Legal

Privacy Policy

1Who is responsible for your data

RYDO TRANSPORT TECHNOLOGIES PRIVATE LIMITED (“RYDO”, “we”, “us” or “our”) operates the RYDO website and the RYDO rider and captain apps. This policy explains how personal data is handled when a person creates an account, books a ride or delivery, provides a service as a captain, contacts support or uses related features. Privacy questions and requests can be sent to support@rydoind.in.

2Data we may collect

Depending on the feature used, RYDO may collect: contact and profile data such as name, mobile number, email address and account identifiers; booking data such as pickup and drop-off points, date, time, trip status and trip history; location data needed to arrange or support a booking; captain data such as profile photograph, driving licence, identity and vehicle documents, permit, insurance, bank account and tax details, and verification status; payment data such as payment method type, transaction reference, fare, refund and settlement status; communications such as support requests, complaints, ratings and feedback; and technical data such as device type, app version, crash logs, IP and network information and security events. RYDO collects only the data it needs for a specified purpose.

3How data is collected

Information is provided directly by users, created during bookings and payments, generated by app diagnostics, or received from service providers involved in a requested service. The main collection points are account registration with phone-number verification, booking screens, captain onboarding and document upload, the captain pre-registration form on the website, payment checkout and support requests. Verification information may be checked with authorised verification providers or public authorities only where legally permitted and appropriate.

4Why data is used

RYDO uses data to register and authenticate accounts; match riders and captains; provide pickup, trip and delivery coordination; calculate and reconcile fares; process payments, refunds and captain settlements; send booking and safety-related communications; respond to complaints and lost-property reports; investigate suspected fraud, misuse or safety incidents; maintain app performance and security; improve reliability through appropriately limited analysis; and meet legal, tax, accounting, insurance or regulatory obligations. RYDO uses personal data only for these purposes and on a lawful basis under applicable law.

5Consent, notices and choices

Where consent is required, RYDO will request it through a clear affirmative action after explaining the purpose, the data involved and how consent can be withdrawn. Consent for optional marketing is separate from what is needed to fulfil a booking, and users are not required to accept unrelated marketing to use a core service where that would not be lawful. Withdrawing consent does not affect processing that was lawful before withdrawal, but RYDO will stop the relevant future processing unless another lawful basis permits it. RYDO will keep records of consent and notice versions where required.

6Location and permissions

Location information is used to find a pickup point, match a rider with a nearby captain, show trip progress, support navigation and support safety features the user has requested. The rider app uses location while the app is in use. The captain app uses location while the captain is online, including when the app is running in the background, so that nearby requests can be matched and riders can track the pickup; location is not collected while a captain is offline. During a ride, a rider can use SOS to alert RYDO Support with their live location and ride details, and can share a link to a live-tracking page for that trip. Users can manage permissions through their device settings, but turning off a permission may limit features that depend on it.

7When data may be shared

Data may be shared with the rider or captain involved in a booking to the extent necessary to complete it; with payment processors to collect or refund a payment; with the service providers RYDO uses, including payment processing (Razorpay), phone-number verification and push notifications (Google Firebase), maps and place search (Google Maps Platform) and hosting and website services; with insurers or professional advisers when relevant; and with public authorities when required or permitted by law. Sharing is limited to the minimum necessary and is governed by appropriate contracts, access controls and confidentiality duties.

8Analytics and notifications

The RYDO website uses Cloudflare Web Analytics to measure traffic. The captain app uses push notifications to alert captains to ride requests. RYDO does not currently use advertising technologies in its apps. If RYDO adds analytics, attribution or advertising tools, this policy will be updated to explain what they do, which data they receive and how users can manage them. Promotional messages will rely on a valid legal basis and include a practical way to opt out; essential service messages, such as booking status and security alerts, are separate from promotions.

9Security and access control

RYDO maintains reasonable technical and organisational safeguards appropriate to the data and risk, which may include encrypted transmission, secure credential handling, role-based access, multi-factor authentication for privileged accounts, access logs, staff training, vendor review, vulnerability management, backups and a documented incident-response plan. Only authorised personnel may access personal data, and only for a legitimate task. No online service can promise absolute security; RYDO will investigate suspected weaknesses and take reasonable corrective action.

10Retention and deletion

RYDO will maintain a retention schedule for account details, trip records, payment and tax records, captain verification documents, support tickets, security logs and incident reports, identifying the purpose and the period or criteria for retention of each. Data is deleted or anonymised when it is no longer needed, except where retention is required for law, accounting, dispute resolution, safety or fraud prevention. Deletion requests may be subject to those lawful retention exceptions, and backups and vendor copies are covered by the deletion process. See the Data Retention & Deletion Policy for details.

11Your rights and grievances

Subject to applicable law, users can request access to their information, correction of inaccurate data, erasure of eligible data, withdrawal of consent, or redress of a privacy grievance. Requests can be sent to support@rydoind.in. RYDO verifies the requester’s identity proportionately, processes the request and, if the user is not satisfied, explains how to escalate it under the Grievance Redressal Policy. RYDO will respond within the timelines required by applicable law. RYDO will never ask for a password, UPI PIN, card PIN or one-time password to handle a privacy request.

12Children and age controls

RYDO’s apps are not directed at children. RYDO does not knowingly collect children’s personal data contrary to applicable requirements, and will apply the age controls and parental-consent measures that the law requires.

13Data breaches and incident response

RYDO maintains a process to detect, assess, contain, investigate and remediate suspected personal-data breaches, including preserving relevant evidence, assessing potential impact and keeping an incident log. RYDO will notify affected people or authorities when and as required by applicable law. No service can promise that a breach will never happen.

14Third-party services and external links

The RYDO apps and website may link to or use third-party services, including payment, maps, phone-verification and messaging providers. Those providers have their own privacy notices and practices, which apply to the data they handle. RYDO identifies the material providers it uses in this policy and is responsible for its own handling of data, not for the independent practices of those providers. Users should review a third party’s notice when they are directed to its service.

15Policy changes

RYDO may update this policy when its services, data practices, vendors or legal requirements change. Material changes will be communicated through the website, the app or another appropriate channel, with fresh consent where required. The version and the date of the latest update are shown at the top of this page.

16Data accuracy and account updates

Users should keep their contact details accurate and tell RYDO when information relevant to a booking or captain verification changes. RYDO provides a reasonable way to correct inaccurate profile or trip-related information, while keeping a traceable record where needed for safety, accounting or legal purposes.

17Automated tools and decision review

RYDO uses automated systems to match ride requests with nearby available captains and to apply safeguards against misuse, such as limits on repeated requests and unusually large payments. Where RYDO relies on an automated tool for an important decision about an account, the user can ask for the decision to be reviewed by a person. RYDO tests these systems for errors and unjustified outcomes.

18Cross-border processing and vendor changes

Some of the providers RYDO uses may store or process data outside India. Where that happens, RYDO will check the restrictions and safeguards that apply at the time and disclose material information as required. Significant changes to vendors or processing purposes will trigger a privacy review and notice to users where required.

19Privacy by design and staff duties

RYDO will review new features before launch to identify the data collected, the permissions needed, access roles, the retention period, vendor involvement and foreseeable risks. Staff will receive role-appropriate privacy training, and access will be removed promptly when it is no longer needed.

20How to contact RYDO

Privacy requests and complaints can be sent to support@rydoind.in. If the first response does not resolve a concern, the user can escalate it as described in the Grievance Redressal Policy.