What we collect and why
- Mobile number: to sign you in with one-time codes and contact you about your account.
- Name and card photo: shown on your pass and to the cashier when you redeem, so a pass can't be shared. Photos are stored privately and are only shown through links that expire within minutes.
- Device key: a security key created on your phone so only your phone can make your QR codes. The private part never leaves your phone.
- Redemptions: which offers you used, where and when, to apply limits, show your savings and prevent fraud.
- Location: only when you tap “near me” or a similar button, to show nearby offers. We don't track your location in the background.
- Work email: only if you join through an employer, to confirm you work there.
- Payments: handled by Razorpay, Apple or Google. We receive the payment status, never your card or UPI details.
- Merchants: owner and staff names, mobile numbers, emails, GSTIN and branch details, to run the listing.
We do not collect Aadhaar, PAN or your date of birth, and we do not sell personal data.
Who sees it
- Merchants see your first name, member number and photo when they check your pass.
- Employers that pay for memberships see totals only, never which offers a person used.
- Service providers who host and run PhorixPass for us (cloud hosting in India, SMS, email and payment providers) under contract.
- Authorities, when the law requires it.
How long we keep it
We keep your account data while you are a member. After you close your account we delete or anonymise it within a reasonable period, except records we must keep by law (for example tax and payment records). Old card photos are deleted once a newer photo is approved, and one-time codes expire within minutes.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent (which may mean we can no longer provide the membership), and nominate someone to act for you. You can also complain to the Data Protection Board of India.
Security
Data is encrypted in transit, photos are kept in private storage, sessions can be signed out, and staff access is limited and logged.
Grievance officer
For privacy questions, requests or complaints, write to our grievance officer at support@phorixpass.com. We reply within 2 working days and resolve requests within 30 days.