Privacy Policy
Effective 17 October 2026 · RidePool is operated by Logybyte ("we", "us").
This policy explains what personal data the RidePool app collects, why, who it is shared with and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Google Play and Apple App Store requirements.
1. Data we collect
- Account details: name, email address, phone number (optional), profile photo (optional).
- Identity verification (optional): the last 4 digits of your Aadhaar number and a masked PAN, used only to show a verified badge after manual review. Full numbers are never stored.
- Vehicle details (drivers): make, model, colour, registration number, seating capacity and photos of the vehicle you take in the app.
- Rides and bookings: routes, pickup/drop-off points, departure times, seats and the cost-share amount.
- Location: your device location while you use the app to find rides, set pickup points and show routes. If you turn on live trip sharing, your location is sent while sharing is on, until you stop it or the link expires (max 24 hours).
- Safety data: trusted contacts you add (name, email, phone) and a log of SOS alerts you trigger.
- Device data: a push-notification token, and crash reports (device model, OS version, app version, stack trace) to fix bugs.
2. How we use it
- To create your account, publish and book rides, and let drivers and passengers coordinate.
- To show your name, photo, verified badge and trip count to other users you ride with.
- To share the driver's phone number with passengers whose booking is confirmed, and passengers' phone numbers with their driver.
- To send notifications about bookings, cancellations and reviews.
- To provide safety features (SOS, trusted contacts, live trip sharing, and the start-of-trip PIN that confirms the right passenger is in the right car).
- To keep the service secure, prevent abuse and fix crashes.
We do not sell your data and do not use it for advertising.
3. Who we share it with
- Other RidePool users, only as described above.
- People you share a trip with: anyone holding your live-trip link can see your first name, live position and ride details until sharing ends.
- Service providers that process data for us: Supabase (database, authentication, file storage), Google Firebase (push notifications, crash reports), and OpenStreetMap-based services (map tiles, address search and route calculation, which receive the map area or addresses you look up).
- Messaging apps you choose: when you send an SOS alert or trip link by WhatsApp, SMS or email, that app sends the message from your phone to the people you pick. We don't read or store those messages.
- Authorities, when required by law or to protect someone's safety.
4. How long we keep it
We keep your data while your account is active. When you delete your account (Profile → Delete Account) your profile, vehicles, rides, bookings, trusted contacts, notifications and trip shares are deleted immediately. Crash reports are kept by Firebase for up to 90 days. We may keep a minimal record that an account was deleted, and the reason you gave, for abuse prevention.
5. Security
Data is encrypted in transit (HTTPS). Database access rules ensure you can only read your own private data. No system is perfectly secure; please use a strong password and report any concern to us.
6. Your rights
You can access and correct your data in the app, withdraw consent (for example by turning off location or live sharing), delete your account in the app, and contact us to request a copy of your data or to raise a grievance. We respond within 30 days.
7. Children
RidePool is for people aged 18 and over. We do not knowingly collect data from children.
8. Changes
We will notify you in the app before material changes take effect.
9. Contact / Grievance Officer
Logybyte · Email: privacy@logybyte.com