This policy explains what Collectt collects, why, who we share it with, and what control you have. It covers the Collectt mobile app, collectt.in, and our merchant portal.
Collectt is operated by Cre8 Technologies, India. Contact us any time at support@collectt.in.
| Data | Why |
|---|---|
| Name | Identifying your account and showing you to shops when you redeem a voucher |
| Mobile number | Signing in, one-time passcodes, account recovery |
| Email address | Contest results, receipts, account notices |
| Password | Stored only as a cryptographic hash — we cannot read it |
| Date of birth | Optional; confirming eligibility where a contest has an age requirement |
| Profile photo | Optional; shown on your account |
| Identity document | Only if you apply to become a verified shop or post paid tasks |
| Shop details | Merchants only: shop name, address, category, logo |
When you claim or redeem a voucher, the shop running that contest sees your name and mobile number alongside that voucher, so they can confirm it's you and hand over a prize if you win. They also see how many times you've redeemed with them. They do not see your email, wallet balance, documents, location, or your activity with any other shop.
| Provider | Purpose | What they receive |
|---|---|---|
| Google Firebase | Sign-in and push notifications | Account identifier, device token |
| Google AdMob | Non-personalised advertising in the app | Coarse device and app data only — no advertising identifier, no tracking |
| Razorpay | Payments | Payment details, handled directly by them — we never store card numbers |
| Twilio / BhashSMS | Sending one-time passcodes | Your mobile number |
After a contest is drawn we publish a results page showing entrants with partially masked details — first name and last initial, and a partial mobile number (e.g. "Priya S. · 94476···776"). This lets entrants verify the draw was fair. Your full name, full number and email are never published.
We may disclose information where the law requires it, or to investigate fraud or protect someone's safety.
Collectt shows ads through Google AdMob. We do not track you across other companies' apps or websites. Collectt does not ask for tracking permission and does not use your device's advertising identifier, so the ads you see are not personalised from your activity elsewhere. We also never share your Collectt activity with advertisers or data brokers.
Traffic is encrypted in transit with HTTPS. Passwords are hashed with bcrypt and are not recoverable by us or anyone else. Access to production data is restricted. No system is perfectly secure, but if a breach ever affects your data we will tell you.
Collectt is not for anyone under 18. We don't knowingly collect data from children. If you believe a child has given us information, email support@collectt.in and we'll delete it.
Our servers are in India. Some service providers listed above process data elsewhere, under their own safeguards.
If we make a significant change we'll notify you in the app or by email before it takes effect. The date below always shows the current version.
Questions, requests, or a complaint about how we handle your data:
support@collectt.in
Cre8 Technologies, India