AajPay Privacy Policy
Last updated: [DATE OF PUBLICATION]
AajPay (“we”, “us”) is a mobile recharge and bill-payment app operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. This policy explains what personal data the AajPay app and service collect, why, who it is shared with, how long it is kept and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its rules, and Google Play's User Data policy.
1. Data we collect
| Data | Why |
|---|---|
| Mobile number | To create your account and log you in with a one-time password (OTP). |
| Name (optional) | Shown in the app. You can change it any time in Profile → Personal Information. |
| Transaction details: service type, operator/biller, the number or ID you recharge or pay (mobile number, DTH subscriber ID, consumer number, vehicle number), amount, status, date, transaction ID, refund status | To complete the recharge or bill payment, show your history, handle refunds and meet legal record-keeping duties. |
| Payment order records: amount, status, time | To confirm payment and refund failed payments. Your UPI/bank/card details are handled by our payment partner and are not received or stored by us. |
| Refer & Earn data: your referral code, who referred you, rewards earned and used | To run the Refer & Earn programme and prevent abuse. |
| OTP records (stored only as a one-way hash) and login attempts | To verify logins and block guessing attacks. |
| Technical logs: IP address, request time, error details | Security, fraud and abuse prevention, rate limiting and fixing problems. |
We do not collect your contacts, location, photos, camera, microphone, SMS messages, advertising ID or device identifiers. The app has no ads and no third-party analytics or tracking SDKs.
Stored only on your phone: your login session (encrypted with the Android Keystore), theme choice and app-lock preference. Fingerprint/face data is handled entirely by Android; we never receive it.
2. Who we share data with
- Payment partner ([PAYMENT GATEWAY NAME]) — amount and order details to collect payment and process refunds.
- Recharge / bill-payment partners (telecom operators, DTH providers, billers, Bharat BillPay aggregators: [PROVIDER NAME]) — the number or ID and amount needed to complete your request.
- SMS provider ([SMS PROVIDER NAME]) — your mobile number and the OTP, to deliver it.
- Hosting provider ([HOSTING PROVIDER]) — stores our servers and database.
- Authorities — when required by law, court order or to prevent fraud.
We do not sell your personal data or share it for advertising. All data is sent over encrypted connections (HTTPS).
3. How long we keep it
- Account data (mobile number, name): until you delete your account.
- Transaction and payment records: for [RETENTION PERIOD, e.g. as required under the PMLA and tax laws], even after account deletion — but no longer linked to your name or mobile number once the account is deleted.
- OTP records: short-lived; used codes cannot be reused.
- Technical logs: [LOG RETENTION, e.g. 90 days].
- After account deletion we keep only a one-way fingerprint of the mobile number, so the same number cannot claim a new-user referral reward again. It cannot be turned back into the number.
4. Your rights and choices
- Access and correction — see and edit your details in the app, or write to us.
- Deletion — Profile → Delete account, or follow the steps at /account-deletion.
- Withdraw consent — you can stop using the app and delete your account at any time.
- Grievance — contact our Grievance Officer (below). You may also approach the Data Protection Board of India.
5. Security
We use HTTPS for all traffic, store OTPs only as hashes, limit login attempts and request rates, encrypt your session on the device, and restrict access to data to people who need it. No system is perfectly secure; if we learn of a breach affecting you we will notify you and the authorities as the law requires.
6. Children
AajPay is meant for people aged 18 and above. We do not knowingly collect data from children.
7. Grievance Officer
[GRIEVANCE OFFICER NAME], [DESIGNATION]
Email: support@example.com
Address: [ADDRESS]
We acknowledge complaints within 24 hours and resolve them within 15 days.
8. Changes to this policy
If we change this policy we will update the date above and, for important changes, tell you in the app.