PRIVACY POLICY
1. Introduction
Chalo Auto is committed to protecting your privacy. This Privacy Policy explains what information we collect, why
we collect it, how we use it, and the choices you have regarding your data.
By using our app, you agree to the practices described in this policy.
2. Information We Collect
We collect the following details when you register or use the app:
- Name, phone number, email address
- Pickup and drop-off addresses
- Ride history and payment details
- Uploaded Files: Images, PDFs, or other files you upload (e.g., product lists, invoices) are stored in Firebase
Storage.
b. Location Data
- We collect your location (approximate or precise GPS) to show nearby drivers, calculate fares, and provide
live ride tracking.
- Location access is requested only when you use features requiring it.
c. Microphone / Voice Data
- Used only when you enable voice search or voice booking.
- Voice inputs are processed temporarily and not stored unless you choose to save them.
d. Uploaded Files
- Files or images uploaded for support or identity verification are stored securely in Firebase Storage.
e. Device & Usage Data
- Includes your device model, OS version, app version, crash logs, and performance data — collected anonymously
to improve app quality.
f. Payment Data
- Payment tokens and transaction identifiers are processed through secure third-party payment gateways (e.g.,
Razorpay, PhonePe).
- We do not store full card details, CVV, or UPI PINs.
3. How We Use Your Information
We use your information to:
- Create and manage your account and driver/rider profiles
- Process ride bookings, payments, and enable live tracking
- Communicate ride confirmations, driver arrival updates, and promotional messages (if opted in)
- Improve app performance, fix bugs, and analyze usage trends
- Prevent fraud, ensure safety, and comply with legal obligations
4. Sharing of Information
We share data only with trusted third parties necessary for our services:
- Google Maps Platform: For navigation, location, and map services
- Firebase (Google): For authentication, data storage, and analytics
- Payment Providers: (Razorpay, PhonePe, etc.) for secure payment processing
- Communication Providers: (e.g., Twilio, WhatsApp API) for OTPs and service messages
We do not sell or rent your personal data to advertisers or other third parties.
5. App Permissions (What We Request and Why)
- INTERNET: To connect with our servers and APIs
- ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION: To find nearby drivers, calculate distance, and track rides
- RECORD_AUDIO: Used only for voice booking features, with your permission
- POST_NOTIFICATIONS: To send ride updates and alerts (can be turned off in device settings)
- READ_MEDIA_IMAGES / READ_MEDIA_VIDEO (Android 13+): To let you upload profile or vehicle images
- We do not use deprecated or invasive permissions like MANAGE_EXTERNAL_STORAGE.
6. Data Security & Encryption
- All communication is encrypted via HTTPS/SSL
- Sensitive information is securely stored in Firebase with limited access
- Payment processing follows PCI-DSS and RBI compliance
- Only authorized personnel can access production data
7. Data Retention & Deletion
- We retain user data as long as your account remains active or as required by law.
- To request deletion of your account and associated personal data chaloautokerala@gmail.com with the subject: “Privacy Request”
- Your request will be processed within 7–15 business days, unless retention is legally required.
8. User Controls & Rights
You can:
-
View, edit, or delete your account details in app settings
- Disable location or microphone permissions from device settings
- Opt out of notifications or promotional messages
- If you are in the EU, you have rights under GDPR (access, correction, deletion, portability)
- California residents may exercise rights under CCPA/CPRA by contacting us
9. Children’s Privacys
Our app is not intended for children under 13 years.
We do not knowingly collect data from children.
If we learn we have done so inadvertently, we will delete it promptly.
10. Compliance & Legal
Chalo Auto complies with applicable data protection laws:
- GDPR (EU)
- CCPA (California)
- Information Technology Act, 2000 (India)
For payment processing, we rely on certified third-party providers who maintain PCI/RBI compliance.
11. Play Console – Data Safety Declaration
When submitting to Google Play, indicate that the app collects:
- Location, Contact Info, Financial Info (transaction IDs), Device/Crash Data, and Media (uploads)
- Data is shared with service providers (Firebase, Google Maps, Payment processors)
- Data is encrypted in transit and not shared with advertisers
12. Changes to this Policy
We may occasionally update this Privacy Policy to reflect changes in features or legal requirements.
Significant updates will be notified within the app or via email.
13. Contact Us
Chalo Auto Support
If you have any questions about this Privacy Policy, contact us: