Privacy Policy — Rufi
Version 1.0 · Last updated: 9 September 2026
1. Data controller
Maria Consuelo Maddaloni, Minturno (LT), Italy. Email for any data request: rufi@rufiway.com. No Data Protection Officer is appointed, as it is not required for this activity. [VERIFY]
2. What Rufi is
Rufi is a personal finance app that helps you track income and expenses, understand how much you save, and discover bonuses, deductions and benefits you may be entitled to. Rufi provides information for educational purposes: it does not file applications or returns on your behalf and does not provide financial, tax or legal advice.
3. What data we process
Account data: email address, name (optional), password (stored only in encrypted form by Supabase), date of acceptance of the terms and age confirmation, app language.
Financial data you enter: accounts, balances, transactions with amount, date, category and description, budgets, savings goals, assets and net worth, recurring expenses, optional tax information (regime, indicative annual income, expenses flagged as deductible) and, if you enable the VAT-number module, invoice and set-aside data. Rufi never accesses your bank accounts and never asks for bank credentials: all data is entered manually by you.
Optional demographic profile (only with your explicit consent): country and province of residence, income bracket. Used to compare your spending with public statistics (ISTAT, Eurostat). You can withdraw consent at any time in Settings.
Technical data: anonymous device identifier, app version, error reports (see section 6).
Data we do not collect: tax code, IBAN, bank details, identity documents, GPS location, contacts, photos.
4. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the service (account, storing your data, calculations, reminders) | Performance of a contract (Art. 6.1.b GDPR) |
| Generating analyses and suggestions with AI (section 5) | Performance of a contract; AI features can be turned off in Settings |
| Comparison with statistical data (demographic profile) | Consent (Art. 6.1.a), revocable |
| Service emails (account confirmation, password reset) | Performance of a contract |
| Security, abuse prevention, error diagnostics | Legitimate interest (Art. 6.1.f) |
| Legal obligations | Legal obligation (Art. 6.1.c) |
We do no advertising profiling, we do not sell data and we show no ads.
5. Artificial intelligence
Some Rufi features (spending analysis, savings suggestions, forecasts) are generated by AI models provided by Anthropic. For this purpose we send Anthropic only aggregated and anonymised data: totals by category, ratios and trends, with no email, name, identifiers, transaction descriptions or account names. Optionally, you can allow the use of your first name to personalise messages (off by default). Anthropic acts as a processor, does not use the data to train its models and does not retain it beyond what is needed to generate the response. [VERIFY: current Anthropic contractual terms] All AI-generated content is labelled as such. You can turn off all AI features in Settings: no data is then sent to Anthropic. AI suggestions are educational information, not advice: Rufi does not assess your creditworthiness and shares no assessment with third parties.
6. Who sees your data (processors)
| Provider | Role | Data location |
|---|---|---|
| Supabase | Database, authentication, server functions | Frankfurt, Germany (EU) |
| Anthropic | AI models (section 5) | USA — transfer under Standard Contractual Clauses [VERIFY: Data Privacy Framework] |
| Resend | Service email delivery | EU (Ireland) |
| Cloudflare | Website and content delivery | EU/global, with contractual safeguards |
| Sentry (if enabled) | Automatic app error reporting | EU (Germany). Reports are stripped of email, amounts, descriptions and IP addresses before sending |
| Apple / Google | App distribution and, in future, payments | Under their respective policies |
No one else receives your data. We do not share it with banks, financial institutions, tax assistance centres or authorities, unless required by law.
7. How long we keep it
- Account and financial data: as long as your account is active. On account deletion they are deleted immediately and irreversibly.
- Technical logs of AI features (metadata only: date, analysis type, cost; no content): 90 days.
- Expired AI suggestions: 30 days after expiry.
- Household invitations: deleted on acceptance, or 30 days after expiry.
- Data collected by the website calculator (email and answers): 12 months from last contact.
- Backups: [VERIFY: Supabase backup retention for the active plan].
8. Household
If you share Rufi with a family member, the financial data entered in the household (accounts, transactions, budgets) is visible to all members. If you leave the household or delete your account, your personal data (account, consents, notifications, progress) is deleted, while the transactions you entered remain in the household, attributed to the administrator, without your tax flags. If you are the last member, the whole household is deleted.
9. Your rights
At any time you can: access your data, correct it, export it (from the app), delete it (in the app: Settings → Delete account, with a double confirmation and by typing the word DELETE, no need to contact us; deletion is immediate and irreversible), restrict or object to processing, withdraw consents. For rights not available in the app write to rufi@rufiway.com: we reply within 30 days. You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
10. Security
Data encrypted in transit (TLS) and at rest; per-user data isolation at database level (Row Level Security); session stored in the device’s protected area (Keychain/Keystore); optional biometric lock; screen hidden in the app switcher; optional two-factor authentication. In case of a data breach posing a risk to you, we will inform you without delay and notify the Authority within 72 hours.
11. Minors
Rufi is for people aged 18 or over. We do not knowingly collect data from minors; if we become aware of it, we delete it.
12. Changes
If this policy changes substantially, we will notify you in the app and ask you to review it before continuing. The current version is always available at rufiway.com/privacy.