SWYTCHO App Privacy Policy

Swytcho Energy Private Limited

Effective Date and Last Updated: 12 November 2026

Introduction

This Privacy Policy describes how Swytcho Energy Private Limited and its affiliates (collectively “Swytcho”, “Company”, “we”, “us”, “our”), CIN U62099KA2026PTC222358, GSTIN 29ABUCS0392R1Z4, with its registered office at Innov8 Prestige Tech Platina, 11th Floor, No.32/2, 34/1, Varthur, Bangalore South, Bangalore – 560087, Karnataka, India, collect, use, share, protect or otherwise process your information and personal data through the Swytcho mobile application and the website https://www.swytcho.com (together, the “Platform”).

This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), as applicable.

You may be able to browse certain sections of the Platform without registering with us. We do not offer any product or service under this Platform outside India. Your personal data will primarily be stored and processed in India, except data controlled by third-party providers with worldwide data centres that are not under our control.

By visiting the Platform, providing your information or availing any product or service offered on the Platform, you expressly agree to be bound by this Privacy Policy, the Terms and Conditions and the applicable service terms, and agree to be governed by the laws of India, including laws on data protection and privacy. If you do not agree, please do not use or access the Platform.

Definitions

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

“Sensitive Personal Data” means categories of data defined by applicable law, such as financial information and passwords.

“Payment Partner” means PhonePe Payment Gateway (PhonePe Private Limited) and its banking and payment partners.

“Bill Payment Partner” means Eko (and its BBPS-related operating units and partners) and the Bharat Bill Payment System (“BBPS”) network, used to fetch and pay utility bills.

“Services” means the features offered through the Platform: utility bill payments, energy monitoring and insights, tariff information, weather-based forecasting, energy planning tools, renewable-energy-related software support, reminders, and subscriptions.

Information We Collect

3.1 Information you provide

We collect your personal data when you use the Platform or Services, or otherwise interact with us during our relationship. This includes information provided at sign-up or registration or while using the Platform:

Name, mobile number, email address and profile details.
Date of birth, address and any information shared as proof of identity or address, where required for a particular service or by law.
Login credentials and OTPs used for verification.
Utility details: electricity distribution company (biller), consumer or account number, service address, city, PIN code, connection type and billing details.
Energy-related inputs: appliance details, usage preferences, renewable installation details (such as rooftop solar capacity) and goals that you choose to enter.
Electricity bill images or PDFs that you scan or upload, and the details read from them (such as consumer number, units consumed, tariff and amounts).
Messages you send to the in-app AI assistant.
Household, society and referral details you choose to share, such as invites you send and groups you join.
Support communications, feedback and complaint details.
Certain sensitive personal data, such as payment instrument information, only with your consent and in accordance with applicable law, and processed through our Payment Partners.

You always have the option not to provide information, by choosing not to use a particular service or feature on the Platform.

3.2 Information collected automatically

Device information: device model, operating system, app version, language and time zone.
Log and usage data: IP address, screens viewed, features used, timestamps, crash reports and diagnostic data.

We may track your behaviour, preferences and other information you choose to provide on the Platform using industry-standard technologies for the app (such as session and crash-reporting tools). This information is compiled and analysed on an aggregated basis.

3.3 Bill information

Bill data fetched through BBPS and our Bill Payment Partner for the consumer number you provide: customer name as registered with the biller, bill amount, due date, bill number and payment history.

3.4 Payment and transaction information

We collect information related to your transactions on the Platform and on third-party business partner platforms: order ID, amount, date and time, payment status, payment method type (UPI, card, net banking or wallet), and the gateway transaction reference or UTR.
We do NOT collect, see or store your full card number, CVV, expiry date, UPI PIN, net-banking credentials or payment OTPs. These are entered directly on the secure PhonePe interface.
When a third-party business partner collects your personal data directly from you, you are governed by their privacy policies. We are not responsible for the privacy practices or content of the privacy policies of third-party business partners, and we request you to read their policies before disclosing any information.

3.5 What we do not collect

The app asks for camera access only when you choose to scan a bill with your camera; you can upload a saved image or PDF instead. The Platform does not request access to your precise location, Bluetooth or Wi-Fi. Weather-based forecasts use the city or PIN code of your connection.
The Platform does not use advertising trackers.

3.6 Fraud warning

If you receive an email, SMS or call from anyone claiming to be Swytcho and asking for your debit/credit card number or PIN, UPI PIN, net-banking or mobile-banking password, or payment OTP, never provide such information. Swytcho will never ask for it. If you have already revealed such information, report it immediately to your bank and to the appropriate law enforcement agency (for example, the National Cyber Crime Reporting Portal, cybercrime.gov.in, or helpline 1930).

Purposes of Processing

Creating and managing your account and verifying you through OTP.
Providing the Services you request, including energy monitoring, forecasting and planning tools.
Fetching bills and facilitating payments that you initiate.
Sending transaction confirmations, receipts, reminders, alerts and service messages.
Managing subscriptions and billing.
Assisting business partners in handling and fulfilling your transactions.
Enhancing and customising your experience.
Customer support, troubleshooting, grievance redressal and dispute resolution.
Detecting and protecting against error, fraud and other criminal activity, and enforcing our terms and conditions.
Analytics, crash diagnosis, marketing research, analysis and surveys, using aggregated or de-identified data where possible.
Informing you about offers, products, services and updates, where you have consented. To the extent we use your personal data to market to you, you can opt out at any time.
Compliance with legal, tax, accounting, regulatory and law-enforcement requirements.
Any other purpose described to you at the time of collection.

Your access to certain products or services may be affected if you do not grant the permissions or information we need.

Legal Basis and Consent

By visiting the Platform or providing your information, you consent to the collection, use, storage, disclosure and other processing of your information in accordance with this Policy. We process your data based on your consent, performance of the service you request, compliance with legal obligations, and other uses permitted by law.

If you disclose to us personal data relating to other people, you represent that you have the authority to do so and permit us to use that information in accordance with this Policy.

By providing your personal data over the Platform or any partner platform, you consent to us (including our affiliates, technology partners and business partners) contacting you through SMS, instant messaging apps, call and/or email for the purposes specified in this Policy. Promotional communications are sent only with your consent, and you may opt out at any time.

Withdrawal of consent: you may withdraw consent at any time by writing to the Grievance Officer at tech.admin@swytcho.com with the subject line “Withdrawal of consent for processing personal data”. We may verify such requests before acting on them. Withdrawal is not retrospective and will be in accordance with the Terms and Conditions, this Policy and applicable laws. If you withdraw consent, we reserve the right to restrict or deny the provision of services for which we consider such information necessary.

Sharing and Disclosure

We do not sell your personal data. We do not share your personal data with third parties for marketing without your prior consent. We may share data with:

Payment Partners (PhonePe and its banking partners) to process payments, refunds and reconciliations.
Bill Payment Partners (Eko and the BBPS network, including billers and Bharat BillPay operating units) to fetch bills and complete bill payments.
Service providers acting on our behalf, including cloud hosting and database providers (Railway and Supabase), SMS/OTP provider (MSG91), crash reporting (Google Firebase Crashlytics), product analytics (PostHog), push notifications (Google Firebase Cloud Messaging), and an AI processing provider (Google Gemini API) that reads the bills you upload and answers questions you ask the in-app AI assistant, each bound by confidentiality and data-protection obligations.
Our weather data provider (Open-Meteo), which receives only the approximate coordinates of your connection’s city or PIN code area, not your name or contact details.
Other Swytcho users, only through features you choose to use: people you add to your household connection can see that connection’s data according to the permissions you set; members of a society you join can see society-level totals and the building leaderboard; and your first name and connection name may appear on society and referral leaderboards.
Other business partners and third-party service providers, where required for us to provide you access to our services, to comply with our legal obligations, to enforce our user agreement, or to prevent, detect, mitigate and investigate fraudulent or illegal activities related to our services.
Advisers, auditors and professional consultants, on a need-to-know basis.
Government agencies, courts and authorised law enforcement agencies if required by law, or in the good-faith belief that disclosure is reasonably necessary to respond to subpoenas, court orders or other legal process.
Law enforcement, third-party rights owners or others in the good-faith belief that disclosure is reasonably necessary to enforce our Terms and Conditions or this Policy, to respond to claims that content violates the rights of a third party, or to protect the rights, property or personal safety of our users or the general public.
A successor entity in a merger, acquisition, financing or sale of assets, subject to this Policy.
Any other party, with your consent.

Aggregated or anonymised data that does not identify you may be used for research and reporting.

Payments and Third-party Services

Payments are processed by PhonePe Payment Gateway under its own terms, its privacy policy and RBI regulations. Bill fetch and payment is carried out through BBPS via Eko. We have no control over the privacy practices of these third parties. Please review their policies.

Data Security

To protect your personal data from unauthorised access, disclosure, loss or misuse, we adopt reasonable security practices and procedures, including:

TLS/HTTPS encryption for data in transit and use of secure servers.
Access controls, authentication and role-based permissions.
Secure server-side storage of API keys and secrets.
Signature verification of payment callbacks.
Regular updates and monitoring.
No storage of card, UPI PIN or net-banking credentials.

However, the transmission of information over the internet is not completely secure for reasons beyond our control. By using the Platform, you accept the security implications of data transmission over the internet, and that certain inherent risks remain. You are responsible for protecting your login credentials, OTPs and device. If a personal data breach occurs, we will inform affected users, the Data Protection Board of India and CERT-In as required by law.

Data Hosting and International Transfers

Your data is stored on cloud infrastructure provided by Supabase and Railway, and is processed by the service providers listed above. These servers may be located in or outside India. Where data is transferred outside India, we do so in accordance with the DPDP Act and any restrictions notified by the Government of India, with appropriate contractual and technical safeguards.

Data Deletion and Retention

You may delete your account in the app under Profile & Account Settings > Delete Account. If you no longer have the app, you can request deletion at https://www.swytcho.com/delete-account. This will result in the loss of all information related to your account and your access to it. You may also write to us at the contact details below to assist with deletion requests.

We may refuse or delay deletion of an account in the event of any pending grievance, claim, pending transaction, dispute or legal obligation. We retain personal data for no longer than is required for the purpose for which it was collected or as required under applicable law. We retain transaction and financial records for the period required by tax, company and other laws (generally up to 8 years). Security and access logs are retained as required by law. We may retain data if we believe it is necessary to prevent fraud or future abuse, or for other legitimate purposes. We may continue to retain your data in anonymised form for analytical and research purposes. When data is no longer needed, we delete or anonymise it.

Your Rights

You may access, rectify and update your personal data directly through the functionalities provided on the Platform. Subject to applicable law, you may also:

Access a summary of the personal data we process.
Correct, complete or update your data.
Request erasure of data that is no longer needed.
Withdraw consent.
Nominate another person to exercise your rights in the event of death or incapacity.
Seek grievance redressal and, if unsatisfied, approach the Data Protection Board of India.

To exercise these rights, email tech.admin@swytcho.com. We may verify your identity first and will respond within 30 days.

Children

The Platform is intended for users aged 18 and above. We do not knowingly collect data from children. If we learn that a child’s data was collected without verifiable parental consent, we will delete it.

Cookies and Tracking

The Swytcho mobile app does not use cookies or advertising trackers. It uses essential technologies for login sessions and security, crash reporting (Google Firebase Crashlytics) and product analytics (PostHog). Our website may use essential cookies and analytics tools; you can control cookies through your browser settings.

App Permissions

The app requests only: internet access, notification permission (for alerts, reminders and receipts), and camera permission (only when you choose to scan a bill with your camera). It does not request location, Bluetooth or Wi-Fi permissions.

Marketing Communications

We send promotional messages only with your consent. You can opt out at any time through the app settings or by emailing tech.admin@swytcho.com. Transactional and service messages (OTPs, receipts, bill alerts) will still be sent.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it:

Name of the Office: Swytcho Energy Private Limited

Name: Anurag Srichandan

Designation: Executive, Grievance Officer

Name and Address of the Company: Swytcho Energy Private Limited, Innov8 Prestige Tech Platina, 11th Floor, No.32/2, 34/1, Varthur, Bangalore South, Bangalore – 560087, Karnataka, India

Working Hours: Monday to Saturday, 10:00 AM to 10:00 PM IST

We acknowledge complaints within 48 hours and resolve them within 30 days.

Changes to This Policy

Please check this Policy periodically for changes. We may update it to reflect changes in our information practices. The “Last Updated” date shows the latest version. We may alert or notify you about significant changes in the manner required under applicable laws. Continued use after changes means you accept the revised Policy.