Privacy Policy

1 Introduction

Welcome to FF Recharge. This Privacy Policy explains how FF Recharge ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use the FF Recharge mobile application ("App") and our associated services.

By downloading, installing, or using the FF Recharge App, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the App.

This policy applies to all users of the FF Recharge App and covers all data collected through the App, our website (ffenterprise.in), and any related services or communications.

2 Information We Collect

We collect only the information necessary to provide and improve the services you use within FF Recharge:

Account Information

• Mobile Number: Your 10-digit Indian mobile number, used as your primary account identifier and for OTP-based registration.
• Name: Optional. Entered by you during profile setup.
• Email Address: Optional. Used for account communications, receipts, and responding to support requests.
• Profile Photo: Optional. If you choose to upload a profile picture, the image is stored on our secure servers and shown only inside your account.
• MPIN: A 4-digit Mobile Personal Identification Number that you create to secure your account. Your MPIN is stored only in a one-way hashed (irreversible) form; we never store it in plain text.

Transaction & Wallet Information

• Wallet Activity: Records of wallet top-ups, recharge debits, refunds, and cashback credits.
• Recharge Records: Mobile or DTH numbers you recharge, the operator, plan amount, timestamp, and status.
• Payment Records: Payment order IDs and gateway transaction IDs for wallet top-ups. We do NOT store your full card number, CVV, UPI PIN, net-banking password, or any other complete payment credential on our servers.

Verification Service Inputs

When you use our paid verification services, we collect and store the specific inputs you submit together with the result returned by the upstream data provider:

• RC Verification (Vehicle Info): The vehicle registration number you enter and the vehicle details retrieved.
• Bank Account Finder / UPI Finder: The mobile number you query and the matched account / UPI information returned.

These records are retained as part of your personal history so you can view past lookups inside the App.

Support Chat Data

• Messages: Text of chat messages you send to our support team.
• Attachments: Any image, document, or voice recording you attach while raising a support ticket or chatting with support.
• Notifications: When you send a support message, an internal alert may be delivered to our support staff via Telegram Bot API so that we can respond quickly. The alert contains only the fact that a new message was sent; it does not expose your financial data.

Device & Technical Information

• Device Model & OS: Manufacturer, model, Android version, and app version for compatibility and security checks.
• App Version Data: Used to enforce minimum-version policies and deliver update notifications.
• Firebase Cloud Messaging (FCM) Token: A device-specific token generated by Google Firebase that lets us deliver push notifications to your device.
• Crash & Error Logs: Technical diagnostic data that helps us identify and fix app issues. These logs do not contain your MPIN or payment credentials.

Referral & Cashback Information

If you participate in our referral or cashback programs, we record the referral code used, the referring user, the referee, and any cashback calculation details needed to credit the correct reward to your wallet.

3 How We Use Your Information

Core Service Delivery

• Process prepaid mobile recharges and DTH recharges that you initiate.
• Operate your digital wallet, including top-ups, debits, refunds, and cashback credits.
• Deliver paid verification services (RC Verification, Bank Account Finder, UPI Finder).
• Display available plans from telecom and DTH operators.
• Maintain your transaction and activity history.

Customer Support

• Respond to your in-app chat messages, emails, and complaints.
• Investigate and resolve transaction disputes.
• Share important service announcements, security alerts, and account notifications.

Push Notifications

• Send transaction confirmations, wallet credit / debit alerts, and recharge status updates.
• Deliver support-chat replies directly to your device.
• Inform you about promotional offers, app updates, and cashback opportunities (you may opt out at any time from your device settings).

Security & Fraud Prevention

• Verify your identity via OTP and MPIN during login and transactions.
• Detect and prevent fraudulent, abusive, or unauthorized activity.
• Enforce our Terms and Conditions and comply with legal obligations.

Analytics & Service Improvement

• Understand usage patterns to improve performance and user experience.
• Diagnose technical issues and fix bugs.
• Plan new features and better pricing for our verification and cashback services.

4 Data Storage & Security

We take the security of your data seriously and implement industry-standard measures to protect your information:

Encryption

• Data in Transit: All communication between the App and our servers uses HTTPS with SSL/TLS encryption.
• Sensitive Fields: Your MPIN is stored as a one-way cryptographic hash. Session tokens are issued per-device and can be revoked at any time.

Secure Infrastructure

• Our servers are hosted on access-controlled infrastructure with regular security updates.
• Database access is restricted to authorized personnel on a need-to-know basis.
• We maintain application-level protections against SQL injection, CSRF, and rate-abuse through prepared statements and server-side validation.

Account Lockout

Multiple failed MPIN attempts may trigger a temporary lockout for your protection.

5 Third-Party Service Providers

To deliver our services we rely on trusted third-party providers. Each provider receives only the minimum data needed to perform its function:

Payment Gateway

Wallet top-ups are processed through a certified PCI-DSS compliant payment gateway provider. The gateway handles your UPI / card / net-banking credentials directly. FF Recharge receives only the order ID, status, and amount — never your full card number, CVV, UPI PIN, or net-banking password.

Recharge API Provider (EZYTM)

Mobile and DTH recharge requests are routed through the EZYTM recharge API. When you initiate a recharge we share the target mobile / DTH number, the operator, and the plan amount with EZYTM so that your recharge can be fulfilled.

Plan & Verification API Provider (PlanAPI)

We use PlanAPI services to (a) fetch prepaid and DTH plan lists, (b) perform vehicle RC Verification, and (c) look up UPI / bank account information linked to a given mobile number. The specific input you enter (mobile number or vehicle number) is sent to PlanAPI solely to fulfill the request.

Firebase Cloud Messaging (FCM)

We use Google Firebase Cloud Messaging to deliver push notifications. Your FCM token is shared with Google's Firebase service to enable notification delivery. Firebase's handling of this token is governed by Google's privacy policy.

Telegram Bot API (Internal Alerting)

When you send a message through in-app support chat, we use the Telegram Bot API internally to alert our support staff. Telegram receives only an operational alert — your MPIN, payment credentials, wallet balance, and transaction details are never transmitted through this alerting channel.

We encourage you to review the privacy policies of these providers to understand how they handle data.

6 Data Sharing

We share your information only in these limited circumstances:

• Service Providers: With the third-party providers listed in Section 5, and strictly for the purpose of delivering the service you requested.
• Legal Requirements: When required by applicable Indian law, court order, or a lawful request by a government authority.
• Fraud & Safety: To investigate fraud, abuse, or security threats, and to protect the rights, property, and safety of our users, our partners, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of the FF Recharge business, user data may be transferred as part of that transaction. You will be notified in advance.
• With Your Consent: In any other situation, we share data only with your explicit consent.

7 Cookies & Tracking

The FF Recharge App uses only minimal tracking technologies needed for functionality:

• Local Storage: Session tokens and preferences are stored on your device for faster performance.
• Basic Analytics: We may record aggregated, non-identifying usage data (e.g. which screens are opened most) to improve the app.
• Crash Reporting: Anonymized crash and error logs are collected to help us fix bugs promptly.

We do NOT use third-party advertising trackers, pixels, or ad-network cookies inside the App. No data is shared with advertisers or data brokers.

8 User Rights

You have the following rights regarding your personal data:

Right to Access

You can view your profile details, wallet history, recharge history, verification history, and chat history directly inside the App at any time.

Right to Correction

You can update your name, email, and profile photo from the Profile screen. If other information is inaccurate, please contact support.

Right to Deletion

You may request deletion of your account and personal data (see Section 9 below).

Right to Opt-Out

You can opt out of promotional push notifications at any time from your device notification settings or from within the App. Transactional notifications (payment confirmations, security alerts) may still be delivered, as they are essential to the service.

9 Account & Data Deletion

You may request complete deletion of your FF Recharge account at any time. There are two ways to do this:

• In-App: Open the App, go to Profile, and use the "Help & Support" option to send a deletion request to our support team.
• By Email: Send an email from your registered email address to support@ffenterprise.in with the subject line "Account Deletion Request" and include your registered mobile number.

What Happens When You Delete Your Account

• Your profile, photo, MPIN, FCM token, and chat history are permanently removed from our active systems within 30 days of the verified request.
• Any remaining wallet balance is forfeited upon voluntary deletion. Please use your balance before requesting deletion.
• Transaction records, tax invoices, and refund records may be retained in anonymized form for up to 7 years as required by Indian financial and tax regulations.

10 Children's Privacy

The FF Recharge App is intended only for users aged 18 years or older. We do not knowingly collect personal information from children under 18.

If we become aware that we have inadvertently collected personal data from a child under 18, we will delete such data from our servers promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@ffenterprise.in.

11 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active. Personal data is removed from active systems within 30 days of a verified deletion request.
• Transaction Records: Retained for up to 7 years as required by Indian financial and tax regulations.
• Verification Records (RC, Bank, UPI lookups): Retained for up to 24 months so that you can refer back to past lookups.
• Support Chat History: Retained for up to 12 months for quality-of-service review.
• Device & FCM Tokens: Refreshed each session; removed on account deletion or when the token becomes invalid.
• Analytics & Crash Logs: Retained in aggregated / anonymized form for up to 24 months.

12 Device Permissions

FF Recharge requests only the device permissions necessary for its features:

• Internet & Network State: Required to connect to our servers.
• Storage (Scoped): Used when you save a recharge receipt or payment QR to your device gallery, or when you attach a file to a support chat.
• Photos / Gallery: Used only when you choose to upload a profile photo, attach a file in support chat, or save a QR code. Access is on-demand and is never used to scan your entire gallery.
• Camera (Optional): Used only if you choose to take a new photo for your profile or a support ticket.
• Microphone (Optional): Used only when you choose to record a voice message inside support chat. The microphone is never activated in the background.
• Notifications: Used to deliver transaction, wallet, and support-chat alerts via Firebase Cloud Messaging.

The App does NOT request access to your contacts, SMS, call logs, precise location, or biometrics.

13 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• The "Last Updated" date at the top of the policy will be revised.
• For material changes we will notify you through an in-app banner, notification, or email.
• Your continued use of the App after any update constitutes your acceptance of the revised policy.

We encourage you to review this page periodically. The most current version is always available inside the App and at ffenterprise.in/privacy.html.

14 Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out:

We are committed to resolving privacy-related concerns promptly. If you are not satisfied with our response, you may lodge a complaint with the relevant data-protection authority in India.