Rupali Life Insurance PLC · Last updated:
1. Introduction and Scope
Rupali Life Insurance PLC (“Rupali Life,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of everyone who uses our services, including visitors to our websites (www.rupalilife.com and www.rupalilife.net) and users of our mobile application (“the App”), which is used by policyholders, sales personnel, and staff of Rupali Life.
This Privacy Policy explains what information we collect, how we use and share it, how we protect it, and the choices and rights available to you. By accessing our websites, creating an account, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our websites or the App.
This Privacy Policy applies to all users of the App, including policyholders, insurance sales agents/representatives, and indoor staff, except where a section specifically states that it applies only to one category of user.
2. Information We Collect
We collect the following categories of information:
Account and identity information. Name, mobile number, email address, National ID/date of birth where applicable, login credentials, user type (policyholder, sales agent, or staff), and designation/employee or agent code.
Policy and insurance information. Policy numbers, proposal and policy status, premium amounts, due dates, payment and collection history, commission and business figures (for sales/agent accounts), and related records held in our policy administration systems.
Device and technical information. Device model, operating system and app version, unique device/app identifiers, push-notification tokens, and IP address.
Location information (foreground only). See Section 3 below for a dedicated explanation of how and when we collect location data.
Biometric authentication data. See Section 4 below. We do not collect or store your fingerprint or facial biometric data; this stays on your device only.
Usage and log information. Pages and screens viewed, features used, timestamps of activity, and error/diagnostic logs, collected to operate, secure, and improve the App.
Most information is provided directly by you (for example, during registration or when submitting a policy proposal) or already exists in Rupali Life’s policy administration records because of your relationship with us as a policyholder, agent, or employee.
3. Foreground Location Data
The App may request access to your device’s approximate or precise location through your device’s operating system permissions. This location access is strictly limited as follows:
- Foreground use only. We only access your device’s location while the App is open and actively being used on your screen. We do not collect, track, or monitor your location when the App is closed, running in the background, or not in active use.
- No continuous or background tracking. We do not run any background service, geofencing process, or periodic location check while the App is not in active use. Your movements are not monitored or logged outside of the moments you are actively using a location-related feature inside the App.
- Purpose of collection. Foreground location data is used only to support specific in-app activities and features that require knowing your approximate location at the time you use them (for example, confirming the location associated with an in-app activity at the time it is performed). Location data is not used to build a movement history or profile of your daily routine.
- No third-party sale or advertising use. We do not sell your location data, and we do not use it for advertising or marketing purposes.
- Your control. You may deny or revoke location permission at any time through your device settings. If location permission is denied or revoked, the specific features that depend on it may not be available, but you can continue to use the rest of the App normally.
- Separate from account-level IP-based location. Independently of the device location permission described above, our backend systems may log the general, city-level network location associated with the IP address used to connect to our servers, for security, fraud-prevention, and account-protection purposes (for example, detecting sign-ins from unexpected locations). This IP-based lookup does not use GPS, does not require any device permission, and does not provide a precise location.
4. Biometric Data (Local Device Only)
The App offers an optional fingerprint/face unlock feature for signing in. When you enable this feature:
- Your fingerprint or facial biometric data is captured, processed, and stored entirely on your own device, using your device manufacturer’s secure hardware (such as the Android Keystore).
- Rupali Life never receives, collects, transmits, or stores your fingerprint or facial biometric data. We have no access to it at any time.
- The biometric check is used only to unlock an already-secured copy of your session on your own device; it does not create a separate copy of your biometric data anywhere else.
- You can disable biometric login at any time from the App’s Security & Settings screen, or it is automatically disabled when you sign out, which removes the locally stored, encrypted session data tied to that feature.
Because this data never leaves your device, Rupali Life does not process it as part of any central database.
5. How We Use Your Information
We use the information described above to:
- Provide, maintain, and improve the App and our insurance services, including policy status, policy lists, premium calculations, and commission/business reporting.
- Verify your identity and secure your account, including through biometric unlock (processed on-device only) and session/token management.
- Process and service your insurance policy, including due-date reminders, late-fee calculations, and payment/collection records.
- Communicate with you, including sending push notifications, service updates, and responses to your inquiries.
- Detect, investigate, and prevent fraud, unauthorized access, and misuse of our systems, including through IP-based, city-level location checks as described in Section 3.
- Comply with applicable laws, regulations, and requests from regulators or authorities, including insurance-sector recordkeeping obligations.
- Analyze app usage to diagnose errors and improve performance and user experience.
6. How We Share Your Information
We do not sell your personal information. We may share information in the following limited circumstances:
- Within Rupali Life. With authorized employees, agents, and departments who need the information to service your policy, process payments, or support your account.
- Service providers. With third-party vendors who help us operate the App and our infrastructure, such as cloud hosting providers, push-notification services (Google Firebase Cloud Messaging), and analytics providers (Google Firebase Analytics). These providers are only permitted to use your information to provide services to us and are bound by confidentiality obligations.
- Platform providers. The App relies on Google Play Services on Android devices, which has its own privacy practices for services such as biometric authentication APIs and push notifications.
- Legal and regulatory requirements. When required to comply with applicable law, regulation, legal process, or a valid request from courts, regulators, or government authorities (including insurance regulators).
- Business transfers. In connection with a merger, acquisition, reorganization, or sale of assets, subject to standard confidentiality protections.
- With your consent. In any other case where you have given us your explicit consent to share your information.
7. Data Security
We implement technical and organizational safeguards designed to protect your information, including:
- Encrypted storage of session tokens and sensitive credentials on your device (Android Keystore-backed encrypted storage).
- Transport-layer encryption (HTTPS/TLS) for data sent between the App and our servers.
- Access controls and role-based permissions limiting which employees can view which categories of information.
- Server-side authentication and authorization checks on every sensitive request.
No method of electronic storage or transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including:
- For as long as your account or policy remains active, and for a reasonable period afterward to resolve disputes, enforce agreements, and comply with insurance-sector recordkeeping and regulatory requirements.
- IP-based, city-level location logs (Section 3) are retained only for security and fraud-prevention purposes and are not used to build a long-term movement history.
- Biometric data is never retained by us, as it never leaves your device (Section 4).
When information is no longer needed for these purposes, we take reasonable steps to delete or anonymize it, subject to any legal obligation to retain it for a longer period.
9. Your Rights and Choices
Depending on your relationship with us and applicable law, you may have the right to:
- Access and review the personal information we hold about you.
- Correct inaccurate or incomplete information, including through the App’s profile screens.
- Withdraw consent for optional features such as biometric login or location-dependent features at any time, through the App’s Security & Settings screen or your device’s permission settings.
- Request deletion of certain personal information, subject to our legal and regulatory obligations to retain policy and transaction records.
- Opt out of non-essential push notifications through your device settings.
To exercise any of these rights, please contact us using the details in Section 12 below. We may need to verify your identity before fulfilling certain requests.
10. Children’s Privacy
Our App and services are intended for use by adults who hold or sell insurance policies, or who are employed by Rupali Life, and are not directed to children. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this Privacy Policy and, where appropriate, provide additional notice (such as an in-app notification). We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Rupali Life Insurance PLC
- Website: www.rupalilife.com / www.rupalilife.net
- Email: info@rupalilife.com / rupali_life@yahoo.com