Privacy Policy

1. The short version#

• Your data stays on your phone. Everything you put in Rixbo Keep is stored on your device. Sensitive fields are encrypted.
• No account, no Rixbo servers. You don't sign up, and Rixbo runs no server that receives, stores or processes your vault.
• No ads, no analytics, no tracking. The app has no advertising, no analytics, no crash-reporting service and does not use your advertising ID. We don't sell or share your data.
• Cloud sync is optional and end-to-end encrypted. If you choose Premium sync, your vault is encrypted on your phone with your passphrase before it goes to your own Google Drive. We can't read it. You can delete that cloud copy at any time, from inside the app or from Google Drive.
• We only see what you send us. If you email support, we get your email. If you buy Premium, Google Play handles payment and we never see your card.
• We can't recover a forgotten passphrase. That's the trade-off of real privacy. Keep your passphrases somewhere safe.

2. Who we are#

Rixbo Keep and rixbo.com are provided by Rixbo, Dhaka, Bangladesh (“Rixbo”, “we”, “us”).

For the small amount of personal data we do handle (support emails, sales reports from Google Play, and website logs), Rixbo is the data controller. You can reach us at support@rixbo.com.

This policy covers the Rixbo Keep app (package com.rixbo.keep) and the website at https://rixbo.com. It does not cover Google's services, which have their own privacy policies.

3. Information stored on your device#

Rixbo Keep is offline-first. Everything you create is stored locally on your phone:

• finance records, currencies, categories, recurring transactions and budgets
• tasks, due dates, priorities and reminders
• notes and the photos or files you attach to them
• account credentials (logins) you choose to save
• links, and your app settings

This information stays on your device. We do not receive it, and we cannot see it.

Encryption on the device

Sensitive fields — account secrets, finance amounts and notes — are encrypted at rest with AES-256-GCM. The encryption key is kept in Android's secure keystore.

App lock

If you turn on the optional app lock, your PIN is stored only as a salted PBKDF2 hash on your phone. That is a one-way scramble: it lets the app check a PIN, but it can't be turned back into the PIN.

If you use fingerprint or face unlock, Android handles it completely. The app only learns “yes, unlocked” or “no”. It never receives your fingerprint or face data.

Manual backup

You can export your whole vault as a backup file. The file is encrypted with a passphrase you choose. You decide where to save or send it, using Android's share sheet. Rixbo never receives the file. The backup feature does not store your passphrase or send it anywhere, so if you forget it, nobody — including us — can open that backup.

Photos and files attached to notes are not included in backups in version 1.0.

Notifications

Reminders are scheduled on your phone. There is no push-notification server. Notification text never includes amounts.

4. Information we collect#

From the app, we collect nothing about you. Rixbo Keep has no Rixbo account and no Rixbo server. Your vault content, your usage and your device details are not sent to us.

Specifically, the app does not include:

• advertising or ad networks
• analytics or usage tracking
• crash-reporting services
• access to your advertising ID

We only receive personal data in these limited cases, each explained below:

• when you email our support team
• when you buy Rixbo Premium, through the order reports Google Play provides to app developers
• when you visit rixbo.com, through our host's standard server logs

Google Play may also give developers anonymous, combined statistics (for example installs, and crash or performance rates from users who allowed Android to share them). These come from Google, not from code in our app, and do not identify you.

5. Optional cloud sync with Google Drive#

Cloud sync and automatic backup are part of Rixbo Premium. They are off by default. Nothing leaves your phone unless you turn sync on.

When you turn it on:

1. You sign in with your Google account. The app asks Google for one permission only: drive.appdata. This gives it a hidden folder in your own Google Drive, just for Rixbo Keep. It cannot see, open or change any of your other Drive files.
2. The app reads your Google account email address only to show you, on your phone, which account is connected. It is not sent to us.
3. You choose a sync passphrase. Your vault is encrypted on your phone with this passphrase before it is uploaded (end-to-end encryption).
4. The passphrase is kept only in your phone's secure keystore, so sync can run in the background without asking you each time. It never leaves your phone.
5. Data moves directly between your phone and Google Drive. It does not pass through any Rixbo server. Rixbo cannot decrypt it.

Photos and files attached to notes are not included in cloud sync in version 1.0. They stay on the device.

Google stores the encrypted file as part of your Google account. Google's handling of your account and Drive is covered by the Google Privacy Policy.

Disconnecting and deleting your cloud backup

You can delete your cloud data at any time, in either of two ways:

• In the app: go to Settings → Cloud sync → Delete cloud backup. You are also offered this option when you disconnect Google Drive. The app deletes everything Rixbo Keep stored in the hidden app folder of your Google Drive. Your data on the phone is not touched.
• In Google Drive: use Settings → Manage apps on the Google Drive website (steps in Deleting your data).

If you disconnect without deleting, the app stops syncing and the encrypted copy stays in your Drive. You can reconnect later and restore it with your sync passphrase.

The deletion request goes directly from your phone to Google Drive, so your phone needs an internet connection at that moment. Rixbo never receives or keeps a copy. Once deleted, the cloud backup cannot be restored by you or by us. If the app can't finish the deletion (for example because you're offline), it will tell you, and you can try again or delete it on the Google Drive website instead (see Deleting your data).

Google API Services: Limited Use disclosure

Rixbo Keep's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, this means: the app uses the drive.appdata access and your account email only to provide sync and backup on your device, and to show you which account is connected. We do not transfer this data to anyone, we do not use it for advertising, and we do not use it to build profiles or train AI or machine-learning models. No person at Rixbo can read it — it never reaches us.

6. Purchases and subscriptions#

Rixbo Premium is sold through Google Play. Google handles the payment and is responsible for your payment information under the Google Payments Privacy Notice. We never receive your card or bank details.

When you buy or restore Premium, Google Play tells the app on your phone that your subscription is active (using a purchase token). The app uses this only to unlock Premium. In version 1.0, no Rixbo server checks or stores these tokens.

Like every app developer on Google Play, we can see order records in the Google Play Console — for example the order number, product, price, date, status (such as renewed, cancelled or refunded) and the buyer's country or region. We use these only for accounting, tax, refunds and handling your support requests. They do not include your vault content.

7. App permissions#

Rixbo Keep only asks for what it needs. You can review or turn off permissions any time in Android Settings → Apps → Rixbo Keep → Permissions.

To attach files, you pick them with Android's own file picker. The app gets access only to the files you choose. It does not ask for broad access to your storage.

8. Website and server logs#

rixbo.com is a simple static website. It has no cookies, no analytics, no forms and no third-party scripts. Our fonts are hosted on our own server, so visiting the site doesn't send your details to font services.

The site is hosted by a web hosting provider. Like almost every web host, it may keep standard server logs, which include your IP address, browser type (user agent), the page requested and the time. These logs are used only to keep the site secure and working, for example to stop attacks. They are kept for no longer than 30 days, unless we need them longer to investigate a specific security incident.

If you use the light/dark switch, your choice is saved in your own browser (local storage). It is never sent to us.

9. Contacting support#

If you email support@rixbo.com, we receive whatever you send: your email address, your name if you include it, your message and any attachments. Please don't send passwords, passphrases or vault contents — we never need them.

We use your email only to reply to you and to fix the problem you reported. We keep support emails for up to 30 days after your request is resolved, then delete them. Our email service provider, Contabo, stores these messages for us as our processor. We never share them with anyone else, except where the law requires it.

10. Legal bases (GDPR)#

If you are in the European Economic Area or the United Kingdom, the law requires us to tell you our legal reason (“legal basis”) for each use of personal data. Because we handle so little, the list is short:

Your vault content, your PIN, your biometrics and your sync data are processed only on your own device or in your own Google Drive, at your direction. Rixbo does not process them.

Where we rely on legitimate interest, you have the right to object. See Your rights.

11. Sharing and selling#

We do not sell your personal data. We do not share it for advertising. We don't have your vault data to share in the first place.

The only third-party services involved are ones you choose to use:

• Google Play — to download the app and, if you choose, buy Premium.
• Google Drive — only if you turn on Premium cloud sync. Your data goes to your own Drive, already encrypted.

Behind the scenes, our website hosting provider and our email provider (Contabo) process data for us as processors, only to provide their service to us.

We may disclose the limited data we hold if the law requires it (for example, a valid court order), or to protect the rights and safety of our users or others. If Rixbo is ever merged or sold, this policy's promises would continue to apply to any data transferred, and we would tell you first.

12. International transfers#

Your vault stays on your device, so we do not transfer it anywhere.

Support emails, Google Play order records and website logs may be stored or processed in countries other than yours — including where we, our host and our email provider operate. When personal data from the EEA, UK or Switzerland is transferred to a country without an “adequacy decision”, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), offered by those providers.

If you use Premium sync, your encrypted data is stored by Google according to your Google account settings and Google's own policies.

13. Retention#

• Data on your device: kept until you delete it. Items in Trash are removed automatically after 30 days.
• Data in your Google Drive (Premium sync): kept until you delete it — in the app (Settings → Cloud sync → Delete cloud backup) or on the Google Drive website. Turning sync off alone does not delete it. See Deleting your data.
• Support emails: up to 30 days after your request is resolved.
• Website server logs: up to 30 days.
• Google Play order records: as long as tax and accounting laws require.

14. Your rights#

Because your vault lives on your phone, you already have full control of it. You can see, change, export and delete it yourself at any time. For the limited data we do hold (support emails, order records and server logs), you have the rights below.

European Economic Area and United Kingdom (GDPR / UK GDPR)

You can ask us to: give you a copy of your data (access); correct it; delete it; limit how we use it (restriction); give it to you in a portable format; and you can object to processing based on legitimate interest. You can also complain to your local data protection authority — in the UK, that's the Information Commissioner's Office (ICO).

California (CCPA / CPRA)

We do not sell or share your personal information (including for cross-context behavioral advertising), and we don't use or disclose sensitive personal information for any purpose that would give you a right to limit it. In the past 12 months, the only categories of personal information we may have collected are: identifiers (your email address if you contacted us; IP address in server logs), commercial information (Google Play order records), and the contents of messages you sent us. We collect these for the purposes in this policy.

You have the right to know what we've collected, to have it deleted, and to have it corrected. You can use an authorised agent. We will not treat you differently for using these rights.

India (Digital Personal Data Protection Act, 2023)

You have the right to get information about the personal data we process, to have it corrected, completed, updated or erased, to nominate another person to use your rights if you die or become unable to, and to have your grievances addressed. Our grievance contact is Rixbo Support (support@rixbo.com). If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Everywhere else

Wherever you live, we will honour reasonable requests to access, correct or delete the personal data we hold about you, and we'll respect any additional rights your local law gives you.

How to use your rights

Email support@rixbo.com with your request. Please send it from the email address involved (if it's about a support conversation) or include your Google Play order number (if it's about a purchase), so we can find the right data. We don't ask for more information than we need to confirm the request is yours. We will reply within one month (or sooner if your local law requires it). It's free.

15. Deleting your data#

Your data is on your device (and, if you used Premium sync, in your own Google Drive). That means you delete it — no request to us is needed. Here's how.

Delete data on your phone

1. Single items: delete the item in Rixbo Keep. It moves to Trash. Empty the Trash to remove it now, or it will be removed automatically after 30 days.
2. Everything: open Android Settings → Apps → Rixbo Keep → Storage → Clear storage (sometimes called “Clear data”). This permanently deletes all app data on the phone.
3. Or uninstall the app. Uninstalling Rixbo Keep deletes its data from the phone.
4. Backup files: if you exported backup files, delete them from wherever you saved or sent them.

Delete synced data from Google Drive (Premium)

From the app (easiest):

1. In Rixbo Keep, go to Settings → Cloud sync → Delete cloud backup (or choose it when you disconnect).
2. Confirm. Make sure your phone is online.
3. The app deletes all Rixbo Keep data from the hidden app folder in your Google Drive. Data on your phone stays as it is.

From the Google Drive website (for example, if you no longer have the phone or the app):

1. If you still have the app, turn off cloud sync first.
2. On a computer, go to drive.google.com and sign in to the Google account you used for sync.
3. Click the Settings (gear) icon, then Settings → Manage apps.
4. Find Rixbo Keep, click Options, then Delete hidden app data, and confirm.
5. Optional: to remove the app's access to your Google account completely, go to myaccount.google.com/permissions, choose Rixbo Keep and remove its access.

Delete data we hold

To delete support emails or other personal data we hold, email support@rixbo.com. We may need to keep Google Play order records where tax or accounting laws require it.

16. Security#

We designed Rixbo Keep so that as little as possible depends on trusting us: data stays on your device, sensitive fields are encrypted with AES-256-GCM using a key in the device keystore, PINs are stored as salted PBKDF2 hashes with lockout after repeated wrong attempts, and backups and sync are encrypted with your passphrase before they leave the app.

Still, no method of storage or transmission is 100% secure, and we can't guarantee absolute security. Your data is also only as safe as your phone: keep your device updated, use a screen lock, and turn on the app lock.

Found a security problem? Please email support@rixbo.com.

17. Children#

Rixbo Keep and rixbo.com are not directed to children under 13, or under the higher age of digital consent in your country (for example 16 in some EU countries). We do not knowingly collect personal data from children. If you believe a child has sent us personal data, for example by email, contact us and we will delete it.

18. Changes to this policy#

We may update this policy, for example when we add features. We will change the “Last updated” date at the top. If a change is important — especially if it affects what data is collected or how it's used — we will tell you in the app or on this website before it takes effect, and ask for your consent where the law requires it.

19. Contact#

Questions, requests or complaints about privacy:

• Email: support@rixbo.com
• Post: Rixbo, Dhaka, Bangladesh
• Grievance contact (India): Rixbo Support, support@rixbo.com

See also our Terms of Service.