This Privacy Policy explains how Phonepay Pro ("we", "us", the "App"), operated by
Phonepay.lk (Pvt) Ltd, Sri Lanka, collects, uses, and protects your information when you use our
mobile application and website at recharge.webtools.lk.
By using the App you agree to this policy.
1. Information We Collect
- Account information: your name, mobile number, email address, and password. Passwords are stored as a one-way hash and cannot be read by us or by staff.
- Transaction data: recharges, bill payments, wallet top-ups and transfers — including the recipient number or account, amount, operator, reference numbers, and status. This is the record of your business and we are required to keep it.
- Wallet information: your balance, ledger entries, commission earned, and bank-deposit references you submit when funding your wallet.
- Device information: a Firebase push-notification token, and the device model and app version, used to deliver notifications and to secure your account.
- Sign-in activity: the date, time, IP address, and device of each login, kept briefly for fraud prevention.
We do not collect your location, contacts, photos, files, calendar, call logs, or the
SMS messages on your phone. The App contains no advertising and no third-party analytics or tracking SDKs.
2. Device Permissions
The App requests only the permissions it needs, and each is used for one purpose:
- Camera — to scan QR codes for Scan & Pay. Images are processed on your device to read the code and are never uploaded or stored.
- Notifications — to alert you about transaction results, wallet funding, and payment requests. You can turn these off in your device settings.
- Biometric / fingerprint — to unlock the App. Matching happens entirely on your device through the Android system; we never receive your fingerprint or any biometric data.
- Internet and network state — to communicate with our servers.
3. How We Use Your Information
- To process the recharges, bill payments, wallet top-ups, and transfers you request.
- To operate your wallet, calculate commission, and maintain accurate transaction history.
- To send transaction confirmations and account notices by in-app message, push notification, SMS, or WhatsApp.
- To verify identity, detect and prevent fraud, and secure accounts.
- To provide customer support and to meet legal and accounting obligations.
We do not use your information for automated decisions that produce legal effects, and we do not use it
for advertising or profiling.
4. Sharing of Information
We do not sell your personal data or share it for advertising. We share information only
where it is necessary to deliver the service you asked for:
- Telecom operators, utilities, and billers — the recipient number or account and the amount, so the recharge or bill payment can be fulfilled.
- Recharge API partners — the minimum data required to complete your transaction.
- Your upline distributor and the platform administrator — your account details and transaction summaries, so they can fund your wallet, set your rates, and support you within the reseller network.
- Service providers — Google Firebase for push notifications, and SMS or WhatsApp gateways for messaging.
- Legal authorities — where required by law, or to investigate fraud or abuse.
5. Data Security
Passwords are hashed, all traffic between the App and our servers uses HTTPS/TLS, and wallet balances are
updated inside database transactions so a balance cannot be corrupted by a failed operation. Access is
restricted by role, and administrator sign-in requires a second factor. No system is completely secure,
but we take reasonable measures to protect your information.
6. Data Retention
We keep different data for different periods:
- Account and transaction records — for as long as your account is active, and afterwards for as long as accounting, tax, and anti-fraud obligations require.
- Sign-in activity logs — 5 days, then deleted automatically.
- In-app notifications and messaging logs — 7 days, then deleted automatically.
7. Your Rights and Account Deletion
- View and update your account information from the Profile screen in the App.
- Request a copy of the personal data we hold about you.
- Request deletion of your account and personal data at
https://recharge.webtools.lk/delete-account, or by contacting us. We will
confirm the request and delete your data, except records we are legally required to retain, such as
completed financial transactions.
- Turn off non-essential notifications at any time from your device settings.
If your wallet holds a balance, please withdraw or transfer it before requesting deletion.
8. Children's Privacy
The App is a financial service intended for users aged 18 and above. It is not directed at children, and
we do not knowingly collect information from anyone under 18. If you believe a child has provided us with
personal data, contact us and we will delete it.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in the App or on this
page, and the "last updated" date above will be revised.
10. Contact Us
For any privacy question or request, contact
support@recharge.webtools.lk.
We aim to respond within 7 working days.
Phonepay.lk (Pvt) Ltd · Sri Lanka · Phonepay Pro app