Privacy Policy

Introduction & Who We Are

Welcome to RideX. RideX ("we," "our," or "us") provides a technology platform connecting passengers with drivers through our mobile applications — RideX Passenger and RideX Driver (collectively, the "Apps"). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what choices you have. By using either App, you agree to the practices described here.

The data controller responsible for your information is RideX Technologies — privacy@ridexapp.com | support@ridexapp.com.

Information We Collect

Information You Provide

Passengers provide: full name, mobile number, optional email and profile photo, payment information, and optional emergency contact. Drivers additionally provide: driving licence, vehicle registration, Aadhaar ID for verification, profile photo, and bank account details for earnings.

Automatically Collected

• Precise Location (GPS): Collected while the App is in use; background location used while a trip is active.
• Device Information: Device model, OS version, unique device identifiers, app version, and crash logs.
• Usage Data: In-app actions, screens visited, session duration, and feature interactions.
• Trip Data: Pickup/drop-off locations, route, distance, duration, timestamps, and fare.

From Third Parties

• OTP Verification (MSG91): Used to send and verify OTPs for phone number authentication.
• Google Sign-In: Provides your name, email, and profile picture if you use Google login.
• Stripe: Provides tokenized payment information. We do not store raw card numbers.

How We Use Your Information

To Provide the Service

• Match passengers with nearby available drivers
• Enable real-time GPS tracking during rides
• Generate and display 6-digit Ride Confirmation OTPs to verify the correct driver before a trip starts
• Calculate fares, process payments, and transfer earnings to drivers
• Send ride status push notifications and display driver/passenger details

Safety, Support & Legal

• Verify driver identities and vehicle documents before onboarding
• Monitor trips for irregularities and investigate complaints and safety incidents
• Respond to support tickets; manage account deletion requests
• Comply with applicable Indian laws; respond to lawful requests from courts or regulatory authorities
• Prevent fraud, abuse, and illegal activities

Analytics & Improvement

• Analyse app usage patterns to improve features and UX
• Monitor and fix bugs and crashes via Firebase Crashlytics

Information Sharing

We do not sell your personal data. We share information only as described below.

Between Users

• Passenger to Driver: First name, pickup location, drop-off location, and the Ride Confirmation OTP.
• Driver to Passenger: Driver's full name, profile photo, vehicle make/model, registration number, and real-time location during the ride.

Service Providers

We may also disclose information if required by law, court order, or government authority, or in the event of a merger or acquisition (with prior notice to you).

Location Data

Passenger App

• When booking: Precise GPS location is used to suggest a pickup point and find nearby drivers.
• During a trip: Your location is shared with the matched driver to facilitate pickup and tracking.
• Background access: Only active during an ongoing trip.

Driver App

• When online: Real-time location is continuously shared with our servers to match you with nearby ride requests.
• During a trip: Your route is tracked and visible to the passenger in real time.
• When offline: Location tracking is paused immediately.

Third-Party Services

Our Apps integrate with third-party services that have their own privacy policies:

• Google Privacy Policy — Firebase, Google Maps, Google Sign-In
• Stripe Privacy Policy
• MSG91 Privacy Policy

Data Retention

After the retention period, data is securely deleted or anonymised. You can request early deletion — see Your Rights below.

Security

• Encryption in transit: All data between the Apps and our servers uses TLS 1.2+.
• Encryption at rest: Sensitive data in Firebase Firestore is protected by Google's server-side encryption.
• Ride OTP: A 6-digit OTP is generated for each ride. The driver must verify it before the trip starts, preventing unauthorised ride initiation.
• Payment security: Card data is handled exclusively by Stripe (PCI DSS compliant). RideX never stores raw card numbers.
• Access controls: Internal access to user data is restricted on a need-to-know basis.

If you suspect unauthorised access to your account, contact us immediately at security@ridexapp.com.

Your Rights

• Access: Request a copy of the personal data we hold about you.
• Correction: Update incorrect or incomplete information in the App or by contacting us.
• Deletion: Request deletion of your account and personal data via our Account Deletion page.
• Portability: Request your trip history and profile data in a machine-readable format.
• Objection: Object to processing of your data for analytics or marketing.
• Withdrawal of consent: Withdraw location or notification permissions at any time via device settings.

To exercise any of these rights, contact privacy@ridexapp.com. We respond within 30 days.

Children, Policy Changes & Contact

Children's Privacy: RideX is not directed at children under 18. We do not knowingly collect personal information from minors. Contact privacy@ridexapp.com to request prompt deletion of any minor's data.

Policy Changes: We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify you via push notification or in-app alert. Your continued use of the Apps after any changes constitutes acceptance of the updated Policy.