Privacy Policy

This Policy applies to the Releck mobile app for customers (Android package com.releck.app, and iOS), the Releck Hub app for repair centres, technicians and recycling centres (Android package com.releck.hub, and iOS), the Releck and Releck Hub websites (releck.com and hub.releck.com), and the Releck Monitor desktop app, and to the services provided through them. It is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Who We Are

Releck is a circular economy platform operated by Releck Private Limited (hereinafter “Company”, “we”, “us”), a private limited company incorporated under the Companies Act, 2013. Releck connects customers with repair centres, technicians and recycling centres, and supports the repair, recycling and responsible disposal of electronic devices.

• Data Fiduciary (Controller): Releck Private Limited
• Country of Operation: India
• Contact: support@releck.com

2. Information We Collect

2.1 Information you give us

• Account details: your name, email address, mobile number and password (stored only as a salted hash).
• Service details: the information you provide to request and complete a service, such as device details, a description of the issue, photos, and the address and contact details needed to carry it out.
• Payment records: the amount, reference and status of payments. We do not store your card, UPI or bank details for paying us; payments are processed by Razorpay Software Private Limited.
• Communications: messages, feedback, ratings and support requests you send us, and your use of the features in our apps.
• Business and partner information: for businesses and partners, the details needed to set up and pay their accounts, such as business details, bank details for payouts, and documents they upload.

2.2 Sensitive personal data or information (SPDI)

Under Rule 3 of the SPDI Rules, 2011, your password and financial information such as bank account details are sensitive. We collect them only with your consent, only for the purposes in this Policy, and we protect them as described in Section 8. Card and UPI details used to pay Releck are handled by Razorpay and are not stored by us.

2.3 Information collected automatically

• Device and app information: the type of phone or computer, operating system and version, app version, language, and the token your phone gives us to send notifications.
• Technical data: IP address, log entries and error information needed to run and secure the service.
• Device health readings: only if you allow it, the apps and the Releck Monitor desktop app read the health of the device they run on, such as battery level, storage use, and performance and power-saving state, and send it to your Releck account. We ask you once, before reading anything, and you can change your answer at any time in the app (Profile → Settings → Manage Account) or by disconnecting the Monitor. We use it for device checks and to verify repairs.
• Releck Monitor: if you install and connect the Monitor desktop app to your account, it reads health and hardware information about that computer (for example model, operating system, battery, storage and performance readings) and shares it with your account. You control which computers are connected and can disconnect them.
• Website: we use Google Analytics to understand which pages are visited. It uses cookies and similar identifiers; see Section 11.

2.4 Permissions the apps ask for

• Photos / media: only to let you choose pictures of your device to attach to a request. We do not read your gallery. The Hub apps also use the camera so partners can photograph a device or part as evidence.
• Notifications: to send status updates for your requests, handover and payment messages, and security messages. You can turn notifications off in your phone settings at any time.
• Internet access to use the service. The apps do not track your location, and do not read your contacts, messages, microphone or call history. When you tap Directions, your phone’s maps app opens.

2.5 Summary: what we collect, why, and who receives it

We do not sell your personal data and we do not use it for advertising.

3. Why We Use Your Information

• To create and run your account, and to verify your email address.
• To arrange repairs, pickups, drop-offs and recycling with the repair centres, technicians and recycling centres you or Releck choose, and to keep you informed of progress.
• To confirm a handover with a one-time code that you generate when the device changes hands.
• To take payments, pay you for recycled devices, issue receipts and invoices, and keep accounting records.
• To manage Releck Coins.
• To answer your questions and give support, including through Releck Intelli.
• To check and keep proof of the data-erasure and disposal of recycled devices.
• To protect the service and users from fraud, abuse and unauthorised access, and to fix technical problems.
• To comply with laws, regulations and lawful requests.

We do not sell your personal data. We will ask for your separate consent before we send you promotional messages.

4. Our Basis for Using Your Data (Consent and Legitimate Uses)

Under the DPDP Act, 2023 we use your personal data because:

• You gave your consent. When you create an account you tick a box to agree to the Terms of Service and this Policy. Consent is free, specific, informed and unambiguous, and you can withdraw it as easily as you gave it (Section 9). Withdrawing consent may mean we can no longer provide the service.
• You voluntarily gave the data for a purpose and have not said you object, for example the address you enter for a pickup.
• We must comply with the law, for example tax, accounting and invoicing laws, or a court order.

5. Who We Share Your Information With

• Repair centres, technicians and recycling centres that handle your request. They see what they need to do the work: your name, phone number, the address for a visit, the device details, your photos and notes. They may use this only for your request.
• Razorpay Software Private Limited: payment processing and payouts.
• Amazon Web Services (AWS), India (Mumbai) region: hosting, database, private file storage for photos and documents, and Amazon Bedrock, which runs the AI assistant. Your Releck Intelli conversations are processed there.
• Google (Firebase Cloud Messaging) to deliver push notifications, and Google Analytics on the website.
• Google (Firebase Crashlytics) and Sentry to receive crash reports when an app or the website breaks, so that we can fix the problem. A crash report contains the kind of error, where in the app or website it happened, the app version, the phone or browser model and the operating system. It does not contain your name, email, phone number, requests, photos or messages.
• Postmark to deliver emails such as verification codes and receipts.
• Government and legal authorities when required by law.
• A successor business if Releck is merged with or acquired by another company, on the same terms as this Policy.

Each provider may use your data only to provide its service to us. A recycling centre or a repair centre is responsible for how it treats the documents and data it creates in running its own business.

6. Where Your Data Is Processed

Your data is stored and processed in India (AWS Mumbai). Some of our providers, such as Google and Postmark, may process data outside India. We use these providers only where the DPDP Act permits it, and we will follow any restriction the Central Government notifies on transfers to particular countries.

7. How Long We Keep Your Data

• Account data (profile, saved addresses and devices, notification history, AI conversations): until you delete your account. After deletion the account can be restored for 30 days; after that, this data is erased (Section 10).
• Photos you add to a request: kept with the request for the period needed to handle it and any warranty or dispute. Repair evidence photos are kept for 365 days, and longer only if a dispute or legal requirement applies.
• Records of repairs, recycling, payments, invoices and the Releck Coins ledger: kept for the period the law requires for tax and accounting records, generally up to 8 years, and they keep the name and contact details you gave for that service. We delete them when that period ends.
• Handover codes and one-time email codes: valid for minutes, then discarded.

8. How We Protect Your Data

We follow reasonable security practices as required by Rule 8 of the SPDI Rules, 2011 and the DPDP Act, 2023:

• All traffic is encrypted in transit (HTTPS/TLS).
• Passwords are stored only as salted cryptographic hashes.
• Sign-in uses short-lived access tokens, kept on your phone in the device’s secure storage (iOS Keychain / Android Keystore).
• Photos and documents are kept in private storage and opened only through short-lived links. Bank account numbers of partners are encrypted.
• Employee access is limited to what the job needs, and is logged.

No system is completely secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

9. Your Rights and How to Use Them

Under the DPDP Act, 2023 you have the right to:

• Access: a summary of your personal data and who it was shared with.
• Correction and completion of inaccurate or incomplete data.
• Erasure of your personal data, except what we must keep by law.
• Withdraw consent at any time. This does not affect what we did before you withdrew.
• Grievance redressal from our Grievance Officer (see below).
• Nominate another person to exercise your rights if you die or become unable to.

In the Releck app: go to Profile → Settings → Manage Account. There you can edit your details, download a copy of your data, and delete your account. On the website: My account → Profile. By email: write to support@releck.com from the email address on your account. We respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India once it is in place.

10. Deleting Your Account and Data

1. In the app, go to Profile → Settings → Manage Account → Delete account, or on the website go to My account → Profile → Delete account. You can also email support@releck.com. Repair centres, technicians and recycling centres use Delete account and data in the Releck Hub app or website (Account actions, Profile or Help and legal, depending on your role); we confirm it is you, then delete the account.
2. Your request starts straight away: you are signed out and your account can no longer be used. We hold your data for 30 days so you can change your mind; you can restore the account in that time by signing up again with the same email.
3. After 30 days your personal data is permanently deleted. This covers your name, email, phone number, sign-in details, saved addresses and devices, device records, notification history, push tokens, AI conversations and feedback. The account is left as an empty record.
4. We keep only what the law, or fraud and security protection, requires (Section 7), such as repair and recycling requests, payments and invoices, until the retention period ends. We do not use it for anything else.

The page releck.com/delete-account has these steps as a standalone page.

11. Cookies and Analytics

The Releck mobile apps do not use cookies and do not show advertising. The website can use Google Analytics and Microsoft Clarity, which set cookies to count visits, see which pages are used and, for Clarity, show how visitors move and click on our public marketing pages. They are switched on only if you say yes when the website asks, and nothing is sent to Google or Microsoft, and no analytics cookie is set, before then. You can change your answer at any time with “Cookie settings” at the bottom of any page; saying no stops them and removes those cookies. They are used only on our public pages: not on your account, requests, receipts, any page with a personal link, or any page with a form, and Clarity hides all text on the pages it records. They are never sent a page address with anything after a question mark in it, and we do not send them your name, email, phone number or any text you type. We do not use them for advertising and we do not share your account details with them. You can also block or delete cookies in your browser settings; the website works without them.

Crash reports are different from analytics: they are sent only when something breaks, they are not used for advertising or to follow what you do, and they do not set cookies.

12. Children

Releck is for people 18 years of age and older. We do not knowingly collect data about children. If you believe a child has given us personal data, write to support@releck.com and we will delete it.

13. Changes to This Policy

When we change this Policy, we will update the date and version above, and tell you in the app or by email before the change applies. If a change affects what you agreed to, we will ask for your consent again. Older versions are available on request.

15. Contact Us

• Email: support@releck.com
• Website: https://releck.com/privacy