Privacy policy

Last updated 5 October 2026

Rupiq (rupiq.ai and the Rupiq apps for iPhone and Android) is run by Rupiq Studios Ltd, a company registered in England and Wales (company number 17323470). We are the data controller for the information described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Questions or requests: support@rupiq.ai.

What we collect

Your account: email address, sign-in method (email and password, Google or Apple), and the name you give us or that Google or Apple share with us.
Your CV: the text of the CV you upload or paste. We read the file to get its text and keep the text and the file name, not the original file. Each job you add keeps a copy of the CV it was added with, so its questions and reports stay consistent if you later change your CV.
Jobs you add: the job description, employer and job title, the interview date if you add one, whether you've applied, whether you want reminders and, if you tell us, how the interview went.
Job matches: job adverts we find for you on Reed and Adzuna, based on the job types and location you choose and the titles of jobs you've practised for.
Emails we've sent you: the type and date of each email (not its content), so we never send the same one twice.
Your practice: the questions we generate, your answers and drafts, hints used, scores, feedback, reports and saved interviews.
Payments: your subscription status, renewal dates and session balance, plus the customer and subscription references from Stripe, Apple or Google. To allow one free trial per card, Stripe gives us a fingerprint that identifies a card without revealing its number. We never see or store full card details.
Technical information: IP address, device and browser type, and error and usage logs. Our usage logs record which AI model ran, how long it took and how many tokens it used. They never contain your CV, job description or answers.

Questions are read aloud and dictation is handled by your own device; we don't receive any audio.

Why we use it, and our lawful basis

To provide the service you signed up for (contract): creating your account, building interview questions, hints and feedback from your job description and CV, saving your progress and producing your reports.
To take payment and manage your subscription (contract): free trials, renewals, extra-session bundles and cancellations.
To send the emails the service needs (contract and legal obligation): sign-in and confirmation links, your report, and notice before a free trial turns into a paid subscription. If you switch them on, we also send interview reminders and job match emails; every one has a one-tap unsubscribe.
To keep Rupiq secure and working (legitimate interests): preventing fraud and misuse such as repeated free trials, limiting AI spend, and finding and fixing faults.
To keep financial records (legal obligation): tax and accounting rules require us to keep records of payments.

We don't sell your data, we don't use it for advertising, and we don't make decisions about you that have legal or similarly significant effects using automated processing. AI scores are practice feedback only.

Who processes it for us

We use these providers to run Rupiq. Each may only use your data to provide its service to us.

Supabase — database and sign-in. Your data is stored in Supabase's London (UK) region.
Cloudflare — hosting, running the app and protecting it from attacks.
OpenAI — writes interview questions and marks answers. We send only the job description, CV text and answers needed for each step. Under OpenAI's API terms this data is not used to train its models, and we ask OpenAI not to store a copy of each request.
Stripe — card payments and subscriptions on the website.
Apple and Google — payments made in the iPhone or Android app, through the App Store or Google Play. RevenueCat tells us when an in-app purchase, renewal or cancellation happens, using your Rupiq account ID.
Google and Apple — sign-in, if you choose to sign in with them.
Resend — sending email.
Reed and Adzuna — job search for your job matches. We send only job titles, keywords and a location, never your name, email or CV.

Some of these providers are based in, or access data from, the United States or elsewhere outside the UK. Where that happens, the transfer is covered by UK adequacy regulations (including the UK–US data bridge) or by the UK International Data Transfer Agreement or Addendum.

How long we keep it

Your account, CV, roles and practice: for as long as you have an account. If you want something specific removed sooner, email us.
When you delete your account: everything above is deleted immediately from our live database. Copies in encrypted backups are overwritten within 30 days.
Payment records: six years after the end of the tax year they relate to, as UK law requires. Stripe, Apple and Google also keep their own records under their own policies.
Technical logs: up to 30 days.

Deleting your account

You can delete your account yourself in Account, on the website or in the app. This deletes your data and cancels any website subscription straight away. Subscriptions bought through the App Store or Google Play must be cancelled in your phone's subscription settings, because only Apple and Google can stop those payments. You can also ask us to delete your account by emailing support@rupiq.ai. Step-by-step instructions are at rupiq.ai/delete-account.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Email support@rupiq.ai and we will reply within one month. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.

Cookies and local storage

We only store what is needed to keep you signed in and remember your settings, such as light or dark theme. We don't use advertising or tracking cookies. If that changes we'll ask for your consent first.

Children

Rupiq is for people aged 13 and over. We don't knowingly collect data from anyone under 13. If we find we have, we delete it.
Users under 18 may use Rupiq with permission from a parent or guardian.
We only collect the minimum data needed to provide the service.

Changes

If we change this policy we'll update the date above, and if the change is significant we'll tell you by email or in the app before it takes effect.

Contact

Rupiq Studios Ltd — support@rupiq.ai. See also our Terms of Use.