Your privacy is
completely non-negotiable.

Welcome to YŪPE. This Privacy Policy is published by YŪPE Edufy LLP ("we", "our", "us", or the "Company"), a limited liability partnership incorporated in India, having its principal operations in Delhi NCR, India.

This policy governs your privacy rights and our practices regarding the collection, processing, storage, and transfer of personal data when you access or use the YŪPE mobile application (available on Google Play Store and other certified platforms), our website at yupeme.com, and related digital educational services (collectively, the "Services").

We operate in full compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and relevant guidelines established by the Reserve Bank of India (RBI) and Google Play Developer Policies.

Traditional consumer apps often quietly monetize their users by selling demographic data to credit card peddlers, personal loan apps, or predatory advertisers. YŪPE categorically rejects this business model.

• No third-party data sales: We will never sell, rent, or lease your personal identity, phone number, or expense logs to any marketer, insurance firm, or loan agency.
• No predatory loan pushes: We do not offer or promote high-interest instant payday loans, micro-debt traps, or gambling games masquerading as rewards.
• Transparent data purpose: Every byte of information requested has one sole purpose: making your FinBoard insights sharper, YuFi advice smarter, and your money habits stronger.

We believe in strict data minimization — collecting only the specific data items necessary to provide the Services.

To offer automated expense tracking in FinBoard, the YŪPE Android application may request permission to access incoming SMS messages or notification listener services on your device.

Our Strict SMS Parsing Rules:

• Financial Senders Only: Our on-device parser solely scans messages from recognized financial institutions, banks (e.g., HDFC, SBI, ICICI, Axis), and UPI service providers.
• Zero Personal Reading: We do not read, process, store, or transmit your personal text conversations, chat messages, or private communications with friends and family.
• Never Read OTPs: One-Time Passwords (OTPs), authentication codes, and security PINs are strictly filtered out and never transmitted to our servers.
• Always Optional: SMS permission is strictly voluntary. If you choose not to grant SMS permission, you can still use FinBoard via manual transaction entries.

We process your personal data for the following lawful purposes:

• Delivering Core Features: Visualizing spend breakdowns, calculating month-end projections, and alerting you when category budgets are nearing exhaustion.
• Personalized Financial Education: Tailoring LiFi interactive modules, challenges, and bite-sized stories based on your financial knowledge level and age bracket.
• Parental Linkage (Optional): Providing parents with macro category summaries (e.g., Food vs Books) without exposing embarrassing or micro-detailed item receipts, preserving youth dignity.
• Security & System Integrity: Detecting unauthorized account access, safeguarding session keys, preventing fraud, and adhering to statutory audit requirements.

YŪPE is purpose-built to empower teenagers and young adults. In accordance with Section 9 of the DPDPA 2023 ("Processing of personal data of children"):

• Verifiable Parental Awareness: For users under the age of 18, we provide mechanism for verified parental consent or awareness prior to accessing advanced financial features.
• No Detrimental Processing: We never engage in processing that can cause any detrimental effect on the well-being of young users.
• Zero Behavioral Profiling: We do not track children's online movements, search histories, or social behaviors for advertising or commercial profiling.
• Parental Access & Erasure: Parents or legal guardians retain the right to review the information collected from their child and request its permanent removal at any time.

YuFi is YŪPE's generative AI financial guide. When you interact with YuFi:

• Sanitized Prompts: Prompts sent to our AI backend are stripped of personally identifying metadata (such as full names, phone numbers, or account numbers).
• No Public Training Leaks: Your private conversations are not fed into public LLM training datasets in an identifiable form.
• Educational Nature: YuFi provides educational prompts and behavioral suggestions only. It is not an automated algorithmic broker and does not execute financial transactions on your behalf.

The Clan Hub allows youths to join group savings streaks and campus finance circles. To guarantee member privacy:

• No Balance Exposure: Clan members only see your streak milestones and gamified XP. Your wallet amount, savings balance, or transaction line items are strictly invisible to peers.
• Pseudonymous Usernames: You are free to choose a nickname/avatar rather than displaying your legal name on public clan leaderboards.
• Zero Harassment Shield: Direct messaging within clans is monitored by automated safety filters to prevent cyberbullying, scam links, or unsolicited contact.

We do not share your personal information except with vetted technical infrastructure partners bound by rigorous confidentiality agreements:

• Cloud Infrastructure: High-security Indian data centers (e.g. AWS Mumbai / Google Cloud Delhi) for encrypted database hosting.
• Telecommunication SMS Gateways: TRAI-compliant SMS providers to deliver your secure 6-digit login OTPs and critical security alerts.
• Legal & Law Enforcement: Only when strictly mandated by a valid judicial warrant or court order under Indian law.

Under Safe Vault, our security architecture employs multi-layered defenses:

• Encryption in Transit: All communications between your mobile device and our servers use TLS 1.3 cryptographic protocols.
• Encryption at Rest: Databases and backups are protected with AES-256 bit encryption keys managed under strict hardware security modules (HSM).
• Data Localization: In accordance with Indian regulatory norms, all primary databases and backups are maintained within data centers physically located inside India.
• Data Retention: We store your personal data only as long as your account remains active. Upon account deletion request, your identifiable personal records are purged from active production servers within 30 days.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you enjoy full statutory control:

• Right to Access: You can request a summary of the personal data being processed and the processing activities undertaken by us.
• Right to Correction & Updating: You may correct inaccurate or misleading personal data and complete any incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your personal data when it is no longer necessary for the purpose it was collected.
• Right to Withdraw Consent: You have the right to revoke any consent previously granted for SMS parsing or notifications at any time in app settings.
• Right of Grievance Redressal: You have the right to readily accessible grievance redressal provided by YŪPE Edufy LLP.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Redressal Officer / Data Protection Officer are provided below: