Privacy Policy

Effective: 2026-05-10 · Last updated: 2026-05-20

This Privacy Policy explains what personal information Federico Bello ("Rupta", "we") collects when you use the Rupta mobile app (the "Service"), how we use and share it, and what choices you have. By using the Service you agree to this policy.

1. Information we collect

Information you give us directly

• Apple or Google account data: name and email.
• Profile data you choose to add: username, display name, bio, city, date of birth, preferred categories, and activity styles.
• Quest content: photos, videos, descriptions, ratings, and comments you submit to record completions.
• Social interactions:friend requests, group memberships, comments, and "respect" reactions you give or receive.
• Reports and support requests: messages you send us about other people or about the Service.

Information we collect automatically

• Device and app information: device type, operating system, app version, language, and time zone.
• Push notification tokens:unique identifiers issued by Apple or Google so we can send the notifications you've opted into.
• Log data: IP address and API call metadata, retained for security and debugging.

Payment provider information

When you purchase a Rupta Pro subscription through Apple or Google, that platform processes the payment. Rupta never receives your card data. We receive a non-personal identifier and entitlement status (whether your subscription is active and when it expires) through RevenueCat, our subscription management provider.

2. How we use information

We use information to:

• Create and operate your account, including signing in with Apple or Google.
• Provide core features: posting completions, managing groups and challenges, calculating AURA, leaderboards, and friend lists.
• Send the push notifications you've consented to (for example, friend requests, comments, group activity).
• Process subscriptions and entitlement state through Apple, Google, and RevenueCat.
• Maintain trust and safety: review reports, detect abuse, and enforce our Terms of Service.
• Diagnose technical issues and improve the Service.
• Comply with legal obligations.

3. When we share information

We don't sell your personal information. We only share it as described below:

• With other users.Profile details you make visible (username, display name, avatar, bio, AURA) and content you post (completions, comments, reactions) are visible to other people based on the privacy settings you choose. Content marked private to a group is visible only to that group's members.
• With service providers. We use the third parties listed in Section 4 to operate the Service. They process data on our behalf under contracts that limit how they can use it.
• For legal reasons. We may disclose information when we believe in good faith that disclosure is required by law, court order, or to protect the rights, safety, or property of Rupta, users, or the public.
• In a corporate transaction.If Rupta is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction. We'll notify you before personal information becomes subject to a different privacy policy.

4. Third-party processors

The following providers process data on our behalf:

• Supabase — hosts our database and authentication backend. Stores account data and user-generated content.
• Cloudflare — hosts photos and videos uploaded via Cloudflare Images and Cloudflare Stream.
• RevenueCat — manages subscription state and receives non-personal identifiers and entitlement events from Apple and Google.
• Apple — provides Sign in with Apple, in-app purchase processing on iOS, and Apple push notification service.
• Google — provides Google sign-in, in-app purchase processing on Android, and Firebase Cloud Messaging for Android push notifications.

5. How long we keep information

We keep your account data and content while your account is active. When you delete your account (see Account deletion), we erase your profile, completions, photos, videos, comments, and reactions within 30 days, with the following exceptions:

• Encrypted backups may persist for up to 30 additional days before being automatically rotated and overwritten.
• Anonymized log data with no link to your account may be retained longer for security and statistical purposes.
• Records the law requires us to keep (such as tax, accounting, or fraud-prevention records) may be retained for the period applicable law requires.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal information.
• Object to or restrict certain processing.
• Request a portable copy of your information.
• Withdraw consent (where processing is based on consent).

You can exercise most of these rights from the app: edit your profile, change visibility settings, manage push notifications, and request account deletion. For other requests, email us at rupta.app@gmail.com.

7. Children's privacy

Rupta is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 created an account, contact us and we'll delete it along with any associated information.

8. International transfers

Our providers may process information in countries other than yours. Those countries may have different data protection laws. Where required, we implement safeguards (such as standard contractual clauses) to protect transferred information.

9. Security

We use industry-standard security practices, including encryption in transit (HTTPS) and access controls on our backend. No system is perfectly secure and we can't guarantee absolute security. If we become aware of a breach affecting your personal information, we'll notify you as required by applicable law.

10. Changes

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date and, for material changes, give reasonable notice in-app or by email.

11. Contact