker), Rupix Health, Rupix Hub and our partner store apps. This policy explains what we collect, why, and the control you have over your data. Questions? Email support@rupix.io.

Our core principle is local-first: your financial and health records are stored on your own device as the source of truth. Cloud sync is optional, off by default for sensitive data, and end-to-end encrypted when you turn it on.

2. Information We Collect

Depending on which Rupix app you use, we may handle:

• Account information — if you sign in, the email address and account ID from Google Sign-In. We never see or store your Google password.
• Health & wellness data (Rupix Health) — vitals, diet logs, medications, cycle and fasting data. This is stored on your device and only leaves it if you enable encrypted cloud sync.
• Financial data (Rupix Finance) — budgets, expenses and categories, stored on your device; synced only if you enable it.
• Meal photos (optional AI diet scan) — if you choose to scan a meal, the photo is sent securely to our processing service to estimate food and portions, then used to return that result. It is not used to train any model.
• Transaction alerts (Rupix Finance, optional “Auto-track”) — if you switch it on and grant notification access, the app reads bank, UPI and card alerts on your phone to prepare expense entries for you. This happens entirely on your device and the notifications are never sent to us. See section 6.
• Diagnostics — crash reports and basic performance/analytics (via Firebase) to keep the apps stable.
• Notification token — a push token (Firebase Cloud Messaging) so we can deliver reminders you set.
• Location — only in apps that show nearby partner shops, and only to find shops near you. Rupix Health and Rupix Finance do not collect location.

3. How We Use Your Information

We use the information above only to provide and improve the features you use — running the app, syncing your data when you ask, returning AI diet estimates, sending reminders you set, and fixing crashes. We do not use your personal, health or financial data for advertising profiling.

4. Sharing Your Information

We do not sell your data, and we do not use your personal, health or financial data to train AI models.

We share data only with the service providers needed to run the apps, and only for that purpose:

• Google Firebase — crash reporting, analytics and push notifications.
• Our AI processing service — only the meal photo you choose to scan, only to return a food/portion estimate.
• Supabase — secure storage for your encrypted sync data and account, where enabled.

We may also disclose information if required by law, or to protect rights and safety.

5. Health & Sensitive Data

Rupix Health is a personal wellness tool, not a medical device, and does not provide medical advice. Your health records live on your device. If you enable cloud sync, the data is end-to-end encrypted with keys only you hold — we cannot read it. Camera-based readings (such as heart rate) and AI meal estimates are approximate, for personal tracking only.

6. Notification Access (Auto-track spends)

Rupix Finance offers an optional feature called Auto-track, which turns your bank, UPI and card alerts into ready-made expense entries so you do not have to type them. It uses Android’s notification access permission, and it is off unless you turn it on yourself in Android Settings.

How it works, precisely:

• Only money alerts are looked at. Every notification is checked on your device for a payment amount and a transaction word. Anything else — messages, email, social and other apps — is discarded immediately and never stored.
• Nothing is uploaded. Notification content is never transmitted to Rupix or any third party. All reading and interpretation happens on your phone.
• Stored briefly, and encrypted. A matched alert is kept encrypted on your device only until the app converts it into a suggested entry, then the original text is deleted.
• You confirm every entry. Nothing is added to your accounts automatically. Suggestions wait for you to accept or discard them.
• You can revoke it any time from Android Settings → Notification access, and delete anything already detected from inside the app.

We do not use this information for advertising, profiling, or model training.

7. Data Retention & Deletion

Because Rupix is local-first, the simplest deletion is on your device:

• On-device data is removed when you delete the relevant records in the app or uninstall the app.
• Account & synced data — to delete your account and any cloud-synced data, email support@rupix.io with the subject “Data Deletion Request” from your registered email. We will verify and permanently delete it within 30 days.
• We retain diagnostic/crash data only for a limited period needed to keep the apps stable.

8. Children’s Privacy

Our health and finance apps are intended for users aged 18 and over and are not directed to children. We do not knowingly collect data from children.

9. Contact Us

For any privacy question or request, email support@rupix.io, or write to:

Rupix Labs Private Limited
Surat, Gujarat, India