This policy covers Red Access — the iPhone app for Redfluent’s sign-in and access console (auth.redfluent.net) — and the servers behind it. Red Access is provided by Redfluent Pte. Ltd. (“we”, “us”), a company in Singapore. With it you sign in, ask for access to a workspace’s tools, and, if you are an owner, approve requests and manage people and their devices.
For LorryGo and our websites, see the Privacy Policy.
1. What we collect
- Your email address. If you sign in with a WhatsApp code, we also keep your phone number.
- What you type when you ask for access: an optional short note (up to 200 characters) and the tool you are asking for.
- Your access: your role (owner or member) and the tools you are approved for.
- Your signed-in devices: for each, the device name, the browser/app identifier (user agent) and IP address when it signed in, when it was created and last seen, and whether it was signed out.
- A security log: sign-in attempts and approvals, with the time, the email involved and the IP address.
- App error reports: if the app crashes or hits an error, it sends the error message and technical stack trace so we can fix it.
- On your iPhone: your session token is kept in the iOS Keychain. Signing out removes it.
What we do not do
- No advertising and no tracking of you across other apps or sites.
- No third-party analytics or advertising software in the app.
- We do not sell your data.
2. Why we use it
- To sign you in: we send a 6-digit code that is valid for 10 minutes and works once.
- To let owners decide who gets access to which tool, and to see and sign out the devices that are signed in.
- To keep the service secure, spot misuse and fix faults.
3. Who can see it
- Owners of your workspace (the company that runs it) can see the emails, access and signed-in devices — including device identifiers and IP addresses — of the people in their workspace, and the access requests sent to them.
- Redfluent, which runs the service.
- Service providers that process data for us: Cloudflare (hosting and database) and Resend (sends the sign-in code emails).
- Authorities, only when the law or a court order requires it.
4. Where it is stored
Data is stored on Cloudflare’s global network (Workers and D1). Cloudflare operates in many countries, so we do not promise that your data stays in Singapore or in any one region.
5. Deleting your account
- In the app, open the account menu and tap Delete account.
- Or email ai@redfluent.com from the address you sign in with and ask us to delete your account.
- Deleting removes your sign-in account and every device signed in with it, and cancels your pending access requests and unused invite links. Records you created inside a workspace's tools belong to that workspace: ask its owner, or email us, to have them removed. Security log entries, and the records of cancelled requests and links, are kept.
6. Your choices and rights
You can ask what personal data we hold about you, ask us to correct it, or ask us to delete it, by emailing the address below. The owner of a workspace is responsible for who it grants access to, so we may need to involve the owner to deal with a request about that workspace.
7. Contact
- Redfluent Pte. Ltd.: ai@redfluent.com
- If you are not satisfied with our response, you can contact the Personal Data Protection Commission of Singapore (pdpc.gov.sg).
8. Changes to this policy
If we change this policy we update the date at the top. If we start collecting a new type of data, we update it first.