01Who we are
Rispense is a personal finance app operated by [Legal entity name], [Registered address] (“Rispense”, “we”, “us”). This policy covers the Rispense Android app and the website at rispense.app.
For the personal data described here, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023.
02What we collect
We collect only what the app needs to show you what you can safely spend.
| Data | What it includes | Why |
|---|---|---|
| Account | Email address, name, and a hashed password or your Google account’s email and name. Sign-in sessions. | To create your account and keep your records in sync. |
| Records you add or confirm | Transactions, bills, budgets, goals and your profile (name, payday, goals, reminder time). | To work out safe-to-spend and show your month. |
| Bank and UPI notifications | Notifications from a fixed list of bank and UPI apps, only after you grant notification access. | To suggest transactions for you to review. |
| Bank SMS, if you allow it | New incoming SMS from bank senders. | To suggest transactions for you to review. |
| AI conversations, if you opt in | The questions you ask and the replies. | To answer questions about your own money and keep your chat history. |
| Device integrity | A Google Play Integrity verdict when you sign in and before sensitive actions. | To block sign-ins from tampered or unofficial copies of the app. |
| Waitlist | Your email address, if you join the waitlist on this website. | To tell you when Rispense is available. |
Notifications and SMS stay on your phone until you confirm them
Notifications and SMS are read on your phone. The app keeps the parsed details as a suggestion and does not keep the raw message text. Suggestions you have not reviewed never leave your phone. Only a transaction you confirm becomes a record and syncs to your account.
For SMS, Rispense only receives new messages as they arrive. It never reads your inbox, and messages from personal phone numbers are dropped on the device without being processed.
We do not ask for access to your contacts, and we never connect to your bank account or move money.
03How we use it
- Run the app: safe-to-spend, upcoming bills, budgets and goals.
- Sync your records to your account so they are there after you reinstall or switch phones.
- Answer AI assistant questions, only if you have turned the assistant on.
- Keep accounts secure and prevent abuse.
- Send account emails, such as verification codes and password reset links.
We do not sell your personal data, and we do not use it for advertising.
04The AI assistant
The assistant is off until you turn it on, and the app asks for your consent first. You can turn it off at any time.
When you send a question, our server on Cloudflare reads your synced records and works out the figures with the app’s own calculations. Those figures go to a language model run on Cloudflare Workers AI, which writes the reply. The model is not given your full transaction history.
Your conversations are stored under your account until you delete them. You can delete one conversation, all of your history, or your whole account. The assistant gives information about your own money. It is not financial advice.
05Where it is stored and who processes it
Your records are stored in our Cloudflare account. We ask Cloudflare to keep them in the Asia-Pacific region, but this is a preference, not a guarantee, so your data may be processed outside India.
| Provider | What they do for us |
|---|---|
| Cloudflare | Hosts our server, database, AI model and website, and sends our account emails. |
| Google sign-in, Play Integrity checks and app distribution through Google Play. | |
| Fontshare | Serves this website’s font, so your browser sends it your IP address. |
We do not send your financial records to any other company.
06How long we keep it
- Your records are kept while you have an account.
- Deleted items leave a small deletion marker, which is removed after 180 days.
- AI conversations are kept until you delete them or your account.
- Account deletion removes your account, records, AI history and usage counters. Deletion starts straight away, and a daily job continues it until every row is gone. Short-lived rate-limit counters, which hold only an account ID and a count, expire within a minute.
- Waitlist emails are kept until launch, or until you ask us to remove yours.
07Security
All traffic uses HTTPS. Sign-in requires a genuine copy of the app from Google Play, and actions such as changing your password or deleting your account need a fresh check. Sessions last 30 days, and you can sign out of every device from Settings.
Our servers do not log the text of your notifications, transactions or AI messages. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.
08Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- Ask what personal data we hold about you and how we use it.
- Correct or update it. You can edit most of it in the app.
- Erase it. Delete your account from Settings, or email us.
- Withdraw consent, for example by turning off the AI assistant or notification access.
- Nominate someone to exercise these rights if you die or become unable to.
- Raise a grievance with us, and then with the Data Protection Board of India.
Email privacy@rispense.app to make a request. We reply within the time the law sets.
09Children
Rispense is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child has an account, email us and we will delete it.
10Changes to this policy
When we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell you in the app before it takes effect.
11Contact and Grievance Officer
Grievance Officer: [Grievance Officer name]
Email: privacy@rispense.app
Address: [Registered address]
For anything else, see the contact page.