Effective Date: 16 March 2026
Last Updated: 16 March 2026
This Privacy Policy explains how Hopae S.A. ("we", "us", or "our") processes personal data when you use the Rekko mobile application.
The Data Controller responsible for personal data processed in connection with Rekko is:
Hopae S.A.
20 Rue des Peupliers, 2328 Hamm, Luxembourg
Email: privacy@hopae.com
Hopae determines the purposes and means of the personal data processing described in this Privacy Policy.
We may collect the following categories of personal data:
| Category | Examples |
|---|---|
| Account Data | Name, email address, language preference, eID name, 18+ validation |
| Technical Data | IP address, device and network information, session identifiers, error logs, security logs |
Account creation: we may collect Account Data when you register for Rekko. You may sign up using email registration or third-party sign-in services (such as Google or Facebook). When using third-party sign-in, we receive only the information necessary to create your account. We verify that you are 18+ at the time of account creation.
When You Claim Rewards: we may process Account Data to deliver rewards to you.
Operation and Security of the Service: Technical Data may be processed to ensure the security, reliability, and proper functioning of the application. This may include processing IP addresses, device and network information, session identifiers, and system logs for purposes such as error diagnostics, fraud prevention, and system security monitoring.
Verification Test Sessions: When you participate in an identity verification test session initiated by a sponsor organisation through Rekko, that sponsor acts as the Data Controller for any personal data processed during the session. Hopae processes such data solely as a Data Processor on the sponsor's behalf, under a Data Processing Agreement. For information about how your personal data is handled during a test session, please refer to the sponsor's Privacy Policy and Terms of Use, which you will be asked to review and accept before the session begins.
We process your personal data under the following legal bases pursuant to Article 6(1) of the GDPR: