Last updated: 6 June 2026
Recyco Pty Ltd (ABN 95 689 432 117) ("Recyco", "we", "us", "our") operates the Recyco mobile application available on the Apple App Store and Google Play, and the Recyco web platform at software.recyco.com.au (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the rights you have over it.
By creating an account or using the Service you agree to the practices described in this policy. If you do not agree, please do not use the Service.
Recyco is a B2B SaaS platform sold to waste-collection businesses. The Service has three types of user accounts:
When your account is created we store: your full name, email address, phone number, role (driver, admin, dispatcher, customer, etc.), and the organisation you belong to. Passwords are hashed using industry-standard cryptography (bcrypt) and we never see them in plain text.
The Recyco app collects precise GPS location data, including when the app is running in the background. This is used to:
Location tracking is only active while you are logged in to the driver app and have an active route assigned. You can revoke location permissions at any time through your device's Settings → Privacy → Location Services. Doing so will disable arrival verification but will not prevent you from using other parts of the app.
When you complete a pickup we store: the customer and site visited, weight or volume collected, number of bins, photos of the collection (taken with the camera), optional notes, and timestamps. This data forms the operational record of the collection.
The app requests permission to access the camera and/or photo library so drivers can attach photos to collection records, fuel receipts, and dump dockets. Photos are uploaded to our secure storage and are only visible to your organisation.
If you grant permission, we send push notifications to inform drivers of new route assignments and customers when a pickup has been completed. To deliver these we register a device push token with Apple Push Notification service and Firebase Cloud Messaging. You can disable notifications at any time in your device settings.
We collect basic device information (device model, operating system version, app version, language) and diagnostic events (crashes, errors) for troubleshooting and compatibility. We do not collect advertising identifiers and we do not use the data to track you across apps or websites.
We use the information we collect to:
We do not use your data for advertising and we do not perform any cross-app or cross-website tracking.
We do not sell your personal information. We share data only as follows:
The Service uses the following third-party processors. Each handles a specific function and is bound by its own privacy policy and our data-processing terms:
Your data is stored on infrastructure provided by Supabase and Vercel located in the Asia-Pacific region (primarily Singapore, with edge caching globally). We protect your data with:
No method of transmission or storage is 100% secure. If we become aware of a breach affecting your personal information we will notify you and, where required, the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
We retain personal information for as long as your account is active. After deletion, we retain operational records (route history, collection records, invoices) for up to 7 years to comply with Australian tax and business record obligations, after which they are securely deleted or de-identified. Photos and non-essential personal data are deleted within 30 days of account deletion.
Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
Account deletion: To request deletion of your account and the personal data associated with it, email privacy@recyco.com.au from the email address associated with your account, with the subject line "Delete my account". We will confirm the request, complete the deletion within 30 days, and notify you when it is done. Operational records may be retained as described in section 8.
The Service is intended for use by businesses and their employees. It is not directed at and we do not knowingly collect personal information from anyone under the age of 18. If we learn we have collected information from a minor we will delete it.
Recyco is based in Australia. If you use the Service from outside Australia, you consent to your information being transferred to and processed in Australia and Singapore. We take reasonable steps to ensure overseas processors handle your data consistently with this policy and applicable law.
For users installing the app from the Apple App Store or Google Play, the following summarises what is collected and how it is used:
We do not use third-party advertising SDKs and we do not track you across other companies' apps or websites.
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where the change is significant, by an in-app or email notice. Continued use of the Service after changes constitutes acceptance of the revised policy.
For privacy questions, requests to access or delete your data, or to lodge a complaint, contact us at:
We aim to respond to privacy requests within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.