Privacy Policy

1 Introduction

Redule ("we," "our," or "us") operates the Redule mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Redule, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2 Information We Collect

2.1 Personal Information

When you create an account or use our Service, we may collect:

• Name and email address
• Profile information (avatar, preferences)
• Device information (device type, operating system, unique device identifiers)
• IP address and general location (country/region level only)

2.2 Financial Information

To provide our AI-powered debt management features, we collect:

• Debt details you manually enter (amounts, interest rates, payment schedules, lender names)
• Income and budget information you provide
• Financial goals and dream targets
• Transaction categories (if you use CSV import)

2.3 Usage Data

We automatically collect certain information about how you interact with the Service:

• App usage patterns and feature engagement
• Session duration and frequency
• Crash reports and performance data
• AI Coach conversation metadata (not content)

3 How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Redule Service
• Generate personalized AI debt payoff strategies (Avalanche, Snowball, hybrid)
• Detect interest leaks and provide savings recommendations
• Power the AI Coach with context-aware financial advice
• Track your debt-free progress and dream goals
• Send important notifications about your financial milestones
• Conduct analytics to improve AI model performance
• Respond to customer support inquiries
• Comply with legal obligations

4 Data Storage & Security

We take the security of your data seriously and implement industry-standard measures:

Measure	Details
Encryption at Rest	AES-256 encryption for all stored financial data
Encryption in Transit	TLS 1.3 for all data transmission
Access Control	Role-based access with multi-factor authentication for staff
Data Isolation	Per-user data isolation — no cross-account data access
PIN/Biometric	Local device-level security with PIN or biometric lock
Hosting	SOC 2 Type II certified cloud infrastructure

5 Data Sharing & Disclosure

We do NOT sell, rent, or trade your personal information to third parties. We may share data only in these limited circumstances:

• Service Providers: Trusted third-party vendors who assist in operating our Service (hosting, analytics, crash reporting) under strict data protection agreements
• Legal Requirements: When required by law, court order, or governmental regulation
• Safety: To protect the rights, property, or safety of Redule, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to users

6 Your Rights & Choices

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Export: Download your data in a portable format (CSV, PDF)
• Opt-Out: Unsubscribe from marketing communications at any time
• Restrict Processing: Request limitation of how we process your data

To exercise any of these rights, contact us at privacy@redule.com. We will respond within 30 days.

7 Cookies & Tracking

Our website uses minimal, essential cookies for functionality. We do not use advertising cookies or third-party tracking pixels. Analytics are privacy-focused and anonymized.

8 Children's Privacy

Redule is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

9 International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EU/EEA data transfers.

10 Data Retention

We retain your personal data only for as long as necessary to provide the Service and fulfill the purposes described in this policy. When you delete your account:

• Personal and financial data is deleted within 30 days
• Anonymized analytics data may be retained for product improvement
• Legal compliance data is retained as required by law

11 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via in-app notification or email at least 14 days before the changes take effect. Continued use of the Service after changes constitutes acceptance.

12 Contact Us