RuleMudra Personal Loan ("RuleMudra," "We," "Us," or "Our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"), website (the "Site"), and related services for personal loans and financial products (collectively, the "Services"). By accessing or using the App, Site, or Services, you consent to the practices described in this Privacy Policy.
This policy complies with applicable laws, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, Digital Personal Data Protection Rules, 2025 and guidelines from the Reserve Bank of India on digital lending.
RuleMudra acts solely as a technology-enabled Lending Service Provider (LSP) facilitating communication and operational support between users and RBI-registered lending partners. RuleMudra neither lends money on its own behalf nor undertakes independent credit sanctioning decisions.RuleMudra facilitates technology and facilitation services relating to loan applications in partnership with RBI-registered Non-Banking Financial Companies (NBFCs), is DECIMUS FINANCIAL LIMITED. All loan approvals, sanctions, disbursements, and credit decisions are made by our registered lending partners in accordance with applicable laws and regulatory guidelines issued by the Reserve Bank of India. RuleMudra acts as a technology and service platform to support the loan application process, customer onboarding, documentation, and related services. All lending activities are conducted in compliance with applicable regulations, including guidelines under the Digital Personal Data Protection Act, 2023 and other relevant Indian laws.
NBFC Information:
DECIMUS FINANCIAL LIMITED.
RBI Registered NO. B-06.00218
Address: H.no 56 Kurmanchal Niketan Apartment, IP Extension, Ward Vinod Nagar Shahdara South Zone Delhi, New Delhi, India, 110092
We collect only such limited information as is reasonably necessary for onboarding, identity verification, fraud prevention, credit assessment, servicing, compliance obligations, and lawful operational purposes. The types of information include:
We rely only on limited, user-consented information from authorized sources to support credit assessment and improve your experience. Any access, where applicable, is restricted and used strictly as described under Point 12 of our Privacy Policy, and in accordance with applicable laws including the Digital Personal Data Protection Act, 2023.
We process your data based on:
We process personal data strictly on the basis of user consent, contractual necessity, legal obligations, and such other lawful purposes as permitted under applicable law.
We use your information for legitimate business purposes, including:
We process data based on your consent, contractual needs, legal requirements, or our legitimate interests. Aggregate, anonymized data may be used for research or statistics without identifying individuals.
We do not sell your personal information. We may share it only as necessary:
All sharing is governed by contracts ensuring data protection standards equivalent to ours. We do not share identifiable data for marketing without consent.
Automated systems may be used to support preliminary risk assessment and fraud checks. All final lending, underwriting, sanction, and disbursement decisions are independently taken by the respective RBI-registered lending partner.
We may use automated systems and algorithms to:
You have the right to:
However, no system is completely secure. You are responsible for keeping your login credentials confidential. We limit data retention to what's necessary (e.g., 7 years for loan records per RBI rules) and securely delete or anonymize it afterward.
Data may be processed or stored within India or in secure jurisdictions permitted under applicable Indian laws.
To exercise rights, email to [email protected] . We respond within 30 days.
For cookies, see Section 8.
We use cookies, pixels, and similar tools to:
You can manage cookies via browser settings. Our App uses similar device identifiers. For details, review our Cookie Policy (linked in the App).
Our Services are not directed at individuals under 18. We do not knowingly collect data from children. If we discover such data, we will delete it promptly.
We have the right to revise or modify this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidelines, technology, or our operational practices.
The latest version of this Privacy Policy will always be available on our Website, Mobile Application, or other official digital platforms. The Company will notify customers of any material changes to this section through email communication.
Your continued use of RuleMudra services after the updated Privacy Policy becomes effective will constitute your acceptance of the revised terms. If you do not agree with the updated policy, you should discontinue use of our services and may reach out to us for further clarification.
You are responsible for ensuring that the Personal Information and Sensitive Personal Data you provide to RuleMudra remains accurate and current. Please inform us promptly of any updates or corrections to your information so that we can maintain accurate records and provide our services effectively.
Before submitting a deletion request, please ensure that:
Account deletion requests cannot be processed if any financial obligation remains pending.
How to Request Account Deletion
You can request deletion of your RuleMudra account through the following method:
For security purposes, we may verify your identity before processing the request.
Once your request is verified and approved:
Data That May Be Retained
Certain information may be retained even after account deletion if required under applicable laws, including:
Processing Time
Deletion requests are typically processed within a reasonable timeframe after successful verification and subject to regulatory checks.
The key data collected from each permission granted in the device and how this data is used is further detailed below:
Our application does not access, read, or store personal SMS content on your device. We do not collect or process OTP messages, personal communications, or any sensitive message content under any circumstances.
With your explicit and informed consent, we may access limited and anonymized metadata related to transactional SMS (such as sender category, timestamps, and message type classification) solely for the purpose of:
At no point is full SMS content collected, stored, or shared. All data processing is carried out in a privacy-preserving manner, using secure systems and strict access controls.
Any information, if required to be shared, is done strictly on a need-to-know basis with regulated partner NBFCs and authorized service providers, in compliance with applicable laws and only for the stated purposes.
With your explicit, informed, and revocable consent, our application may collect limited and non-personal metadata about installed and system applications on your device.
This information is processed in a privacy-preserving manner through our trusted technology partner, Credeau (www.credeau.com), solely for providing regulated financial services in association with our Partner NBFCs.
This data is used strictly for:
With your explicit consent, our application may request limited, one-time access to your device location.
This access is used strictly for:
We do not track your location continuously or in the background. Location data is collected only at the time of requirement, retained for the minimum necessary duration, and processed strictly for the stated purposes in compliance with the Digital Personal Data Protection Act, 2023.
With your consent, our application may collect limited, non-sensitive device information to enhance platform security and prevent fraud.
This may include:
We do not collect or store persistent or uniquely identifiable device identifiers (such as IMEI, serial number, or MAC address). All processing follows privacy-by-design principles and applicable legal requirements.
Our application may request Phone State permission only with your explicit consent and strictly for limited verification purposes, including:
We do not access or collect call logs, contacts, or communication data. Any permissions requested are strictly limited to what is necessary for the stated purpose and are obtained and used in compliance with applicable laws and regulatory standards.
Purpose of access: Camera access is required solely to facilitate digital KYC (eKYC) and document capture.
Usage: The captured information is used only for identity verification and regulatory compliance.
We ensure that:
All data collected is:
We follow the principles of:
in full compliance with the Digital Personal Data Protection Act, 2023 and applicable regulatory guidelines.
We also provide clear, just-in-time consent notices before requesting any sensitive permission (such as location or device data), ensuring that you remain in control of your personal data at all times.
We are committed to ethical practices:
2.The User acknowledges and agrees that electronic acceptance, OTP verification, digital signatures, click-wrap acceptance, and electronic records shall constitute valid and legally enforceable consent under applicable laws including the Information Technology Act, 2000.
The User agrees to indemnify and hold harmless the Company, its affiliates, directors, officers, employees, lending partners, and service providers against any claims, losses, liabilities, penalties, or damages arising out of false information, fraudulent conduct, misuse of services, breach of applicable law, or violation of this Privacy Policy
For questions, concerns, or requests, contact:
Email: [email protected]
Customer Support:+91 8447360240
Address: 414, C Tower, 4th Floor, Noida One Tech Park, Sector 62 Noida, UP 201309
Thank you for trusting RuleMudra with your financial journey. We value your privacy as much as you do.
