01Introduction
This Privacy Policy explains how FF Enterprise, the operator of the FF Recharge app and ffenterprise.in (“we”, “us”), processes your personal data. We act as the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and follow the Information Technology Act, 2000 and its rules.
By using the App you consent to the processing described here. You may withdraw consent at any time (see Your Rights); withdrawing consent may mean we can no longer provide some services.
02Information We Collect
Account information
- Mobile number — your account ID, verified by OTP.
- Name, email and profile photo — optional, added by you.
- MPIN — stored only as a one-way hash, never in plain text.
Wallet & transaction information
- Wallet top-ups, debits, refunds, cashback and referral records.
- Recharge details: mobile / DTH number, operator, amount, time and status.
- Payment order IDs and gateway reference IDs. We do not receive your card number, CVV, UPI PIN or bank password.
Service request information
When you use a paid document / verification service, we process the input you submit and the result returned:
- RC Verification / RC PDF: vehicle number and the vehicle / registration details or RC document.
- DL PDF: driving licence number, date of birth and the licence document.
- PAN Card Details: PAN and the details returned.
- Ration Card PDF: ration card number and the document link returned.
- Bank Account / Bank + UPI Finder: mobile number and the linked bank accounts / UPI IDs returned.
Successful results and generated documents are stored in your history so you can view and re-download them free of charge.
These services may return personal data of the person the record belongs to. You confirm that you search only your own records or records you are lawfully authorised to access with that person’s consent.
Support information
- Chat messages, and any images, files or voice notes you choose to attach.
Device & technical information
- Device model, Android version and app version (for compatibility, security and update checks).
- Firebase Cloud Messaging (FCM) token to deliver notifications.
- Error and diagnostic logs that never contain your MPIN or payment credentials.
03How We Use Your Information
- To provide services — recharges, wallet, documents, verifications, history and receipts.
- To keep you secure — OTP / MPIN verification, session expiry, fraud and abuse prevention.
- To support you — answer chats, resolve disputes and process refunds.
- To notify you — transaction alerts, refunds, support replies, app updates and (optionally) offers.
- To comply with law — tax, accounting, and lawful requests from authorities.
- To improve the App — fixing bugs and understanding usage in aggregate.
We do not use your data for third-party advertising and we do not make automated decisions that have legal effects on you.
04Login, Biometrics & Device Features
- Phone number hint: At login the App may show Google’s phone-number picker so you can choose your SIM number. Nothing is read without your selection.
- OTP auto-fill: The App may use Google’s SMS Retriever / User Consent API to fill the OTP. The App does not have permission to read your SMS inbox.
- Biometric unlock (optional): Fingerprint / face unlock is handled entirely by Android. Your biometric data never leaves your device and is never sent to us.
- Sessions: Login tokens are stored securely on your device and expire automatically (currently after 30 days).
05Device Permissions
| Permission | Why we ask |
|---|---|
| Internet & network state | Connect to our servers and show offline status. |
| Notifications | Transaction, refund and support-chat alerts. |
| Camera (optional) | Take a profile photo or a photo for a support chat. |
| Photos / media (optional) | Pick a profile photo or attachment, save receipts / QR codes. We never scan your gallery. |
| Microphone (optional) | Record a voice note in support chat, only while you press record. |
| Biometric (optional) | Unlock the App with fingerprint / face lock on your device. |
| Vibrate & run at startup | Notification feedback and restoring scheduled notifications after a reboot. |
The App does not access your contacts, SMS inbox, call logs or location.
06Who We Share Data With
We do not sell, rent or trade your personal data, and we do not share it with advertisers or data brokers.
We share only the minimum data needed with these partners (our “Data Processors”):
| Partner | Purpose | Data shared |
|---|---|---|
| Payment gateway partner (PCI-DSS compliant) | Wallet top-ups | Order ID, amount, mobile number |
| EZYTM (recharge API) | Mobile & DTH recharges | Number to recharge, operator, amount |
| PlanAPI | Plans, operator check, RC verification, bank / UPI finder | The mobile, DTH or vehicle number you submit |
| APIZONE / API Centre | RC PDF, DL PDF, PAN details, ration card PDF | The document number (and date of birth for DL) you submit |
| Google Firebase | Push notifications | FCM device token |
| Telegram Bot API | Internal alert to our support team | A “new message” alert only — no financial data |
| Hosting provider (India) | Secure server & database hosting | Data stored on our servers |
We may also disclose data when required by law, a court order or a lawful government request; to prevent fraud or protect users; or in a business transfer, in which case you will be notified.
07Data Security
- All traffic between the App and our servers is encrypted with HTTPS (TLS).
- MPINs are stored as one-way hashes; API keys stay on our servers and are never shipped in the App.
- Signed session tokens that expire automatically; repeated wrong MPINs trigger a temporary lockout.
- Prepared statements, server-side validation and access controls protect our database; access is limited to authorised staff.
No system is 100% secure. If you notice unusual activity on your account, contact support@ffenterprise.in immediately.
08Data Retention
| Data | How long we keep it |
|---|---|
| Account & profile data | While your account is active; deleted within 30 days of a verified deletion request |
| Wallet & transaction records | Up to 7 years, as required by tax and accounting laws |
| Lookup history & generated documents | Up to 24 months, or until you delete your account |
| Support chats & attachments | Up to 12 months |
| FCM token | Until it changes or your account is deleted |
| Diagnostic logs | Up to 24 months, in aggregated form |
09Your Rights
Under the DPDP Act, 2023 you have the right to:
- Access a summary of your personal data and how it is processed — most of it is visible in the App.
- Correct or update your data — edit your profile, or ask support.
- Erase your data — see Delete Account.
- Withdraw consent — as easily as you gave it; processing that already happened stays lawful.
- Grievance redressal — complain to our Grievance Officer, and then to the Data Protection Board of India.
- Nominate a person to exercise your rights in case of death or incapacity.
- Opt out of promotional notifications at any time from your device settings.
To exercise any right, email support@ffenterprise.in from your registered email or message us in the App. We respond within 30 days.
10Account & Data Deletion
You can ask us to delete your account at any time through in-app support chat or by email. Your profile, MPIN, tokens, lookup history, saved documents and chats are removed within 30 days of verification. Transaction records are kept only as long as the law requires.
Step-by-step instructions are on our Delete Account page.
11Children’s Privacy
The App is meant only for users aged 18 or older. We do not knowingly collect data from children. If you believe a child has given us personal data, contact support@ffenterprise.in and we will delete it.
12Cookies & Tracking
The App stores your session and preferences locally on your device. Our website uses only essential browser storage. We do not use advertising trackers, ad-network cookies or tracking pixels.
13Changes to This Policy
We may update this policy as our services or the law change. The “Last updated” date shows the current version, and material changes will be notified in the App. The latest version is always at ffenterprise.in/privacy.html.
14Grievance Officer
In accordance with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023, complaints about the App, its content, your account, or the processing of your personal data may be sent to our Grievance Officer:
Please write with the subject line “Grievance” and include your registered mobile number, the transaction ID (if any), and a short description of the issue.
If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act, 2023.
15Contact Us
For any privacy question or request: