Go to home

Privacy Policy

Effective Date: March 1, 2026 Last Updated: February 23, 2026

Applicable Platforms: Redrob Connect, Redrob Signal, and all related mobile/web applications

  1. Introduction

Redrob Inc. and its affiliates ("Redrob," "Company," "we," "us," or "our") respect the privacy of individuals who use our platforms, including Redrob Connect and Redrob Signal (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use the Platform.


By accessing or using the Platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.


This Privacy Policy is published in compliance with the Information Technology Act, 2000 ("IT Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), as currently in force. We will update this Privacy Policy as required to comply with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 ("DPDPA"), as and when its provisions become enforceable.

  1. Definitions

"Personal Information" means any information that relates to a natural person, which, either directly or indirectly, in combination with other information available, is capable of identifying such person. This includes but is not limited to name, email address, phone number, and device identifiers.

"Sensitive Personal Data or Information" ("SPDI") means personal information as defined under Rule 3 of the SPDI Rules, including passwords, financial information (such as bank account, credit/debit card details), biometric data, and any other information as specified under applicable law.
"User" or "you" means any individual who accesses or uses the Platform.

"Data Fiduciary" refers to Redrob in its capacity as the entity that determines the purpose and means of processing your personal data.
"Processing" means any operation performed on personal data, including collection, recording, storage, use, sharing, erasure, or destruction.

"Personal Information" means any information that relates to a natural person, which, either directly or indirectly, in combination with other information available, is capable of identifying such person. This includes but is not limited to name, email address, phone number, and device identifiers.

"Sensitive Personal Data or Information" ("SPDI") means personal information as defined under Rule 3 of the SPDI Rules, including passwords, financial information (such as bank account, credit/debit card details), biometric data, and any other information as specified under applicable law.
"User" or "you" means any individual who accesses or uses the Platform.

"Data Fiduciary" refers to Redrob in its capacity as the entity that determines the purpose and means of processing your personal data.
"Processing" means any operation performed on personal data, including collection, recording, storage, use, sharing, erasure, or destruction.

  1. Information We Collect

3.1 Information You Provide Directly

  • Account registration data: name, email address, mobile phone number, date of birth, and gender.

  • Profile information: username, profile picture, and language preference.

  • Identity verification data (optional, provided with separate consent): PAN number, Aadhaar-based verification data (last 4 digits only, via offline verification), and Account Aggregator-linked financial data.

  • Communication data: messages you send to our support team, feedback, and survey responses.

  • Referral data: information about friends you invite to the Platform (limited to phone number or referral code)

3.2 Information Collected Automatically

  • Device information: device type, operating system, unique device identifiers, mobile network information, and IP address.

  • Usage data: pages viewed, features used, time spent on the Platform, crash reports, and performance data.

  • Behavioral data: in-app actions, prediction patterns, card collection activity, game event participation, and engagement metrics on Redrob Signal.

  • Location data: approximate location derived from IP address (we do not collect precise GPS location).

  • Log data: access times, referring URLs, and browser type

3.3 Information from Third Parties

  • Social login providers (e.g., Google): name, email, and profile picture, if you choose to sign in via a social account.

  • Identity verification services: verification status (verified/not verified), as applicable.

  • Account Aggregator framework (with your separate explicit consent): financial data from participating financial institutions, including banking, investment, insurance, and tax data, as selected by you.

  1. Purpose of Collection and Use

We collect and use your information for the following purposes:

Purpose

Data Used

Account creation & management

Name, email, phone, DOB

Platform operation & service delivery

Account data, usage data, device info

Redrob Signal game features (predictions, card collection,
leaderboards)

Account data, behavioral data, game activity

Identity verification (KYC) — optional

PAN, Aadhaar offline verification data (with separate consent)

Alternative credit scoring & financial
profiling — future

Behavioral data, AA financial data (with separate consent)

Communication & customer support

Communication data, account data

Analytics, product improvement &
personalization

Usage data, behavioral data, device info

Fraud detection & platform integrity

Device info, usage patterns, IP address

Legal compliance & dispute
resolution

All data as required by applicable law

Marketing & promotional
communications (with your consent)

Name, email, phone, usage data

Behavioral Data & Credit Scoring: Redrob Signal collects behavioral data (prediction patterns, risk preferences, engagement metrics) as a core function of the Platform. This data may, with your separate explicit consent, be used to develop alternative credit scores or financial profiles. Such use is governed by the separate consent documents (PAN Data Consent, Aadhaar Data Consent, Account Aggregator Consent) and will not occur without your affirmative opt-in.

  1. Consent

5.1 By using the Platform, you consent to the collection and use of your Personal Information as described in this Privacy Policy for the purposes of operating the Platform and providing services to you.
5.2 For the collection of Sensitive Personal Data or Information (including PAN, Aadhaar-based data, and financial data via Account Aggregator), we obtain your separate, explicit, written consent through dedicated consent forms before any such data is collected.
5.3 You may withdraw your consent at any time by contacting us at the address provided in Section 13. Upon withdrawal, we will cease processing your data for the relevant purpose, subject to any legal retention obligations. Withdrawal of consent may result in our inability to provide certain services or features.
5.4 Where we send you marketing or promotional communications, we will do so only with your prior consent, and you may opt out at any time via the unsubscribe mechanism provided in each communication.

  1. Disclosure and Sharing of Information

We may share your information with the following categories of recipients, only to the extent necessary for the stated purposes:

  • Service Providers: Third-party vendors who assist us in operating the Platform, including cloud hosting, analytics, payment processing, identity verification, and customer support. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

  • Redrob Group Companies: Our parent company (Redrob Inc., Delaware), subsidiaries, and affiliates, for internal business purposes including analytics, product development, and administrative operations.

  • Financial Institutions (with separate consent): Banks, NBFCs, insurance companies, and other regulated financial institutions, if you have provided separate explicit consent for the sharing of your behavioral data, credit profile, or financial information for the purpose of credit assessment or financial product offerings.

  • Identity Verification Providers: Third-party verification services for PAN validation and Aadhaar offline verification, as applicable.

  • Government and Regulatory Authorities: Where required by applicable law, regulation, legal process, or governmental request, including tax authorities, law enforcement agencies, courts, and regulatory bodies.

  • Legal Purposes: To enforce our Terms of Service, protect our rights, property, or safety, or the rights, property, or safety of our users or the public.

  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such transfer.

We do not sell your Personal Information to third parties for their direct marketing purposes.

  1. Data Storage and Retention

7.1 Your data is stored on secure servers located in India and/or internationally through our cloud service providers. Where data is transferred outside India, we ensure that adequate safeguards are in place as required under applicable law.
7.2 We retain your Personal Information for as long as your account is active or as needed to provide you services. Upon account deletion or withdrawal of consent, we will delete or anonymize your data within a reasonable period, except to the extent that retention is required to comply with legal obligations (such as tax or financial record-keeping requirements), resolve disputes, or enforce our agreements.
7.3 Specific retention periods:

  • Account data: duration of active account + 3 years after deletion (for legal compliance).

  • Behavioral/game data: duration of active account + 1 year (for analytics, then anonymized).

  • KYC/identity verification data: as required by applicable financial regulations.

  • Financial data (via Account Aggregator): as specified in the Account Aggregator consent, typically 12 months or until consent withdrawal.

  • Communication/support data: 2 years from last interaction

  1. Data Security

8.1 We implement reasonable security practices and procedures, as required under the SPDI Rules, to protect your Personal Information and Sensitive Personal Data or Information from unauthorized access, disclosure, alteration, or destruction.

These include:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256 or equivalent).

  • Access controls limiting employee and contractor access to personal data on a need-to-know basis.

  • Regular security assessments and vulnerability testing.

  • Secure storage of SPDI in encrypted databases with restricted access.

  • Aadhaar-related data stored in compliance with UIDAI guidelines (last 4 digits only, no full Aadhaar number stored).

8.2 While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8.3 In the event of a data breach involving your Personal Information, we will notify the Indian Computer Emergency Response Team (CERT-In) and affected individuals as required under applicable law.

  1. Your Rights

Under applicable law, you have the following rights with respect to your Personal Information:

  • Access: You may request a summary of the Personal Information we hold about you.

  • Correction: You may request correction or amendment of inaccurate or incomplete Personal Information.

  • Withdrawal of Consent: You may withdraw your consent for the processing of your data at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

  • Deletion: You may request deletion of your Personal Information, subject to our legal retention obligations.

  • Opt-out of Marketing: You may opt out of promotional communications at any time.

  • Data Portability: Where technically feasible, you may request your data in a commonly used, machine-readable format.

To exercise any of these rights, please contact our Grievance Officer (see Section 13). We will respond to your request within a reasonable timeframe, and in any event within 30 days.

10. Children's Privacy

10.1 The Platform is intended for users aged 18 years and above. We do not knowingly collect Personal Information from individuals under 18 years of age.
10.2 If we become aware that we have collected Personal Information from a person under 18, we will take steps to delete such information promptly.
10.3 If you are a parent or guardian and believe that your child has provided Personal Information to us, please contact us at the address in Section 13.

11. Cookies and Tracking Technologies

11.1 We may use cookies, web beacons, and similar tracking technologies to collect usage data and improve the Platform experience. These technologies help us understand user behavior, remember preferences, and deliver relevant content.
11.2 Types of cookies we may use:

  • Essential Cookies: Required for the Platform to function. Cannot be disabled.

  • Analytics Cookies: Help us understand how users interact with the Platform (e.g., pages visited, features used).

  • Preference Cookies: Remember your settings and preferences (e.g., language).

11.3 You can manage cookie preferences through your browser or device settings. Disabling certain
cookies may affect Platform functionality.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing any personal information.

13. Grievance Officer

In accordance with the IT Act and SPDI Rules, we have appointed a Grievance Officer to address any concerns or complaints regarding the processing of your Personal Information.

Name: Kartikey Handa

Designation: Grievance Officer
Email: privacy@redrob.io
Address:

  • Noida: i-Thum Tower - A, Office No–606, Sector 62, Noida, Uttar Pradesh 201309

  • Pune: 10th floor, Omicron Commerz, opp. Carnival Restaurant, off North Main Road, Koregaon Park Annexe, Mundhwa, Pune, Maharashtra 411036

Response Time: We will acknowledge your complaint within 48 hours and resolve it within 30 days from the date of receipt.

If you are not satisfied with the resolution, you may escalate your complaint to the relevant authority under applicable law.

14. Changes to This Privacy Policy

14.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any material changes will be communicated to you via in-app notification, email, or by posting the updated policy on the Platform with a revised "Last Updated" date.
14.2 Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the Platform and delete your account.
14.3 We will seek fresh consent where required by applicable law before processing your data in any manner materially different from what was described at the time your data was collected.

15. Governing Law and Dispute Resolution

15.1 This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to conflict of law principles.
15.2 Any disputes arising out of or in connection with this Privacy Policy shall be resolved in accordance with the dispute resolution mechanism set forth in the Redrob Terms of Service.

16. Regulatory Compliance Note

16.1 This Privacy Policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which are currently in force as of the Effective Date of this Policy.
16.2 The Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025 have been enacted and notified respectively, with full compliance obligations taking effect on May 13, 2027. We are committed to achieving compliance with the DPDPA and its Rules within the prescribed timelines. This Privacy Policy will be updated accordingly as those provisions become enforceable.
16.3 To the extent that any provision of this Privacy Policy is inconsistent with applicable law, the applicable law shall prevail.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices,
please contact us at:

Email: privacy@redrob.io
Mailing Address:

  • Noida: i-Thum Tower - A, Office No–606, Sector 62, Noida, Uttar Pradesh 201309

  • Pune: 10th floor, Omicron Commerz, opp. Carnival Restaurant, off North Main Road, Koregaon Park Annexe, Mundhwa, Pune, Maharashtra 411036

Signal

Signal

Copyright @Redrob 2026. All Rights Reserved.

Product

Home

Support

Terms

Privacy Policy

Terms of Service