Secure & Transparent
Privacy Policy
Last Updated: September 7, 2026. Learn how Rechup Pay protects your information.
1. Scope of Services
Rechup Pay is a fully operational digital utility and recharge platform. The following services are live and active:• Mobile Prepaid Recharges (All major operators — Jio, Airtel, Vi, BSNL)• DTH Recharges• Gift Cards / Brand Vouchers (Digital gift cards and brand vouchers across popular brands)• Rechup Pay Moments — Voluntary 24-hour verified cashback proof & transaction status sharing feature.• BBPS Utility Bill Payments (Electricity, Gas, Water, Broadband, Landline, Postpaid Bills) — Coming Soon (Will be launched in the future).
2. Information We Collect & Permissions Used
We collect only the specific information necessary to operate, verify, and secure your mobile recharge and brand voucher transactions. We request and utilize the following permissions and data:• State Registration: We collect your registered home state of residence during signup. This is mandatory to determine the legal Place of Supply (POS) for tax invoice calculations (CGST/SGST for Assam, and IGST for other states) under the Goods and Services Tax (GST) regulations of India.• Device-SIM Binding (READ_PHONE_STATE, READ_PHONE_NUMBERS): Accessed to bind your Rechup Pay account to the physical SIM card in your current device. This prevents unauthorized remote login and session hijacking.• SMS Verification & Auto-OTP (Google SMS Retriever API): For phone number verification during login or account creation, our app utilizes Google's official SMS Retriever API to automatically detect the 6-digit One-Time Password (OTP) sent via SMS. This process operates without requesting or requiring sensitive SMS permissions (
READ_SMS / RECEIVE_SMS) and does not access, read, store, or transmit your personal SMS messages or inbox contents.• Contacts Access (READ_CONTACTS): Accessed only when you open the contact picker. This allows you to pick numbers easily from your address book. We do not upload your contact list to our servers; all processing is done locally.• Camera & Gallery (CAMERA, Gallery Access): Used only during the voluntary KYC verification process (allowing you to capture selfies or upload identity cards) and in our customer support chat (to attach relevant screenshots).• Document Picker (Storage Access): Used to select PDF or image files of Aadhaar cards and PAN cards during voluntary KYC verification.• Biometric Authentication (USE_BIOMETRIC, USE_FINGERPRINT): Enables the Local Lock feature to secure your wallet and transactions. The authentication is processed entirely locally by your device's operating system hardware. Rechup Pay never accesses, stores, or transmits biometric data.• Push Notifications: Used to send you real-time updates regarding recharge transaction status, wallet balance updates, and important security alerts.• Device Security Identifiers: We collect unique device identifiers (Android ID/UUID) to detect root access, customized systems, and unauthorized parallel sessions to safeguard your financial wallet balance.• Device Specifications & Bug Diagnostics Payload (`deviceInfo`): When you submit bug reports, report technical issues, or when an in-app error/crash occurs, we collect technical device diagnostics under the deviceInfo object. This includes specific parameters:• Device Name & Brand: deviceName, brand (e.g. Samsung, Xiaomi, Vivo, Realme, Apple)• Model Identifiers: modelName, modelId (e.g. Galaxy A54, SM-A546B)• Operating System & Version: osName, osVersion (e.g. Android 13/14)• Platform & API Level: platform, platformVersion (e.g. Android API Level 34)• Physical Device Verification: isDevice (verifies physical hardware vs emulator)• Metadata: Attached alongside app build version, active screen name, error stack trace, and your registered phone number.This data is collected solely to diagnose technical issues, reproduce bugs, ensure app compatibility across various Android device configurations, and provide responsive customer support.3. Biometrics & Transaction PIN Security
We prioritize the security of your wallet and transactions:• Biometric Authentication (Fingerprint / Face ID): When you enable the Biometric/App Lock feature, the authentication is processed completely locally by your device's operating system hardware. Rechup Pay never accesses, stores, or transmits your biometric fingerprint or face scan data to our servers.• Transaction PIN: To secure your payments, we require you to set a 4-digit PIN. This PIN is encrypted and verified strictly on our secure backend solely when executing recharges, changing security configurations, or enabling/disabling biometric lock.
4. KYC Verification
To comply with regulatory anti-money laundering (AML) and security standards, we verify identity documents. If you submit KYC documents (Aadhaar, PAN, and selfie), they are encrypted and stored securely. Face-matching technology or manual verification may be used to confirm your identity. KYC details are never shared with external parties.• Mandatory Manual KYC Trigger (Rapid & High-Value Top-ups): If a user tops up their wallet with an amount exceeding ₹15,000 (whether in a single deposit or across multiple top-ups within a few minutes interval), or if our risk and compliance team detects high-frequency or high-value deposit patterns exceeding ₹15,000, manual KYC verification will be mandatory. Rechup Pay reserves the right to temporarily restrict or place a hold on wallet balance, further top-ups, or recharge services until the user completes manual KYC verification and it is approved by our team.
5. Device-SIM Binding & Security Restrictions
To protect your funds, we link your active account session to your device's physical SIM card. If your device is detected to be rooted or running cheat/hacking frameworks, we restrict wallet deposits to a maximum of ₹500 per month and recharges to a maximum of 1 successful recharge per month to secure your balance.
6. Wallet & Payments — Closed-Loop Policy
Rechup Pay operates a closed-loop prepaid wallet. Key points you must be aware of:• Adding Money: You may add money to your Rechup Pay wallet using supported payment methods (UPI, debit/credit card, net banking) available within the app. Your payment information is processed securely through our authorized payment gateway partners (e.g., Cashfree, Razorpay). We do not store your card or bank account credentials on our servers.• High-Value & Rapid Top-up KYC Monitoring: If a user tops up their wallet by an amount exceeding ₹15,000 within a short interval (a few minutes difference) or if our operations team detects suspicious high-value deposit activity exceeding ₹15,000, manual KYC verification may be mandated before allowing further wallet usage or recharges.• Usage Restriction: Wallet balance can only be used to pay for services within the Rechup Pay app — including mobile recharges, DTH recharges, utility bill payments, brand vouchers, and any other services offered on the platform.• No Withdrawals: Withdrawal, cash-out, or transfer of wallet balance to any external bank account, UPI ID, or third party is strictly not supported or permitted.• No Peer Transfers: Transfer of wallet balance between Rechup Pay user accounts is not permitted.• Refunds: Failed transaction amounts are automatically refunded back to your Rechup Pay wallet balance.• Cashbacks & Rewards: Promotional cashbacks and referral rewards credited to your wallet are subject to the same closed-loop restrictions.
7. Rechup Pay Moments — Limited Community Sharing
Rechup Pay Moments is a limited, temporary transaction-sharing feature designed to allow users to voluntarily showcase verified Rechup Pay recharge and cashback experiences. Key privacy and safety boundaries governing Rechup Pay Moments include:• System-Generated Templates Only: Moments are generated exclusively from verified Rechup Pay transaction data using predefined system templates. Users cannot upload photos, videos, custom text, links, or arbitrary media.• Official Admin Broadcasts: Rechup Pay Moments also includes official product announcements, promotional offer banners, and system updates broadcasted directly by Rechup Pay Official Admin. Users cannot create or post custom announcements.• Restricted Interaction Model: The feature does not support open-ended user-generated content. User interaction is strictly limited to predefined emoji reactions and automated aggregate view counts. Rechup Pay Moments does not provide user-to-user messaging, chat, text comments, or user-written replies.• Explicit Voluntary Action & Anonymity: Publishing a Moment requires an explicit user action. Public stories use masked identity information (e.g.,
Rahul S.) and never expose mobile numbers, email addresses, payment credentials, or transaction reference IDs.• 24-Hour Expiration & User Controls: Moments automatically expire after 24 hours and are removed from the active Moments feed. Users have full controls to block specific profiles from viewing their moments or delete their own active Moment at any time.• Non-Social Platform Boundary: Rechup Pay Moments is not intended to function as a social networking, messaging, or open user-generated-content platform.8. Referral and Rewards
Our "Refer to Earn" program grants commission to users who refer others to sign up and complete recharges. Referral logs are used solely to verify eligibility and process reward credits.
9. Data Security
We utilize industry-standard cryptographic methods to secure your data in transit and at rest. We limit system access to authorized personnel and do not sell your personal data.
10. Third-Party Services
Rechup Pay integrates with trusted payment processing gateways and telecom recharge APIs. These services are bound by their own privacy terms and comply with applicable local regulations.
11. Children's Privacy
Our services are intended for users aged 18 and above. We do not knowingly collect personal data from minors.
12. Policy Updates
We may update this Privacy Policy from time to time. Continued use of the app constitutes your acceptance of any changes. You will be notified of major updates within the app.
13. Contact Us
If you have any questions or concerns about this policy, please reach out to our support team through the app or email us at rechup.support@bhaaratbyte.com.
Corporate Information
Rechup Pay is owned and operated by Bhaaratbyte Technologies Private Limited. For legal queries, please contact our support team:
Corporate Address
Bhaaratbyte Technologies Private Limited,
KOPATI TOWN, KHAJUABIL, Kopati,
Darrang – 784113, Assam.