Security

What protects your data in Ruki, concretely. If you want the details of what information we process and for how long, it's in the privacy policy.

Ruki doesn't touch your money

Ruki doesn't connect to your broker, doesn't ask for your credentials and can't trade on your behalf. It's a record: you buy and sell where you already do, and here you write down what you did.

That means that even if someone got into your Ruki account, they couldn't move a single peso: there's nothing to move. What's there is information.

Only your account can see your portfolio

The database has rules that check, on every read and every write, that whoever is requesting the data is the owner of that data. It's not an app-side check that can be bypassed: the server enforces it.

No one with another Ruki account can read or touch your portfolio.

How you sign in

You can sign in with Google or Apple and never handle a new password. If you prefer email and password, the password is stored by Google's Firebase Authentication, encrypted: Ruki never sees it and can't recover it.

Encryption

Everything travels encrypted between your phone or browser and the server, and it stays encrypted when it's stored too. The infrastructure is Google's Firebase.

For the important things, we ask you again

Deleting your account, clearing your portfolio or exporting all your data are actions that require you to authenticate again. If you left a session open on a device, that's what stops someone else from doing them for you.

If you delete your account, everything is deleted

We don't keep a file of your data just in case. When you delete your account, a process is triggered that purges your information.

And if you just want your information, you can export your full portfolio to Excel whenever you want. We don't keep you by making it hard to leave.

What we don't do

We don't sell or share your data.