Privacy Policy
Last updated: 28 July 2026
1. Who this policy covers
This Privacy Policy explains how RushMoney ("RushMoney", "we", "us") collects, uses, shares, stores and protects your personal information when you use our website, mobile application or any related service (together, the "Platform").
RushMoney operates as a Lending Service Provider. We do not lend on our own account. Loans originated through the Platform are sanctioned and disbursed by RBI-registered non-banking financial companies ("Lending Partners"), each of which is an independent data fiduciary in respect of the data it processes.
2. What we collect
2.1 Information you give us
- Identity data — name, date of birth, gender, PAN, Aadhaar-based verification result, photograph or selfie captured for the liveness check.
- Contact data — mobile number, email address, residential and correspondence address.
- Financial data — employment type, declared income, bank account number and IFSC, and where requested, salary slips or bank statements.
- Correspondence — the content of messages, complaints and support requests you send us.
2.2 Information we collect automatically
- Technical data — IP address, device model, operating system, browser type, app version and unique device identifiers.
- Usage data — pages viewed, features used, timestamps and referring URLs.
- Cookies — as described in section 8 below.
2.3 Information we receive from others
- Credit information — credit scores and reports obtained from credit information companies by our Lending Partners.
- Verification results — outputs from KYC, penny-drop bank verification and fraud-screening providers.
2.4 What we do not collect
In line with the RBI Digital Lending Guidelines, we do not access your contact list, photo gallery, call logs, SMS messages or files. Camera and location permissions, where requested, are used only for the specific purpose stated at the moment of the request, and you may decline them.
3. Why we use it
- To verify your identity and complete regulatory KYC obligations.
- To enable our Lending Partner to assess your creditworthiness and make a lending decision.
- To disburse an approved loan and to service and collect it.
- To detect, investigate and prevent fraud, money laundering and misuse of the Platform.
- To respond to your enquiries and complaints.
- To comply with applicable law and with directions from regulators, courts and law enforcement.
- With your separate consent, to send you information about products and offers. You may withdraw this at any time.
4. Our legal basis
We process your personal data on the basis of the consent you provide at the point of collection, and where processing is necessary to perform the agreement you enter into, to comply with a legal obligation, or for the legitimate purpose of preventing fraud. You may withdraw consent at any time as described in section 7, though doing so may prevent us from providing the service.
5. Who we share it with
We share your information only as set out below, and only to the extent necessary:
- Lending Partners — so they can underwrite, sanction, disburse and service your loan.
- Verification and technology providers — KYC agencies, bank-verification services, payment gateways, cloud hosting and analytics providers, each bound by contract to protect your data and use it only for the stated purpose.
- Credit information companies — as required by law in connection with your loan.
- Regulators and authorities — where disclosure is required by law or by a valid legal process.
- Professional advisers and acquirers — auditors and legal advisers, and, in the event of a merger or acquisition, the acquiring entity subject to equivalent protections.
We do not sell your personal data. We do not share it with advertisers or data brokers for their own marketing purposes.
6. How we protect it
We apply technical and organisational safeguards including TLS encryption in transit, encryption of sensitive fields at rest, role-based access controls, logging of privileged access, and periodic security testing. Access is restricted to personnel who need it to do their job.
No system is completely secure. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by applicable law.
7. Your rights
Subject to applicable law, you may:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data, where we are not required to retain it.
- Withdraw a consent you have previously given.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Complain to us, and thereafter to the Data Protection Board of India.
To exercise any of these, write to hello@rushmoney.in with the subject line "Data request". We will respond within 30 days. Note that where a loan has been disbursed, we and our Lending Partner are legally required to retain certain records for the periods described in section 9.
8. Cookies
Our website uses cookies and similar technologies to keep the site functioning, remember your preferences, and understand aggregate usage. Strictly necessary cookies are required for the site to work. You can block or delete cookies through your browser settings, though some features may then not work correctly.
9. How long we keep it
We retain your personal data only as long as necessary for the purpose it was collected, and thereafter for the period required by applicable law and by our Lending Partners' regulatory obligations — currently five years from the closure of your loan account. Where you never complete an application, we retain your data for twelve months before deletion or anonymisation.
10. Storage and transfers
Your data is stored on servers located in India. Where any processing takes place outside India, we ensure it is permitted under applicable law and that equivalent protections apply contractually.
11. Children
The Platform is not intended for anyone under 18, and our loan products are available only to applicants aged 21 and above. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. Material changes will be notified on this page and, where appropriate, directly to you. The "last updated" date at the top always reflects the current version.
13. Contact us
Data protection contact: The Grievance Officer, RushMoney
Email: hello@rushmoney.in
Address: Hyderabad, Telangana, India