Privacy Policy

1. About this policy

This Privacy Policy explains how The A.P. Raja Rajeswari Mahila Co-operative Urban Bank Ltd. (the “Bank”, “we”, “us”), having its registered office at Dharam Karan Road, Ameerpet, Hyderabad - 500016, Telangana, collects, uses, stores, shares and protects your personal data when you use the Bank’s mobile banking application (the “App”).

The App is offered by the Bank. It may be developed, hosted or maintained for the Bank by technology service providers (“Service Providers”), who handle your data only on the Bank’s instructions and under written contracts.

For the personal data you give us or that we hold as your bank, the Bank is the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). By installing and using the App, you confirm that you have read this policy. Where the law requires your consent, we will ask for it clearly, and you may withdraw it later (see section 9).

2. Information we collect

2.1 Information you give us, or that the Bank already holds

• Identity and contact details: name, date of birth, address, mobile number, email address.
• KYC details held under the Bank’s Know Your Customer records, such as PAN and the identity and address documents you provided when opening your account.
• Account and financial information: account numbers, balances, transaction history, payees you add, loan and deposit details.
• Credentials: your login ID and MPIN or password, which are stored in protected form and are never shown to our staff.
• Messages you send to us through the App, such as support requests and feedback.

2.2 Information collected when you use the App

• Device information, such as device model, operating system and version, device identifier, app version and language.
• Security information, such as IP address, login times, failed login attempts, and signals that help detect fraud, rooted or jailbroken devices, and device or SIM changes.
• Usage and diagnostic information, such as screens visited, features used, and crash and performance logs.

2.3 Device permissions

Depending on the features you use, the App may ask for permission to access parts of your phone. It asks only for features that need it. You can change permissions in your phone’s settings at any time, though some features may then stop working.

3. How we use your information

• To register you, verify your identity and let you log in securely.
• To provide the banking services you ask for: viewing balances and statements, transferring funds, paying bills, managing deposits and loans, and receiving alerts.
• To keep your account safe: preventing, detecting and investigating fraud, unauthorised access and misuse.
• To comply with the law: RBI directions, the Prevention of Money Laundering Act, 2002, KYC requirements, and orders of courts and authorities.
• To respond to your questions, complaints and requests.
• To maintain and improve the App, fix errors and measure performance.
• To send service notices, such as changes to these policies. We send promotional messages only where you have agreed.

We do not sell your personal data.

4. Our basis for using your data

We use your personal data with your consent, or where the DPDP Act permits it without consent, such as to provide a service you have requested, to comply with the law or a court order, or to protect against fraud. Where we rely on consent, you can withdraw it as described in section 9. Withdrawing consent may mean we can no longer provide some App features.

5. Who we share your information with

We share personal data only where needed and only to the extent needed:

• Service Providers that host, secure or support the App, under contracts that require them to protect your data and use it only for the Bank.
• Payment and settlement systems and partner institutions, including NPCI (for UPI, IMPS and similar services) and the banks involved in your transactions.
• Regulators and authorities, including the Reserve Bank of India, and law enforcement or courts, where the law requires it.
• Credit information companies, where applicable for loan accounts and where the law permits.
• Professional advisers and auditors, who are bound by confidentiality.

6. How we protect your data

We use reasonable security measures to protect your data, such as encryption of data in transit, access controls, monitoring and security testing. We follow the reasonable security practices required by the Information Technology Act, 2000 and the rules under it, and the requirements set by the Reserve Bank of India, including for the storage of payment-related data.

No system is completely secure. You help protect your account by keeping your MPIN, password and OTP private and by following section 12.

7. How long we keep your information

We keep personal data only as long as needed for the purposes in this policy and as the law requires. Banking, KYC and transaction records are retained for the periods set by RBI directions and the Prevention of Money Laundering Act, 2002, which for such records is generally at least five years after the account is closed or the relationship ends. Data collected only for the App, such as device identifiers, usage logs and notification tokens, is deleted or anonymised within a reasonable period after you deregister from the App, unless we need it for a legal reason.

8. Tools from other companies

The App may use tools from other companies, for example for crash reporting, analytics or notifications. These tools may receive limited technical data, only to provide that function and under the Bank’s instructions.

9. Your rights and choices

Under the DPDP Act and subject to what the law allows, you have the right to:

• get a summary of the personal data we process about you and the third parties it is shared with;
• ask us to correct inaccurate or incomplete data and to update it;
• ask us to erase your personal data, except where we must keep it by law (see section 7);
• withdraw your consent at any time, with effect for the future;
• have your grievance heard and resolved (see section 14); and
• nominate another person to exercise these rights for you in the event of your death or incapacity.

To use these rights, contact us as shown in section 14. We may ask you to verify your identity first. We will reply promptly and within the time the law requires.

10. Deleting your account and data

You can ask us to deactivate your mobile banking registration and delete your App data. Closing the underlying bank account is handled separately at your branch. Full details are on our Account and Data Deletion page, linked in the footer of this website.

11. Children

The App is meant for customers aged 18 or over. Accounts for minors are operated by a parent or legal guardian, who accepts this policy on the minor’s behalf. We do not knowingly collect a child’s personal data without a guardian’s consent.

12. Staying safe

• The Bank and its staff will never ask you for your MPIN, password, OTP, card PIN or CVV, by phone, SMS, email or WhatsApp.
• Download the App only from the official store listing and keep your phone’s software up to date.
• Do not use the App on a rooted or jailbroken phone, and lock your phone with a screen lock.
• Report a lost phone, a suspicious message or an unknown transaction to us immediately.

13. Changes to this policy

We may update this policy, for example when the law or the App changes. We will post the new version in the App and on our website, and where a change materially affects you we will notify you. The date at the top shows when it was last updated.

14. Contact and grievances

For any question about this policy or your data, or to make a complaint, contact the person responsible:

If you are not satisfied with our response, you may complain to the Data Protection Board of India as provided under the DPDP Act. For complaints about banking services, you may approach the Reserve Bank of India’s Integrated Ombudsman Scheme at cms.rbi.org.in, once the Bank has had the opportunity to resolve it.