We take the privacy of your shop and your customers seriously. This policy explains what we collect, how we use it, and the control you have over your data.
Klutch (klutch.lk) provides workshop-management software for motorbike and three-wheeler repair shops in Sri Lanka, delivered as a web app and a companion mobile app. This policy explains what personal information we handle, how we use it, and the choices you have.
Klutch is used by a repair shop to run its business. For the customer and vehicle records a shop enters, the shop is the controller of that data and Klutch acts as its processor. For your own staff account, Klutch is the controller.
Staff account details: your name, email, mobile number, role, and the shop and branch you belong to, together with security credentials such as your password, two-factor secret, and step-up PIN, all kept in protected form.
Business records your shop enters: customers and their NIC, phone, email and address; vehicles with registration number and mileage; job cards, inventory, suppliers, invoices, payments, and credit (book) account balances.
Technical data collected automatically, such as device information, log data, and app usage, used to keep the service secure and reliable.
To run the service: create job cards, manage inventory and procurement, issue invoices, record payments, and maintain credit accounts, all in Sri Lankan Rupees with taxes applied in accordance with local law.
To communicate: send verification codes and transactional messages by SMS and WhatsApp, service reminders, and job status updates. We do not sell your personal data or use it for third-party advertising.
The companion mobile app requests only the permissions it needs. Camera access is used to scan part barcodes and QR codes and to attach photos to job cards, and photo library access is used when you pick an existing image.
Biometric unlock (Face ID or fingerprint) secures the app and confirms sensitive money actions. Your biometric data never leaves your device and is never sent to us, and access tokens are held in the device Keychain or Keystore. The app does not collect your location.
Klutch records payments made by cash, card, LankaQR, eZ Cash, bank transfer, and credit (book) accounts. Where you use an online payment method, the transaction is handled by the relevant payment provider under its own terms.
We store financial records such as invoices, receipts, credit notes, and refunds so your shop can keep accurate books and meet its tax obligations.
Your data is stored on secured servers with encryption in transit. We enforce strict tenant isolation at the database level, role-based access, step-up verification for money actions, and audit logging, so each shop's data stays separate and access is controlled and traceable.
We share data only with the providers that help us operate, such as SMS and WhatsApp messaging gateways, payment processors, and the sign-in providers used for optional social login, and where required by law. These providers are bound to protect your information.
Under Sri Lanka's Personal Data Protection Act you may access, correct, or request deletion of your personal data, and object to certain processing. If you are a shop's customer, please contact that shop, which controls your records, and we will support them in responding.
We retain business and financial records for as long as your account is active and for the periods required by Sri Lankan law. When an account is closed, your shop may export its data before it is removed.
Our website uses essential cookies to keep you signed in and remember preferences, plus limited analytics to understand usage. You can control cookies through your browser settings.
We may update this policy from time to time. Material changes will be notified in the app or by email, and the 'last updated' date at the top of this page will change.
Questions about privacy or your data? Email [email protected] and we will respond promptly.