CityRyde Privacy Policy — DPDP Act 2023 Compliant

1. Introduction

CityRyde ("CityRyde," "we," "us," or "our") operates the CityRyde mobile application, associated websites, and related services (collectively, the "CityRyde Platform") that connect Riders seeking transportation with independent Sarathi-Partners who provide rides. This Privacy Policy explains what information we collect, how we use, share, and protect it, and the rights and choices available to you.

This Privacy Policy applies to Riders, Sarathi-Partners, and any other person who accesses or uses the CityRyde Platform (collectively, "you" or "User"), regardless of whether you access CityRyde through Android, iOS, or the web.

By creating an account, accessing, or using the CityRyde Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the CityRyde Platform.

This Privacy Policy is designed to comply with applicable data protection laws and with the platform requirements of the Google Play Store, including the Data Safety section, and the Apple App Store, including the App Privacy details ("nutrition label").

2. Definitions

"Account" means the registered profile a User creates to access the CityRyde Platform.
"Sarathi-Partner" means an independent, third-party transportation provider who offers rides through the CityRyde Platform.
"Personal Data" means information that identifies, relates to, or could reasonably be linked, directly or indirectly, with a particular individual.
"Rider" means a User who requests or receives transportation services through the CityRyde Platform.
"Services" means the ride-booking, payment, navigation, safety, and related features made available through the CityRyde Platform.
"Trip Data" means information generated in connection with a specific ride, including pickup and drop-off locations, route, distance, duration, and fare.

3. Information We Collect

3.1 Information You Provide Directly

Account and Profile Information: name, phone number, email address, date of birth, gender, profile photo, and login credentials.
Payment Information: billing details and tokenized payment method information processed through our payment partners. CityRyde does not store full card numbers.
Sarathi-Partner Verification Information: government-issued identification, driving license, vehicle registration, insurance, permit and fitness documents, bank details for payouts, and a live selfie for identity verification.
Communications: messages sent through in-app chat, customer support tickets, survey responses, and trip ratings or feedback.
Emergency Contact Information: contact details you choose to add for in-app safety features.

3.2 Information Collected Automatically

Location Information: described further in Section 4.
Device Information: device model, operating system and version, unique device identifiers, IP address, mobile network information, app version, and crash or diagnostic logs.
Usage Information: screens viewed, features used, search and booking activity, session duration, and in-app interaction data.
Log Data: timestamps, error reports, and API request data generated automatically while using the Platform.

3.3 Information From Third Parties

We may receive information about you from payment processors, identity-verification and background-check providers (for Sarathi-Partners), mapping and navigation providers, analytics partners, and other Users, such as a Rider who lists you as an emergency contact.

4. Location Information

Precise and approximate location data is central to the CityRyde Services.

Riders: We collect location data when you open the CityRyde App to show nearby Sarathi-Partners, set pickup and drop-off points, track your trip in progress, and power safety features such as live trip-sharing. You may disable location permissions in your device settings, but doing so may limit or disable core features of the app.
Sarathi-Partners: We collect location data while you are marked "Available" or "On Trip" in the CityRyde App, including when the app runs in the background, to match you with ride requests, calculate routes and fares, and support safety monitoring. Background location collection is limited to periods when you are actively offering or providing Services.

You can manage location permissions at any time through your device's operating system settings. Restricting location access may prevent you from booking or accepting trips.

5. How We Use Your Information

We use the information we collect to:

create and manage your Account and verify your identity;
match Riders with available Sarathi-Partners and facilitate trip booking, navigation, and fare calculation;
process payments, payouts, refunds, and invoices;
provide customer support and respond to inquiries;
monitor, investigate, and enforce safety, fraud-prevention, and security measures, including trip tracking and incident reporting;
send trip-related notifications, receipts, and service updates;
conduct internal analytics to improve app performance, reliability, and user experience;
comply with legal and regulatory obligations, including tax, licensing, and law-enforcement requests; and
with your consent, send promotional offers, which you may opt out of at any time.

We do not use your Personal Data to build advertising profiles for third-party advertisers, and we do not sell your Personal Data for monetary consideration.

6. How We Share Your Information

We share information only as described below:

Between Riders and Sarathi-Partners: to facilitate a trip, we share limited details necessary to complete the ride, such as a Rider's first name, pickup location, and estimated arrival time with the matched Sarathi-Partner, and a Sarathi-Partner's first name, photo, vehicle details, and live location with the Rider.
Service Providers: vendors who perform services on our behalf, such as cloud hosting, payment processing, identity verification, background checks, mapping and navigation, customer support tooling, analytics, and notification delivery. These providers are contractually required to use your information only to perform services for CityRyde.
Legal and Safety Reasons: when required to comply with applicable law, regulation, legal process, or government request; to enforce our Terms of Service; or to protect the rights, property, or safety of CityRyde, our Users, or the public.
Corporate Transactions: in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to confidentiality protections.
With Your Consent: for any other purpose disclosed to you at the time of collection, or with your explicit consent.

We do not share your precise location history or trip history with third parties for their own independent marketing purposes.

7. Third-Party Services and SDKs

The CityRyde App may integrate third-party software development kits (SDKs) for purposes such as mapping, crash reporting, push notifications, payment processing, and analytics. These providers may independently collect technical and usage data as governed by their own privacy policies, which we encourage you to review. We require our SDK and service-provider partners to handle your information consistently with this Privacy Policy and applicable law, and we disclose this collection in the Data Safety section of the CityRyde Google Play Store listing and the App Privacy details of the CityRyde Apple App Store listing.

8. Cookies and Similar Technologies

Our website and in-app web views may use cookies, SDKs, and similar technologies to remember preferences, authenticate sessions, and understand usage patterns. You can control cookies through your browser settings; disabling cookies may affect certain website features.

9. Data Retention

We retain your Personal Data for as long as your Account remains active and as necessary to provide the Services. After you close your Account, we generally retain certain records, such as trip history, payment records, and safety-incident reports, for [Data Retention Period] to comply with legal, tax, accounting, dispute-resolution, and fraud-prevention obligations, after which the data is securely deleted or anonymized.

10. Account and Data Deletion

You may request deletion of your Account and associated Personal Data at any time by:

using the "Delete Account" option within the CityRyde App settings; or
submitting a request through [Account Deletion Request URL] or by emailing [Support Email].

We will process verified deletion requests within [Number] days, except where retention is required by law or for the legitimate purposes described in Section 9. Deletion requests can be submitted whether or not the CityRyde App remains installed on your device.

11. Your Privacy Rights and Choices

Depending on your location, you may have the right to:

access a copy of the Personal Data we hold about you;
correct inaccurate or incomplete Personal Data;
request deletion of your Personal Data, subject to Section 9;
object to or restrict certain processing of your Personal Data;
receive your Personal Data in a portable format;
withdraw consent where processing is based on consent; and
opt out of marketing communications at any time via the unsubscribe link or in-app notification settings.

Residents of California and certain other U.S. states may have additional rights under applicable state privacy laws, including the right to know, delete, correct, and limit the use of sensitive Personal Data, and the right to non-discrimination for exercising these rights. CityRyde does not sell or share Personal Data for cross-context behavioural advertising as those terms are defined under applicable law.

To exercise any of these rights, contact us using the details in Section 20. We may need to verify your identity before fulfilling certain requests.

12. Children's Privacy

The CityRyde Platform is not directed to, and may not be used by, individuals under the age of 18 (or the age of majority in your jurisdiction, if higher). We do not knowingly collect Personal Data from children. If we learn that we have inadvertently collected Personal Data from a child, we will take reasonable steps to delete it promptly. Parents or guardians who believe their child has provided us with Personal Data should contact us using the details in Section 20.

13. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and regular security assessments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your Account credentials confidential.

14. International Data Transfers

Your information may be stored and processed in countries other than your own, including [Country/Region]. Where we transfer Personal Data internationally, we use appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, as required by applicable law.

15. Notifications and Communications

We may send you transactional, safety, and service-related notifications, such as trip confirmations and safety alerts, which you cannot opt out of while maintaining an active Account, as they are necessary for the Services. You may opt out of promotional notifications and emails at any time through your device settings or the unsubscribe link provided.

16. Third-Party Links

The CityRyde Platform may contain links to third-party websites or services that are not operated by CityRyde. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any information.

17. App Store and Play Store Compliance Statement

This Privacy Policy, together with the Data Safety section published on the CityRyde Google Play Store listing and the App Privacy details published on the CityRyde Apple App Store listing, comprehensively describes CityRyde collection, use, and sharing of Personal Data. In the event of any inconsistency, this Privacy Policy will govern, and CityRyde will promptly update the relevant store disclosures to remain consistent with this Policy.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised Privacy Policy on the CityRyde Platform with an updated "Last Updated" date and, where required by law, notify you of material changes through the CityRyde App or by email before they take effect. Your continued use of the CityRyde Platform after the changes become effective constitutes your acceptance of the revised Privacy Policy.

19. Governing Law

This Privacy Policy is governed by the laws of [Governing Jurisdiction], without regard to conflict-of-laws principles, except where applicable law requires otherwise.

20. Contact Us / Grievance Officer

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact:

CityRyde Transportation Services Private Limited

Attn: Privacy / Grievance Officer

Email: grievience@city-ryde.com

We aim to acknowledge and address requests within 2-4 business days, or as required by applicable law.

Privacy queries: grievience@city-ryde.com