Privacy Policy
1. Who we are
Abu Zeeshan Mohammad, an individual trading as CabbyCarter (registration as a private limited company is in progress), 115, Jogi Tola, Sitapur, Uttar Pradesh 261001, India ("CabbyCarter", "we", "us") operates the CabbyCarter ride-hailing service in Sitapur, Uttar Pradesh, India. We are the Data Fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. What we collect
| Data | App | Why | Required? |
|---|---|---|---|
| Mobile number | Both | Account identity, sign-in, ride coordination | Yes |
| Name, date of birth, gender, profile photo | Both | Profile, shown to the person you are matched with, age check (18+) | Name yes; others optional |
| Location | Both | Pickup, dispatch, navigation, live tracking (see §4) | Yes to use the service |
| Camera & photos | Both | Profile photo; captain KYC documents and shift selfie | Rider optional; captain yes |
| Government ID (Aadhaar / PAN / Driving Licence number) | Both | Rider: optional self-declared verification. Captain: mandatory KYC (document images) | Rider optional; captain yes |
| Emergency contacts | Both | Safety escalation you choose to enable | Optional |
| UPI ID / bank account | Rider (UPI ID) / Captain (bank account) | Rider: pay for rides. Captain: receive earnings, tax (TDS/GST) | Optional for cash rides; captain payout yes |
| Device information & app instance ID | Both | Security, fraud and multi-account abuse prevention | Yes |
| Push notification token | Both | Ride status alerts | Optional |
| Advertising ID | Both | Ads served through Google AdMob (see §5) | Set by your device |
| Ride records, ratings, safety reports, in-app messages | Both | Provide, bill and improve the service; resolve disputes; safety | Generated by use |
We do not collect your contacts list, SMS, call logs, microphone audio recordings, or the list of apps on your device.
3. Why we use your data
To let you book and take rides; match riders with captains; show each party the other's name, photo and (for the captain) vehicle and live position; verify captain identity and documents; process cash and UPI payments and taxes; keep the service safe and prevent fraud; meet legal and regulatory obligations; and show ads.
4. Location
Rider app: location is used only while the app is open — to set your pickup, show nearby captains and track your ride. It is not collected in the background.
CabbyCarter Captain app: while you are on an active shift the app collects your GPS location continuously, including when the app is in the background or the screen is locked, with a permanent notification shown for the duration of the shift. This is required so the system can send you ride requests and so your matched rider can see your position and estimated arrival. Background collection stops when your shift ends.
We keep the precise GPS location recorded during a ride only briefly — it is deleted within about 24 hours after it has been processed. We use it to build anonymous, aggregated statistics (such as typical road speeds and common pickup points) that contain no rider or captain identity, to improve routes, ETAs and pickup accuracy.
5. Who we share it with
- Google AdMob — advertising ID and device/network information, to serve banner ads.
- Google Maps — map and navigation requests.
- Google Firebase Cloud Messaging — to deliver push notifications.
- Your matched rider or captain — first name, photo, and for captains the vehicle details and live location. Phone numbers are not exchanged; pickup coordination uses the in-app chat.
- Payment and tax partners, and government authorities — where required to process payments or comply with law.
We do not sell your data and do not share it with data brokers. Payments are cash or UPI only — we do not collect card details and there is no payment gateway in the app.
6. How long we keep it
We keep personal data only as long as needed to provide the service and for the periods Indian law requires — for example ride and payment records for about 8 years (tax law), KYC documents for about 5 years after an account closes, and safety-incident records for about 7 years. Routine ride location data is short-lived. In-app chat messages are deleted as soon as the pickup is complete.
7. Your rights
Under the DPDP Act you can ask us to give you access to your personal data, correct it, or erase it, and you can raise a grievance. Email cabbycarter@gmail.com and we will respond within 30 days. Some data may be retained after erasure where law requires it (see §6); we will tell you what and why.
8. Deleting your account
You can delete your account from inside the app: Account → Privacy & Data → Delete Account. Your account is frozen immediately and permanently deleted after a 30-day grace period. To cancel during that period, simply sign back in. After 30 days your name, date of birth, gender, photo and username are erased and your mobile number is released. Ride, payment, KYC, safety and audit records are retained for the legally required periods described in §6 and then deleted.
9. Grievance Officer
Abu Zeeshan Mohammad, cabbycarter@gmail.com, 115, Jogi Tola, Sitapur, Uttar Pradesh 261001, India. You may also use the Government of India public grievance portal at pgportal.gov.in.
10. Security
We use reasonable technical and organisational safeguards to protect your data. If a personal-data breach occurs we will notify CERT-In and the Data Protection Board of India as required by law.
11. Where your data is processed
Our servers are located outside India (in Europe). Transfers are made in accordance with §16 of the DPDP Act.
12. Children
CabbyCarter is only for people aged 18 or older. We do not knowingly collect data from children and the service is not directed at them.
13. Changes
We may update this policy. The new version is posted here with a new effective date; continued use of CabbyCarter means you accept it.