Privacy Policy
Last updated: May 2026
This Privacy Policy describes how Niolla (Private) Limited ("we", "us", or "our") collects, uses, and protects information through the Reliance Pay mobile application ("the App") — an enterprise Mobile Device Management (MDM) platform for business-owned devices.
This app is deployed exclusively on business-owned devices provided to merchants by Niolla. It is not a consumer application.
1. Data We Collect
Device Information
- Device serial number, IMEI, manufacturer, and model
- Android version and build information
- SIM card ICCID (to detect SIM swaps on business devices)
- Device enrollment status and last check-in timestamp
Location Data
- Real-time GPS location of the enrolled device
- Purpose: merchant device fleet tracking and compliance
- Frequency: periodic reporting during device operation
- Retention: 90 days
Payment & Usage Data
- Device payment status (locked / unlocked) for the device financing plan
- App check-in events and policy compliance status
2. How We Use the Data
- To manage and enforce policies on business-owned devices
- To track device location for fleet management
- To enforce the device financing agreement (lock/unlock based on payment status)
- To detect unauthorized SIM swaps or device tampering
- To send payment reminders via SMS
3. Data Sharing
We do not sell or share personal data with third parties for advertising purposes. Data may be shared with:
- Authorized merchants — to view the status of their enrolled devices
- Niolla administrators — for platform management and compliance
- Firebase (Google) — for delivering device management commands (FCM push notifications)
- SMS providers — for sending payment reminders (Notify.lk / Textware)
4. Data Security
- All data is transmitted over HTTPS (TLS encrypted)
- Data is stored on secured servers hosted in the EU (Contabo VPS)
- Access is controlled by role-based authentication (JWT)
- Location and device data is accessible only to authorized Niolla personnel
5. Device Management Permissions
As an enterprise MDM app installed as Device Owner, this app uses the following Android permissions:
- Device Admin / Device Owner: to enforce company device policies
- Location (Fine): for device fleet tracking
- Camera: for QR code scanning during enrollment only
- Phone State (READ_PHONE_STATE): to read IMEI for device registration
- Draw over other apps (SYSTEM_ALERT_WINDOW): to display the device lock screen when a payment is overdue
- Receive boot completed: to restore device lock state after restart
These permissions are required for the MDM functionality and are disclosed to the business deploying the device.
6. Data Retention
- Device and location data: retained for the duration of the financing plan + 30 days
- Location history: 90 days rolling retention
- Payment records: retained for 7 years for financial compliance
7. User Rights
Since this app is deployed on business-owned devices, end-user data rights are governed by the merchant agreement with Niolla. Merchants may contact us to:
- Request a copy of data stored for their devices
- Request deletion of data after device unenrollment
8. Children's Privacy
This app is not directed at children under 18. It is an enterprise business tool deployed exclusively on merchant-owned payment devices.
9. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available at this URL. Continued use of the enrolled device constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or data requests, contact us at: