Privacy Policy

At RupeeLelo, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains what information is collected when you use the RupeeLelo mobile application ("App"), the purposes for which it is used, the measures taken to keep it secure, and the rights available to you as a user.

Your continued use of the App constitutes your acceptance of this Policy. If you disagree with any part of it, please uninstall the App from your device. This Policy should be read together with our Terms of Service, which sets out the broader conditions governing your use of our platform.

In order to confirm your identity and establish your account, we collect information such as your full name, date of birth, phone number, email address, and details from your government-issued ID. All data is transmitted via encrypted connections and stored securely at:

This information is used exclusively for identity verification, account setup, and meeting regulatory obligations. It is never sold or disclosed to third parties for commercial gain.

The App gathers technical data from your device automatically, including the device model, manufacturer name, operating system version, IP address, and Google Advertising ID. This information is used exclusively to ensure the App runs smoothly and to safeguard platform integrity — it plays no role in advertising or credit assessments.

To support security validation, the App may gather limited metadata — including package identifiers and installation timestamps — from other applications installed on your device. This does not extend to the contents, login credentials, or usage activity of those apps. The sole purpose of this metadata is to identify potentially compromised device environments; it has no bearing on credit-related decisions.

When uploading identity documents, the App may request permission to access your camera. All captured images are encrypted prior to being sent to server.rupeelelo.com and are permanently removed once the verification process is completed. The camera is never used in the background, and no images are stored beyond the point of verification.

Subject to your consent, the App may gather general location information (approximate, not precise) to confirm whether our services are available in your region. We do not track exact GPS coordinates, and location data is never used for advertising, user profiling, or credit assessments.

We gather anonymized interaction data — including pages viewed, session duration, and error reports — to enhance App performance and the overall user experience. All such data is fully anonymized and carries no influence over credit decisions or your account status.

Your data is processed solely for lawful and defined purposes, which include:

• Verifying your identity and assessing eligibility prior to account activation
• Administering your revolving credit facility and handling financial transactions
• Detecting and preventing fraud while maintaining platform security
• Addressing customer service requests and user enquiries
• Upgrading the App, resolving technical issues, and refining our services
• Meeting our applicable legal and regulatory obligations

You are free to withhold specific permissions. While doing so may restrict access to certain App features, it will not block your general use of the platform. Where a permission is declined, the associated data will not be collected or used.

We do not sell, lease, or exchange your personal data with any external party for commercial gain. Data is shared only when genuinely necessary and exclusively with the following types of recipients:

• Approved verification partners responsible for confirming the authenticity of your documents
• Technology service providers that support the secure storage and handling of data
• Government or regulatory bodies when disclosure is required under applicable law or by court order

Each third-party partner is bound by contractual confidentiality requirements and must adhere to industry-standard security practices. They are prohibited from using your data for any purpose other than the specific services they render to RupeeLelo.

Robust security controls are applied at every stage of data handling — from initial collection through to deletion. Our protective measures include:

• Fully encrypted data transfers via TLS/HTTPS protocols
• Strict role-based access restrictions so only authorised staff can access sensitive information
• Periodic independent security audits and penetration testing
• Continuous system surveillance with automated threat detection and real-time alerts

Access to sensitive user data is restricted to personnel with a demonstrated operational requirement, and all access events are logged and subject to audit. While we apply best-practice security controls, no internet transmission can be guaranteed entirely risk-free — if you believe your account may have been compromised, please contact us without delay at support@rupeelelo.com.

Personal data is held only for the duration required to satisfy the purposes outlined in this Policy, or to meet our legal, regulatory, or contractual obligations — whichever is longer.

Upon account closure and the expiry of any applicable retention periods, your data will be securely destroyed or rendered permanently anonymous. The exact duration varies by data category and the relevant regulatory framework.

Our platform is designed for users who are 18 years of age or older. We do not intentionally gather or process data from individuals below this age threshold. The identity verification procedure is specifically designed to restrict access by minors.

Should we become aware that a minor’s data has been captured, it will be erased immediately and the relevant account will be closed without notice. If you have reason to believe a minor has registered on our platform, please inform us at support@rupeelelo.com.

With respect to your personal data held by RupeeLelo, you are entitled to the following rights:

• Access: Obtain a copy of the personal data we hold on your behalf
• Correction: Request that any inaccurate or incomplete data be updated
• Deletion: Ask us to erase your data where there is no legal requirement for us to keep it
• Withdrawal of consent: If your data is processed on the basis of consent, you may revoke that consent at any time

To act on any of these rights, or if you have questions about our data handling practices, please reach out to our support team:

All verifiable requests will be addressed within a reasonable timeframe and in line with applicable legal requirements. We reserve the right to verify your identity before acting on your request.

We may revise this Policy periodically to account for changes in our services, updates to applicable law, or shifts in regulatory guidance. Where changes are significant, we will notify you via the App or by email ahead of the revised Policy taking effect.

Minor edits, clarifications, or non-substantive amendments may be made without advance notice. The "Last updated" date displayed at the top of this page always indicates when the Policy was most recently revised. Your continued use of the App following any revision constitutes acceptance of the updated Policy.

For any enquiries, concerns, or formal requests related to this Privacy Policy or the way your personal data is managed, our team is available to assist.