Privacy notice
RUE only uses your information to run RUE for you. We never sell it, never use it for advertising, and never move your money.
1. Who looks after your information
Zadesta Ltd (Marley Cres, Ottawa, Canada K1J 1C1) runs RUE. Our privacy lead is Dr Ade Chinedu Adesina, reachable at [email protected]. You can also write to [email protected] or call +1 (343) 881-9587.
- RUE Personal: Zadesta decides how your information is used, so we are responsible for it.
- RUE Business: each business decides what goes into its workspace and is responsible for its own records, staff and client details. Zadesta looks after that information only on the business’s instructions. If you are a client or staff member of a business using RUE, please contact that business first about your information.
2. What we collect and why
| Information | Examples | Why we use it | Legal reason |
|---|---|---|---|
| Account details | Name, email, password (stored scrambled), country, currency | To create your account, sign you in and send account emails | Contract |
| Your financial records | Transactions, balances, statements, budgets, bills, goals, loans | To show your money, do the sums and make estimates | Contract |
| Receipts and documents | Receipt photos, company documents, client agreement letters | To store them and fill in details for you to check | Contract |
| Household and team members | Names and emails of people you invite; what each can see | To let them sign in and see only what you allow | Contract; legitimate interest |
| Business clients and staff | Client names, fees, payments; payroll figures | To run the business’s books, on its instructions | The business’s reason |
| Phone number (optional) | For “Text me before bills are due” | To send the reminders you asked for | Consent |
| Usage and security records | Sign-in times, device and browser, IP address, activity history | To keep accounts safe, show who did what, and fix problems | Legitimate interest; legal duty |
| Messages and feedback | Emails, feedback, support questions | To answer you and improve RUE | Legitimate interest |
What we do not collect: your online banking passwords, card numbers or bank PINs. RUE uses no tracking or advertising cookies.
Reading receipts and statements: RUE reads photos and PDFs on your own device, in your browser. The file is only sent to us if you choose to save it.
Ask Rue: simple questions are answered by RUE itself. If you choose a fuller AI answer, RUE first shows what will be sent: a summary of your figures, without names unless you choose to include them. It is sent to our AI provider only to produce that answer. In the demo, AI answers use Google’s Gemini (see "The demo" above).
Sales insights: if a business links its till (Square or Shopify) or uploads a till export, RUE keeps the items sold, the amounts, the time and the shop location. It does not ask the till for customers’ names or card details. RUE only reads from the till; it never changes it.
Your own AI app: an administrator can connect RUE to their own AI app (for example Claude) with a private link. That app can then read the same summary of figures, and its company handles what it reads under its own terms. The link can only read; it can never change anything.
Cookies and storage: only what is needed to keep you signed in and secure, plus your browser’s own storage for small preferences such as a chosen chart style.
Automated estimates: forecasts and break-even are calculated automatically. They never make decisions about you with legal or similar effects, such as credit decisions.
The demo: anyone can try RUE without an account. To run a demo we keep the name or username you choose, a scrambled form of your internet address (so one connection can’t open too many demos in a day), and anything you choose to upload or type. Demo visitors are not added to mailing lists or treated as customers. Every demo is deleted automatically within 7 days, and a RUE Business demo is deleted straight away when you press "Leave demo". AI answers in the demo use Google’s Gemini: it receives a summary of the figures in your demo (the sample figures, plus any of your own you added), never your name.
3. Who else handles it
We share your information only with companies that help run RUE, and only what each needs:
| Company or type | What it does | When |
|---|---|---|
| Namecheap | Stores RUE and its data | Always |
| Cloudflare | Protects the website and speeds it up | Always |
| Namecheap Private Email | Sends sign-in, welcome and reminder emails | Always |
| Exchange-rate service | Supplies daily currency rates (no personal data sent) | Always |
| Square or Shopify | Sends a business’s item sales to RUE | Only if the business links its till |
| Anthropic (Claude) or Google (Gemini) | Writes Ask Rue’s fuller answers | Only when you choose one |
| Google (Gemini) | Writes AI answers in the demo, from a summary of the demo’s figures | Only in the demo |
We may also share information if the law requires it, to protect people from fraud or harm, or if Zadesta is sold or merged, in which case your information stays protected by this notice and we will tell you first. We never sell or rent your information.
4. Where it is stored
RUE’s data is stored in the United States. Because RUE serves people in Canada, the UK, the US and Nigeria, your information may be handled in a country other than yours. When information leaves the UK or Nigeria, we use the safeguards those laws require. Under Canadian law, information handled in another country may be accessible to that country’s courts and authorities.
5. How long we keep it
| Information | How long |
|---|---|
| Your account and records | Until you delete your account |
| Backups | Removed within 90 days after deletion |
| Security and sign-in records | Up to 12 months |
| Sample-data demos | Deleted after 7 days without use |
| Accounts not used for 24 months | Deleted after we warn you by email |
| Emails to us | Up to 2 years after the conversation ends |
RUE Business: the business decides how long to keep its records, as tax laws often require 6 years or more. When a business closes its workspace, everything is deleted after 30 days; the owner can download everything first.
6. Deleting your account
Use “Delete my account” in Settings. Your account and records are deleted after 30 days, and signing in before then cancels it. You can download your records as CSV or PDF first. A few records may be kept longer only where the law requires it.
7. Keeping it safe
- Everything travels over encrypted connections (HTTPS), and passwords are stored scrambled.
- Owners and administrators confirm each new sign-in with a 6-digit code.
- Receipts and documents are kept in a private folder the public web cannot reach.
- Each person only sees what they are allowed to see, and RUE records who did what.
- RUE signs you out after a period of no use, which you can choose.
No system is perfectly secure. If a breach puts your information at risk, we will tell you and the regulators as each country’s law requires.
8. Your rights
Wherever you live, you can ask to see, correct, download or delete your information. It is free, and we reply within 30 days. Email [email protected]; we may ask you to confirm who you are first.
| Where you live | Main law | If you are unhappy with our answer |
|---|---|---|
| Canada | PIPEDA; Quebec’s Law 25 | Office of the Privacy Commissioner of Canada; in Quebec, the Commission d’accès à l’information |
| United Kingdom | UK GDPR and Data Protection Act 2018 | Information Commissioner’s Office (ICO) |
| United States | State privacy laws, such as California’s (CCPA/CPRA) | Your state’s attorney general; in California, the California Privacy Protection Agency |
| Nigeria | Nigeria Data Protection Act 2023 | Nigeria Data Protection Commission (NDPC) |
We do not sell or share information for advertising, so there is nothing to opt out of. Please contact us first so we can try to put things right.
9. Children
RUE is for adults aged 18 and over. A parent or guardian can invite a teenager aged 13 to 17 into their family space in RUE Personal; the parent or guardian chooses what the teenager can see, and is responsible for that account. Children under 13 do not get their own account: a parent can keep a pocket money record for them, which holds only the first name the parent types and the amounts. We do not knowingly collect any other information about children. If you think a child has signed up on their own, tell us and we will delete the account.
10. Changes to this notice
For important changes, we will tell you by email and in RUE at least 30 days before they apply.
11. Contact
Zadesta Ltd, Marley Cres, Ottawa, Canada K1J 1C1
Privacy lead: Dr Ade Chinedu Adesina ([email protected])
Phone: +1 (343) 881-9587
Email: [email protected]
Last updated: 1 October 2026.