Privacy Policy

Last Updated: 12 January 2026

1. Who We Are

This mobile application ("App") is operated by Rex Connexa Ltd ("we," "our," or "us"), trading as the brand Impulsv. We are located at 5 Brayford Square, London, United Kingdom, E1 0SG.

For the purposes of the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR), Rex Connexa is the Data Controller of your personal information.

2. Information We Collect

We collect information to help you manage impulse spending and visualize your financial future.

A. Information You Give Us

• Identity Data: Email address and name (for account creation).

• Profile Data: Your "Vice" categories (e.g., Tech, Fashion), and your financial goals.

B. Automated Information

• Device Data: IP address, Device ID, operating system version (for security and fraud prevention).

• Usage Data: Details of your visits to our App, including traffic data, the screens you access, and details of external websites visited when using our browser extension or share feature to detect impulse purchases.

C. Open Banking Data (Optional)

If you choose to connect your bank account, we use a regulated third-party provider (e.g., Plaid, Yapily) to access read-only transaction data.

We do not see or store your bank login credentials. These are handled securely by the provider.

3. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual Necessity: To provide the core features of Impulsv (e.g. unlocking your "Vault").

• Consent: When you explicitly agree to connect your bank account via Open Banking or sign up for newsletters.

• Legitimate Interests: To analyse how the App is used so we can improve the user experience and security.

• Legal Obligation: To comply with financial regulations and tax laws where applicable.

4. How We Use Your Data

We use your data to:

• Gamify your savings journey (e.g., assigning Archetypes).

• Power personalized insights based on your spending patterns and browsing behavior to help you identify and overcome impulse triggers.

• Authenticate your identity and prevent fraud.

• Notify you about changes to our service.

We do NOT sell your personal or financial data to third parties for marketing purposes.

5. Data Sharing

We may share your data with trusted third-party processors who assist us in operating the App:

• Cloud Infrastructure: Supabase (Database & Auth).

• Open Banking Providers: To facilitate bank connections.

• Analytics: Providers (e.g., PostHog/Google) to understand app usage (data is anonymized where possible).

• Affiliate Partners (Sovrn): We use Sovrn to power affiliate links and rewards. When you click on product links within the App, Sovrn may receive information about the page URL and your interaction to facilitate affiliate commissions. This helps fund our free features and rewards program.

Future Advertising

We may in future display personalised affiliate advertisements within the App. These ads will be clearly labeled as sponsored content. You will be notified of any material changes to our advertising practices, and where required, we will seek your consent before serving personalized ads.

6. International Transfers

Your data may be processed outside the UK/EEA (e.g., on US servers). We ensure your data is protected by using Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), ensuring foreign providers meet UK privacy standards.

7. Your Rights

Under UK/EU law, you have the right to:

• Access: Request a copy of the data we hold about you.

• Delete: Request that we delete your account and data ("Right to be Forgotten"). You can do this directly in the App Settings.

• Rectify: Correct inaccurate data.

• Withdraw Consent: Disconnect your Open Banking feed at any time.

For US Residents (CCPA/CPRA): You have the right to know what personal info we collect and the right to request deletion. We do not sell your personal information.

8. Data Retention

We retain your personal data only as long as your account is active. If you delete your account, your data will be removed from our active systems within 30 days, unless we are legally required to retain specific records for tax or audit purposes.

9. Contact Us

For any privacy-related questions, please contact us at:

• Email: Hello@impulsv.co.uk

• Address: 5 Brayford Square, London, United Kingdom, E1 0SG.

• Website: www.impulsv.com