1. Introduction
Rekore ("Rekore", "we", "us", or "our") provides waste-management software for industries, collectors, drivers, and government authorities. This Privacy Policy describes how we collect, use, store, share, and protect personal and operational data when you use:
- Rekore Source — the Android/iOS mobile application for waste-generating facilities (package name: in.rekore.source)
- Rekore web platform — available at https://app.rekore.in
By registering for an account, signing in, or using our services, you agree to this Privacy Policy. If you do not agree, please do not use our services.
Data controller: Rekore (operating at app.rekore.in). Contact: support@rekore.in
2. Who this policy applies to
This policy applies to:
- Organization administrators and users of Rekore Source (factories / industries)
- Users of the Rekore web portal under the same tenant account
- Visitors to our public pages, including this privacy policy
Rekore Source is a business-to-business (B2B) application. It is not intended for children under 18 years of age. We do not knowingly collect personal information from children.
3. Information we collect
3.1 Account and organization information
When you register or maintain an account, we may collect:
- Organization name, type, and description
- Admin name, email address, phone number, and password (stored in hashed form)
- Business identifiers such as GSTIN, PAN, CIN, or registration number (when provided)
- Postal address, district, local body, ward, taluk, city/town/village, and PIN code
- Organization contact email and phone
3.2 Waste and operational data
To provide waste-management services, we collect and process:
- Waste posts, quantities, types, modes, dates, and status
- Daily records, collection history, and reports
- Invoices, payment bills, and related documents you upload
- Notes, metadata, and audit logs linked to your organization's activity
3.3 Location information
With your permission, the app may access precise or approximate location when you post waste collection points or use map features. Location may include GPS coordinates and address details you enter or select (for example via map search).
3.4 Photos and files
With your permission, the app may access the device camera to capture photos of waste for documentation. Uploaded images and exported report files (PDF/Excel) are stored on our servers or secure cloud storage to support your account features.
3.5 Push notifications
If you allow notifications, we collect a device push token (via Firebase Cloud Messaging / Expo push services) and your device platform (Android or iOS) to send operational alerts such as collection updates and account notifications.
3.6 Technical and security data
We automatically collect limited technical information, including:
- IP address, browser or app version, and device type
- Authentication tokens and session identifiers
- API request timestamps, error logs, and security events (e.g. failed logins)
- Locally cached account data on your device (such as login token and basic profile)
3.7 Information we do not collect
- We do not sell your personal data
- We do not use your data for third-party advertising
- We do not request access to your contacts, SMS, call logs, or microphone
- Rekore Source does not access your photo gallery unless you explicitly use a gallery feature in a future update
4. How we collect information
- Directly from you — when you register, log in, complete forms, post waste, upload files, or contact support
- Automatically — when you use the app or website, including cookies and session mechanisms on the web platform
- From your device — when you grant permissions for location, camera, or notifications
- From authorized platform users — for example, collectors or administrators acting on waste linked to your organization within the Rekore ecosystem
5. How we use your information
We use collected information to:
- Create, verify, and manage your organization account
- Provide waste posting, tracking, reporting, and notification features
- Connect your organization with authorized collectors and logistics workflows
- Generate compliance and operational reports for your organization
- Send service-related emails and push notifications
- Maintain platform security, prevent fraud, and enforce our terms
- Comply with applicable laws, regulations, and lawful requests
- Improve reliability, performance, and user support
We process your data based on: (a) performance of our contract with you; (b) your consent where required (e.g. location, camera, notifications); (c) our legitimate interests in operating a secure B2B platform; and (d) legal obligations.
7. Third-party services
Our services may integrate with third parties including:
- Google Maps / Places — map display and location search
- Firebase Cloud Messaging (Google) — delivery of push notifications to Android devices
- Expo / EAS — mobile app build and push token infrastructure
- Cloud storage providers — secure storage of images and documents (e.g. waste photos, bills, reports)
- Email service providers — account verification and operational emails
These providers process data only as needed to deliver their service to us. Their own privacy policies may also apply. We encourage you to review Google's privacy policy at https://policies.google.com/privacy.
8. Data retention
We retain information for as long as necessary to:
- Provide services to your organization
- Maintain business and compliance records
- Resolve disputes and enforce agreements
- Meet legal, tax, and regulatory retention requirements
When you delete your account, we deactivate login access and begin removing or anonymizing personal account data. Some operational records (for example waste transaction logs required for regulatory compliance) may be retained in de-identified or aggregated form where the law requires.
9. Security
We implement administrative, technical, and organizational measures designed to protect your data, including encrypted transport (HTTPS/TLS), access controls, password hashing, and audit logging. No method of transmission or storage is 100% secure; please use a strong password and keep your login credentials confidential.
10. Your choices and rights
Depending on applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to:
- Access personal data we hold about you
- Correct inaccurate or incomplete information
- Withdraw consent for optional processing (e.g. notifications)
- Request deletion of your account and associated personal data
- Lodge a complaint with a relevant data protection authority
10.1 Device permissions
You can control app permissions in your device settings:
- Location — required only when using location-based features
- Camera — required only when capturing waste photos
- Notifications — optional; disabling may limit alerts
10.2 Account deletion
You can delete your Rekore Source account at any time from Profile → Delete Account in the mobile app. You will be asked to confirm your password. After deletion:
- Your login credentials will stop working
- Personal account data will be scheduled for removal subject to legal retention
- Push tokens associated with your account will be invalidated
You may also email support@rekore.in to request access, correction, or deletion.
11. International data transfers
Our servers and service providers may be located in India or other countries. Where data is transferred across borders, we take steps to ensure appropriate safeguards consistent with applicable law.
13. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. Material changes will be communicated through the app, website, or email where appropriate. Continued use after changes constitutes acceptance of the updated policy.
14. Contact us
For privacy questions, data requests, or support:
- Email: support@rekore.in
- Website: https://app.rekore.in
- Privacy policy URL: https://app.rekore.in/privacy
We aim to respond to verified privacy requests within 30 days.