Ruko ("we") is a WhatsApp service that tells you whether a message, image, voice note or document looks like a scam. This policy explains how we handle personal data under India's Digital Personal Data Protection Act, 2023, and WhatsApp's rules for businesses.
What we collect
- Your WhatsApp number and profile name. WhatsApp shares these with us when you message Ruko. We need them to reply to you.
- What you send us to check. Text, images, voice notes, videos and PDFs you forward. We process them to give you a verdict and do not store them after the reply is sent.
- A record of each check. The verdict (for example "scam"), the type of scam, a one-line summary written without names, numbers or amounts, and timing data. We keep this to set daily limits and improve Ruko.
- Family contacts you add. The WhatsApp numbers you ask Ruko to alert.
- Plan and payment status. If you buy the Family Plan, our payment partner Dodo Payments shares your subscription status and customer ID with us. We never see your card number, UPI PIN or bank details.
Who processes your data
- Google (Gemini API, Web Risk and Cloud Text-to-Speech) reads what you send to produce the verdict, check links and create voice replies. We use Google's paid service, under which your content is not used to improve Google's products, and we ask Gemini not to store requests.
- Meta (WhatsApp Business Platform) carries the messages between you and Ruko.
- Supabase hosts our database in Mumbai, India. Cloudflare runs our servers.
- Dodo Payments processes Family Plan payments as merchant of record.
We don't sell your data and we don't use it for advertising.
Family alerts
If you add a family member, Ruko sends them a short WhatsApp alert when it spots a likely scam. Alerts describe the kind of scam ("a fake police video call") and never include your messages, amounts or the scammer's details. A family member can stop alerts at any time by sending stop to Ruko.
How long we keep it
Check records and family contacts stay until you delete them. Payment records are kept as long as the law requires for tax and accounting.
Your rights
- Delete everything: send delete my data to Ruko on WhatsApp. Your number, check history and family contacts are erased right away. See how data deletion works.
- Access or correct your data, or withdraw consent: email us at the address below.
- Grievances: write to our grievance contact below. We reply within 7 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Children
Ruko is meant for adults. If you're under 18, use Ruko with a parent or guardian.
Contact and grievance officer
Akshmit Saxena, Ruko · support@rukozara.com
Changes
If we change this policy in a way that matters, we'll tell you on WhatsApp before it takes effect.