Secure & Transparent
Privacy Policy
Last Updated: June 21, 2026. Learn how Rechup protects your information.
1. Scope of Services & Active Features
Please note that in the current version of Rechup, Mobile Prepaid Recharges and Gift Cards/Brand Vouchers are functional and active services. Other services, including mobile postpaid recharges and utility bill payments (DTH, Electricity, Gas, Water, Broadband, Landline), are dummy features designed for representation of upcoming releases. These services are currently disabled, and no data or transactions are processed for them. They will be fully enabled in a future release.
2. Information We Collect & Permissions Used
We collect only the specific information necessary to operate, verify, and secure your mobile recharge and brand voucher transactions. We request and utilize the following permissions and data:• State Registration: We collect your registered home state of residence during signup. This is mandatory to determine the legal Place of Supply (POS) for tax invoice calculations (CGST/SGST for Assam, and IGST for other states) under the Goods and Services Tax (GST) regulations of India.• Device-SIM Binding (READ_PHONE_STATE, READ_PHONE_NUMBERS): Accessed to bind your Rechup account to the physical SIM card in your current device. This prevents unauthorized remote login and session hijacking.• Contacts Access (READ_CONTACTS): Accessed only when you open the contact picker. This allows you to pick numbers easily from your address book. We do not upload your contact list to our servers; all processing is done locally.• Camera & Gallery (CAMERA, Gallery Access): Used only during the voluntary KYC verification process (allowing you to capture selfies or upload identity cards) and in our customer support chat (to attach relevant screenshots).• Document Picker (Storage Access): Used to select PDF or image files of Aadhaar cards and PAN cards during voluntary KYC verification.• Biometric Authentication (USE_BIOMETRIC, USE_FINGERPRINT): Enables the Local Lock feature to secure your wallet and transactions. The authentication is processed entirely locally by your device's operating system hardware. Rechup never accesses, stores, or transmits biometric data.• Push Notifications: Used to send you real-time updates regarding recharge transaction status, wallet balance updates, and important security alerts.• Device Security Identifiers: We collect unique device identifiers (Android ID/UUID) to detect root access, customized systems, and unauthorized parallel sessions to safeguard your financial wallet balance.
3. Biometrics & Transaction PIN Security
We prioritize the security of your wallet and transactions:• Biometric Authentication (Fingerprint / Face ID): When you enable the Biometric/App Lock feature, the authentication is processed completely locally by your device's operating system hardware. Rechup never accesses, stores, or transmits your biometric fingerprint or face scan data to our servers.• Transaction PIN: To secure your payments, we require you to set a 4-digit PIN. This PIN is encrypted and verified strictly on our secure backend solely when executing recharges, changing security configurations, or enabling/disabling biometric lock.
4. KYC Verification
To comply with regulatory anti-money laundering (AML) and security standards, we verify identity documents. If you submit KYC documents (Aadhaar, PAN, and selfie), they are encrypted and stored securely. Face-matching technology or manual verification may be used to confirm your identity. KYC details are never shared with external parties.
5. Device-SIM Binding & Security Restrictions
To protect your funds, we link your active account session to your device's physical SIM card. If your device is detected to be rooted or running cheat/hacking frameworks, we restrict wallet deposits to a maximum of ₹500 per month and recharges to a maximum of 1 successful recharge per month to secure your balance.
6. Wallet Usage, Refunds & Cashbacks
Rechup utilizes a closed-loop wallet system. Please note that manual wallet loading or top-ups by users are completely disabled. The wallet is solely used to store, hold, and accumulate promotional cashbacks, referral rewards, or transaction refunds. Wallet balances can only be used to pay for active mobile recharge services inside the app. Withdrawals, cash-outs, or transfers from the wallet to external bank accounts or other users are strictly not permitted under any circumstances.
7. Referral and Rewards
Our "Refer to Earn" program grants commission to users who refer others to sign up and complete recharges. Referral logs are used solely to verify eligibility and process reward credits.
8. Data Security
We utilize industry-standard cryptographic methods to secure your data in transit and at rest. We limit system access to authorized personnel and do not sell your personal data.
9. Third-Party Services
Rechup integrates with trusted payment processing gateways and telecom recharge APIs. These services are bound by their own privacy terms and comply with applicable local regulations.
10. Children's Privacy
Our services are intended for users aged 18 and above. We do not knowingly collect personal data from minors.
11. Policy Updates
We may update this Privacy Policy from time to time. Continued use of the app constitutes your acceptance of any changes. You will be notified of major updates within the app.
12. Contact Us
If you have any questions or concerns about this policy, please reach out to our support team through the app or email us at rechup.support@bhaaratbyte.com.
Corporate Information
Rechup is owned and operated by Bhaaratbyte Technologies Private Limited. For legal queries, please contact our support team:
Corporate Address
Bhaaratbyte Technologies Private Limited,
KOPATI TOWN, KHAJUABIL, Kopati,
Darrang – 784113, Assam.