Privacy Policy for QuickRupee
Effective Date: January 10, 2026
Welcome to QuickRupee ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your financial data. This Privacy Policy explains how we collect, process, and safeguard your information.
1. Our Core Commitment: Local-First Processing
We strictly adhere to a "Local Processing" principle for sensitive user data:
- SMS & Call Logs: We guarantee that your raw SMS messages and Call Log history are processed exclusively on your device (locally). We DO NOT upload, store, or share your raw SMS content or call history with our servers or any third parties.
- Data Minimization: We only upload the specific financial ledger entries that you explicitly generate or confirm for cloud synchronization.
2. Permissions & Data Usage
To provide automated bookkeeping and security features, QuickRupee requests the following permissions. Here is how we use them:
A. SMS Permission (READ_SMS)
- Purpose: To automate expense and income tracking.
- How it works: Our algorithms scan your SMS inbox locally on your device to identify transactional messages (e.g., from banks or wallets). We extract only the amount, merchant name, and date to generate a draft transaction for your ledger.
- Privacy Guarantee: We do not read your personal or private messages (OTP, family chats). The raw body of your SMS messages is never transmitted to our servers.
B. Call Log Permission (READ_CALL_LOG)
- Purpose: For account security and device verification (Voice OTP).
- How it works: We use this to verify that the SIM card associated with your registered phone number is physically present in the device during login or critical actions (Device Consistency Check). This helps prevent remote fraud.
- Privacy Guarantee: We do not upload your call history or contact list. The permission is strictly used for local verification logic.
C. Installed Applications (QUERY_ALL_PACKAGES)
- Purpose: Security environment scanning.
- How it works: We scan the list of installed apps locally to detect potential malware, screen recorders, or remote access trojans that could compromise your financial data.
D. Camera & Location (Optional)
- Camera: Used only if you choose to take a picture.
- Location: Used only if you choose to tag a location to a specific transaction entry.
3. Information We Collect & Store (Cloud Sync)
To enable "Cloud Sync" (so you can access your ledger on multiple devices), we securely transmit and store only the following user-generated data:
- Account Information: Your mobile number (used as your unique User ID).
- Ledger Data: The financial entries you create or confirm (Amount, Category, Date, Remarks/Notes).
- User Profile: Your nickname and avatar image (if uploaded).
Storage Endpoint: All synced data is stored on our secure servers via encrypted APIs.
4. Data Security
We employ industry-standard security measures to protect your data:
- Encryption: All data transmission between your app and our servers (e.g., ledger entries) happens over a secure SSL/TLS encrypted connection.
- No Clear Text: We do not allow plain HTTP traffic; all communication is directed to our secure API endpoints (e.g.,
https://api.quickrupee.click/).
5. Data Disclosure & Sharing
- No Sale of Data: We do not sell your personal information to third parties.
- Service Providers: We may share your phone number with trusted SMS/Voice gateway providers solely for the purpose of sending OTPs (One-Time Passwords) for login.
- Legal Requirements: We may disclose data if required by law enforcement agencies or court orders in accordance with applicable laws.
6. Your Rights
- Access & Correction: You can view and edit your ledger data directly within the app.
- Deletion: You have the right to request the deletion of your account and all associated cloud data. You can do this via the app settings or by contacting our support team.
7. Contact Us
If you have any questions regarding this Privacy Policy or wish to report a grievance, please contact our Grievance Officer: