Privacy Policy

This policy explains what personal data ReCa collects, why, how long we keep it, and what control you have over it. It applies to reca-app.com and the ReCa app.

1. What we collect

Account information

• Your name and phone number, provided at registration.
• A password, which is stored only as a cryptographic hash — we never store or can read your actual password.
• An optional profile photo.
• Your role on the platform (renter, vendor or admin) and vendor approval status.

Vendor information

• Bank account details (bank name, account title, account number) used to receive payouts.
• Vehicle listings: photos, specifications, pricing, availability and the pickup location including its coordinates.

Booking information

• Identity and eligibility documents you upload for a booking, which typically include images of a CNIC and driving licence.
• Bank transfer receipts or screenshots uploaded as proof of payment.
• Booking dates, amounts, status and the trip rating you leave afterwards.

Messages

Messages exchanged between renters and vendors through ReCa chat are stored so both parties can refer back to them. Contact details detected in messages may be automatically masked to keep negotiation on the platform where it can be evidenced.

Technical data

Standard server logs (IP address, browser type, pages requested, timestamps) and, if analytics are enabled, aggregate usage statistics.

2. Why we use it

• To operate your account and authenticate you.
• To show listings, calculate availability and process bookings.
• To let a vendor verify a renter before handing over a vehicle, and to let a renter evaluate a vendor.
• To send booking notifications, including via WhatsApp where you have provided a number.
• To investigate fraud, safety reports and disputes.
• To meet legal obligations.

3. Who can see your data

• The other party to a booking. When you book, the vendor sees the documents you uploaded and your contact details. When you list a car, renters see your name, photo, rating and the car’s location.
• Anonymous visitors. Public listing pages show the car, its city and an approximate location. The exact street address and precise coordinates are shown only to signed-in users.
• ReCa administrators, for approval, support and dispute resolution.
• Service providers that host or transmit data on our behalf — Amazon Web Services (hosting and file storage), MongoDB (database) and Meta’s WhatsApp Business API (notifications).

We do not sell your personal data, and we do not share it for third-party advertising.

4. Where data is stored

ReCa runs on Amazon Web Services. Application data and uploaded files are stored on AWS infrastructure, which may be located outside Pakistan. Files are stored in Amazon S3 and served over HTTPS.

5. How long we keep it

• Account data: while your account is open, and for a reasonable period afterwards.
• Booking records including documents and payment receipts: retained after a trip so that disputes can be resolved and for as long as any legal or tax obligation requires.
• Messages: retained for the life of the related booking record.

6. Security

Passwords are hashed with bcrypt. Sessions use signed tokens. Traffic is encrypted in transit over HTTPS. Access to administrative tools is restricted. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you suspect your account has been accessed by someone else.

7. Your choices

• You can view and update your profile and bank details in the app at any time.
• You can remove a listing, which withdraws it from search.
• You can request a copy of your data, or ask us to delete your account, by emailing info@reca-app.com. Some records tied to completed bookings may be retained where we have a legal reason to keep them.

8. Children

ReCa is not intended for anyone under 18 and we do not knowingly collect data from children.

9. Changes

We will update this policy as the service changes and will post the revised version here with a new date at the top.

10. Contact

Privacy questions or requests: info@reca-app.com. See also our Terms of Service.