Privacy Policy

Introduction

Rupevo AI ("we", "our", "us") is operated by NexStream Studios. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. By using Rupevo AI, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

• Account Information: When you sign in with Google, we receive your name and email address.
• Financial Data: Transaction details (amount, category, description, merchant, date, payment mode), budgets, goals, and EMI records that you manually enter or scan via OCR.
• Usage Data: AI chat messages, AI usage counts, app preferences, and feature usage patterns.
• Device Information: Device type, operating system version, and crash reports (via Firebase Crashlytics) to improve app stability.
• OCR Data: Images of receipts/bills are processed by Google Gemini AI to extract transaction details. Images are sent directly to Google's API and are not stored on our servers.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Rupevo AI service
• Process and categorise your financial transactions
• Generate AI-powered spending insights, budgets, and financial advice
• Send EMI reminders and budget alerts via push notifications
• Sync your data across devices via Firebase/Firestore
• Improve app performance and fix crashes
• Respond to support requests
• Comply with legal obligations

3. Data Storage & Security

• All financial data is stored in Google Firebase/Firestore with strict security rules ensuring user isolation — you can only access your own data.
• App lock PINs are hashed using SHA-256 with a random salt before storage.
• Lockout state is persisted with exponential backoff to prevent brute-force attacks.
• We use HTTPS/TLS encryption for all data in transit.
• API keys are stored securely and never hardcoded in the application.
• Firebase Crashlytics collects crash data to improve stability — no personal financial data is included in crash reports.

4. Third-Party Services

Rupevo AI uses the following third-party services:

• Google Firebase (Authentication, Firestore, Crashlytics, Cloud Messaging) — for auth, data storage, crash reporting, and push notifications.
• Google Gemini AI — for AI chat, spending insights, OCR text extraction, and voice-to-expense parsing.
• Google AdMob — for displaying advertisements (free plan users only).
• Google Play Billing — for in-app subscription purchases.

Each service has its own privacy policy. We recommend reviewing them.

5. Data Sharing

We do not sell, trade, or rent your personal or financial data to third parties. We may share data only:

• With Google services as described above to provide app functionality.
• When required by law, regulation, or legal process.
• To protect the rights, safety, or property of Rupevo AI, our users, or the public.

6. Data Retention & Deletion

• Your data is retained as long as your account is active.
• You can delete your account at any time from Profile → Delete Account. This permanently deletes all your data including transactions, budgets, goals, EMIs, AI chat history, and usage records from our servers.
• Account deletion is irreversible and is processed immediately.
• Crash report data in Firebase Crashlytics is retained for 90 days.

7. Children's Privacy

Rupevo AI is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at nexstreamstudios@gmail.com and we will promptly delete it.

8. Your Rights

You have the right to:

• Access, update, or delete your personal data at any time through the app.
• Export your financial data as a PDF report.
• Opt out of push notifications via device settings.
• Request a copy of your data by contacting us.

For users in India, these rights are in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act).

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected within the app with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

Email: nexstreamstudios@gmail.com
Developer: NexStream Studios