Privacy & Cookie Policy

1. Information we collect

• Account details: name, email, optional profile photo, your unique username, and when you accepted these policies.
• Data you enter: transactions, categories, budgets, savings goals, reminders, clients, invoices, expected payments and staff records.
• Receipt photos: images you choose to scan, used only to read the shop name, date, items and totals.
• Team data: workspace membership, role, invitations, team chat messages, mentions and items you share in chat.
• Preferences: currency, language, category (employee, freelancer, business, agency), timezone and theme.
• Technical data: basic device/browser details and security signals to stop abuse (rate limits, CAPTCHA).

2. How we use it

Only to run Rupaira: showing balances, reports and reminders, syncing between your devices, creating invoices, scanning receipts, running team workspaces and chat, verifying your email and keeping your account secure. We never sell your data, never use your financial records for advertising, and never use your receipts or records to train public AI models.

3. Receipt scanning

When you scan a receipt, the photo is sent securely to an AI text-reading service only to extract details and suggest a category. The photo is processed for that single request and is not stored by us. You always review and edit the results before anything is saved.

4. Security of your data

• All traffic is encrypted in transit (HTTPS/TLS).
• Database access rules make sure only you — or teammates in a workspace you joined — can read or change records.
• All service keys and secrets stay on our servers and are never sent to your browser.
• Passwords are hashed by our login provider; we can never see them.
• Fingerprint, face or passkey unlock stays on your device and is never sent to us.

5. Workspaces, usernames and sharing

• Your personal workspace is private to you.
• In a team workspace, the owner, admins and members can see that workspace's shared records, chat messages, names, usernames and profile photos.
• Your username is visible to teammates and in mentions. It can be changed twice per 30 days.
• If you create a shareable invoice link, anyone with that link can view that invoice only — nothing else from your account.
• Notifications appear only if you allow them on your device; you can turn them off anytime in device settings.

6. Cookies and local storage

• Essential: sign-in session tokens that keep you logged in securely. Rupaira cannot work without these.
• Functional: settings saved on your device such as theme, currency, offline cache, cookie choice, dismissed banners and drafts.
• No advertising or tracking cookies are used.

You can clear cookies and site data in your browser settings at any time; you will be signed out.

7. Service providers

We use trusted providers for login, database hosting, file storage, email delivery, AI receipt reading and the feedback form. They process data only on our behalf under their own security obligations.

8. Retention

We keep your data while your account exists. When you delete your account, your synced records are removed; copies may remain briefly in encrypted backups before being overwritten.

9. Your rights

• Export your data as CSV from Settings at any time.
• Correct or delete any record in the app.
• Leave a team workspace or delete your account.
• Ask what we hold about you via the in-app Feedback option.

10. Children

Rupaira is not intended for children under 16, and we do not knowingly collect their data.

11. Changes and contact

If this policy changes materially, we will tell you in the app. For any privacy question, use the Feedback option inside Rupaira.