What we collect
- Your account and profile: your handle, display name, bio, optional location (city / country), avatar, the photos and links you add, your email, and your phone number if you give one. Your profile shows what you choose to show; your email and phone number are never shown.
- What we generate: your trust profile state, vouches, reviews, any order history from before 25 October 2026, security events, and a small amount of session metadata (device, sign-in time) to keep your account safe.
- Delivery records: when we send you a code or an email, we record that it was sent or failed, and the address or number in masked form (for example +91•••••0123) with a one-way code of it. Support uses this when someone says a code never came.
The checks you choose to do
Every check is optional. Each one below says what we take, why, who sees it and how long we keep it. Your profile only ever shows the result, never the document or recording behind it.
- Real person and ID: a short video of your face, and photos of your government ID if you do the ID check. A member of our review team looks at them to confirm you are a real person and the ID is yours. You agree to this on screen before the camera opens.
- Income:a recent payslip or bank statement. A reviewer checks it is recent and in the name on your checked ID. Your profile says “Income checked”; it never shows the amount, the employer or the document.
- Degree:a degree certificate. A reviewer checks it is in the name on your checked ID. Your profile shows “Degree checked” and the level of the degree, never the certificate.
- Work email: a one-time code sent to your work address. We keep the address privately to stop one inbox proving two accounts; your profile shows where you work, never the address. The check lapses after a year unless you renew it.
- Phone and email: a one-time code. Phone codes are sent by Twilio, by text or WhatsApp.
- Social accounts:your username on the platform. To prove an Instagram or X account is yours, you send a short code from it to Realr’s own account on that platform. If a code cannot be matched automatically, a member of our team looks for it in Realr’s inbox. We keep only a one-way code of the code we issued and the fact that it matched. We never sign in to your account and never read your messages. For Telegram, opening our link in Telegram tells us your Telegram account number and username, which we keep while it is linked.
- Couples:when two people link as a couple, they record a short video and take one photo together, so both faces are in it. Both partners agree on screen first. A reviewer compares them with each partner’s own real-person check. They are deleted when the couple ends or either account is deleted.
- Photos with a face hidden: if you post a photo with your face covered, blurred or cropped out, we also keep the untouched original or a photo with your face showing. Only our review team sees it, to confirm the photo is really you. It is never shown on your profile and is deleted when you delete the photo.
Other people who interact with you
- Buyers who vouch: someone vouching for a seller confirms their phone number with a code. We do not keep the number itself with the vouch, only a keyed one-way code of it, so the same number cannot vouch twice. The seller sees the answer and the optional first name and line the buyer chose to add, never the number.
- Safety reports and lookups: when you report a phone number, payment ID or account in Realr Safety, we keep what you reported, the category, the month it happened and any screenshots you add, for our team to review. When you look one up, we keep only a keyed one-way code of it, to limit lookups and spot misuse.
- Reports about a profile: what you wrote and who it was about. We do not tell the reported person who reported them.
How you use Realr
- Profile views: we count how many times your profile was opened each day so we can tell you. It is a number only. Who looked is never recorded.
- Analytics: we use Google Analytics to understand aggregate traffic and a few steps people take: signing up, claiming a handle, sending a check, opening a profile from a QR scan or a link, and sharing. Events never carry your email, phone number or what you looked up. It runs in consent mode: no analytics cookies until you accept on the cookie banner, and IP addresses are anonymized. We use these counts to see which of our own ads lead to sign-ups. Advertising cookies and ad personalisation stay switched off, so it is never used to show you ads elsewhere. Decline on the banner and the analytics cookie is never set.
- How you found us: when you create an account we record one line about where you arrived from — the website that linked you (the site nameonly, never the full address or what you searched), any campaign tag in the link, and the Realr page you landed on. It tells us which of our own efforts are working. It is recorded once, at signup, and never updated afterwards. Until your account exists it sits in your own browser’s storage. If a friend’s invite link brought you, their handle is held in a cookie for thirty minutes so the invite counts.
- Where you are: we work out the countrya request comes from by looking your IP address up in a list kept on our own servers. The address is not stored and is not sent to anyone. The country sets which version of the site and which currency you see, and it is kept on your account as your last sign-in country so we can tell you if it does not match the country on your ID. Nobody else sees it unless you switch on “Show my region”. Separately, when you make a live check you can choose to add where you are: your device tells us its location, we keep the nearest city and discard the exact position, and the city is shown with that check for the fifteen minutes it lasts.
- Screenshot shortcuts: if you press a screenshot shortcut on a computer while viewing the app or someone’s profile, we record that it happened: the page, the time, and your account if you are signed in, or a one-way code made from your connection if you are not. We use it only to spot misuse, such as one person screenshotting many profiles. Phones do not tell websites about screenshots, so nothing is recorded there.
- Abuse limits: to stop scripts sending texts and emails or flooding our reviewers, we count recent attempts by account, number, email and connection for a short time (minutes to a day). These counters live in our servers' memory and expire on their own. Sign-in and code forms may run a Cloudflare Turnstile check to tell people from bots.
- What we don’t do: no ad pixels, no ad-retargeting trackers, no cross-site fingerprinting. We do not sell your data or share it for cross-context behavioural advertising — ever.
What stays private
Verification documents and recordings are encrypted at rest and never shown on your public profile — only the result is visible. Phone numbers, emails, and government IDs are never visible to anyone visiting your Realr. Even when you set a field to “public”, sensitive details stay claim-only (“Phone verified”, not the digits).
What you control
Every part of your profile can be shown to anyone or only to you. With Realr+ you can also show a part only after a QR scan, or only to people you have dealt with. Set them in /me/privacy. You can also:
- Pause your profile (hide it from public view, keep your data).
- Export everything as JSON, one click.
- Remove a photo, a linked Telegram or a couple link.
- Revoke active sessions and sign out across all devices.
- Delete your account — final, with cooling-off on your handle.
How long we keep things
Your profile, checks and photos are kept for as long as your account exists, unless you remove them sooner. The video, ID photos, payslips, bank statements, certificates and private photos you send for a check are kept for as long as your account exists, and removed when you delete your account. The couple video and photo go when the couple ends, and the private original of a photo goes when you delete that photo.
We also keep a copy with each review decision; we have not set a shorter period for those copies yet, so today they are also kept until you delete your account. If we set one, this page will say how long.
If the law requires us to keep an account’s data, for example because of a court order, the account cannot be deleted until that requirement ends.
What stays after you delete
Deleting removes your profile, your documents and recordings, your photos and your history. For twelve months we keep a scrambled fingerprint of the email, phone number, legal name and ID file the account used, with a note of how the account stood when it closed — for example, whether it was suspended or had open reports.
We also keep our own records: payments you made, that a check was approved or refused, reports you sent about someone else, and anything our team did on the account. These hold no documents, photos or recordings, and reports are kept without your name or contact details. A purchase you made stays in the seller’s history, and a review or vouch you gave stays on their profile, without your name.
A fingerprint cannot be turned back into your email, number, name or document, and nobody at Realr can read it as one. It can only answer one question: has this been here before? We keep it so that an account cannot shed a suspension or a report by being deleted and opened again. If the same details return, a reviewer is shown that note; if the earlier account was suspended, verification is refused. Your handle is held for thirty days and then released.
Where your data lives
Realr runs on managed Postgres hosted in a single region. Since 10 October 2026, new verification evidence (videos, ID photos, documents and private photos) goes to a private, encrypted storage bucket on Cloudflare R2 instead of the database. Nobody can open a file there without a link our server makes for a reviewer, and that link stops working after five minutes. Evidence sent before that date is still in the database until we finish moving it to the bucket.
We share the minimum data needed with a small, named set of processors:
- Railway — compute and database hosting.
- Cloudflare — the private storage bucket for verification evidence, and the Turnstile bot check on sign-in and code forms.
- Cloudinary — hosting the photos you choose to show on your public profile.
- Resend — email, including codes and notices.
- Twilio — phone verification codes by text or WhatsApp. Twilio receives the number the code goes to.
- Razorpay — Realr-to-you plan payments. They see the card / UPI details; we don’t.
- Google and Apple— optional sign-in. Whichever you choose tells us the email address on that account and your name and picture where it has them; if you use Apple’s Hide My Email we only ever see the relay address it gives us. Google also runs the analytics described above.
Verification evidence is reviewed in-house by our own team, not sent to a third-party verifier. We do not transfer your data outside of these providers, and we do not sell or rent data to third parties under any circumstance. The same list, in plain terms, is in our Terms.
The country lookup uses the IP to Country Lite database by DB-IP, and city names come from GeoNames, both used under CC BY 4.0. Both are files on our servers; neither company receives anything about you.
Cookies & sessions
We set a strictly-necessary session cookie when you sign in, plus the short-lived cookies the sign-in itself needs. A few small first-party cookies make the site work: which country version of the site you chose, your time zone so dates read right, and for thirty minutes the invite or sign-up path you came in by. If you accept analytics on the cookie banner, Google Analytics sets its own measurement cookie to count you once across pages; decline and it’s never set. No advertising cookies, no ad-retargeting trackers, either way.
Your rights
Wherever you live, you can ask us for a copy of your data, correction of inaccurate data, or deletion, and you can withdraw an agreement you gave for a check. The product gives you self-service for a copy, corrections and deletion; to withdraw an agreement without deleting your account, write to us and we will remove that check’s evidence. If something’s not working, email support or write to the Grievance Officer below.
Children
Realr is for adults verifying themselves to meet other adults safely. You must be 18+ to create an account.
Changes
If we change anything material, we’ll surface it on this page and notify signed-in users. We don’t bury changes in a footer link — we’ll tell you.
Who we are
Realr is operated by TechnoFledge Private Limited, a Private Limited registered in India — the data controller for the information described here.
Grievance Officer
[Grievance Officer name to be added], TechnoFledge Private Limited. privacy@realr.me. Write with your account handle and what went wrong. We acknowledge a complaint within 24 hours and resolve it within 15 days.
Contact
Questions, concerns, formal data requests: privacy@realr.me.