Privacy Policy

This Privacy Policy explains how HaruLabs(“we”, “us”, “our”) collects, uses and shares information about you when you use Ramu Kaka(the “App”) and related services (collectively, the “Services”). We have written it in plain English — without legalese — so you can actually read it.

1. Information we collect

1.1 Information you provide

• Account details: name, email address, phone number, profile photo, and password (stored as a one-way hash).
• Flat and flatmate data: flat name, member list, roles, and invites you create or accept.
• Household content: meals, recipes, grocery lists, pantry items, expenses, receipts, and messages you submit to the App.
• Photos: images of receipts, groceries, or recipes that you explicitly upload for AI parsing.
• Communications: emails, support tickets, and feedback you send us.

1.2 Information collected automatically

• Device and usage data: device model, operating system, app version, language, time zone, IP address, crash logs, and interaction events (for example, “tapped Add Expense”).
• Push and notification tokens (only if you grant permission).
• Cookies and similar technologies on our website for analytics and remembering preferences.

1.3 Information from third parties

• If you sign in with Google or Apple, we receive your name and email from those providers.
• Payment processors (if any) share transaction status and masked card metadata. We never see your full card number.

2. How we use your information

We use your data to:

• Provide, maintain, and improve the App and its features.
• Run AI features — meal planning, recipe suggestions, pantry tracking, receipt parsing — by sending relevant inputs to our AI model providers under strict data-processing agreements.
• Send transactional notifications (expense reminders, invites, low-stock alerts).
• Detect fraud, prevent abuse, and keep the App secure.
• Comply with law, respond to legal requests, and enforce our Terms.
• Send occasional product updates (you can opt out at any time).

3. Legal basis for processing (EEA / UK users)

Where applicable, we process personal data based on: (a) your consent, (b) performance of a contract (providing the App you signed up for), (c) our legitimate interests in running and improving the Services, and (d) compliance with legal obligations.

4. Sharing and disclosure

We do not sell your personal data. We share information only with:

• Flatmates you add: content within a flat (expenses, lists, meals) is visible to all members of that flat.
• Service providers who help us run the App — cloud hosting (AWS/GCP), analytics (PostHog/Sentry), email delivery, and AI inference providers. They are contractually bound to process data only on our instructions.
• Payment processors (only if you purchase a paid plan).
• Legal and safety: regulators, courts, and law enforcement when required by law or to protect rights, property and safety.
• Business transfers: in the event of a merger, acquisition, or asset sale, with continued protection of your data.

5. AI processing and your content

Some features send your inputs (for example, a photo of a receipt or a pantry note) to third-party AI providers for inference. We:

• Minimise the data sent — only what is needed to answer the request.
• Use providers that contractually commit not to train their models on your content.
• Do not enable retention beyond what is technically required to return a result.

6. Data retention

We retain account data for as long as you have an active account. When you delete your account (see Delete Account), we permanently delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention reasons. Aggregated, de-identified analytics may be retained indefinitely.

7. Your rights

Depending on where you live, you may have rights to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your data (see here).
• Object to or restrict certain processing.
• Port your data to another provider in a machine-readable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@ramukaka.xyz. We respond within 30 days.

8. Children

The App is not intended for users under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

9. International transfers

We are based in India. Your data may be processed in India, the United States, or other countries where our providers operate. We use contractual safeguards (such as Standard Contractual Clauses) where required.

10. Security

We protect data with TLS in transit, encryption at rest, access controls, audit logging, and regular security reviews. No system is perfectly secure, so please use a strong unique password and enable device security.

11. Changes to this policy

We will update this Privacy Policy when our practices change. When changes are material, we will notify you in-app or by email before they take effect. The “Last updated” date above always reflects the most recent revision.

12. Contact us

Questions, concerns, or requests? Email support@ramukaka.xyz or write to HaruLabs, Bengaluru, Karnataka, India.