Introduction
ChalSaath ("we", "our", "us") is a peer-to-peer carpooling platform operated by Ctrl Shift Solutions, India. This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable Indian law — including the Digital Personal Data Protection Act, 2023 (DPDP Act).
By using ChalSaath, you agree to the collection and use of information as described in this policy.
Section 1 — Information We Collect
- Personal Information: Full name, date of birth, email address, mobile number.
- Profile Information: Profile photo (captured via live camera — no gallery uploads), gender.
- Identity Documents (voluntary): Aadhaar card, Driving Licence, Vehicle Registration Certificate — uploaded for KYC verification only.
- Location Information: Your approximate location during active rides (visible to your matched Car Owner or Rider for safety and coordination).
- Device Information: Device push notification token (FCM token) for sending ride-related alerts.
- Usage Data: Ride history, booking records, ratings, chat message content, notification read status.
Section 2 — How We Use Your Information
- Create and maintain your ChalSaath account.
- Match you with Car Owners or Riders for ride sharing.
- Send ride-related push notifications, booking confirmations, and safety alerts.
- Verify your identity through our KYC process.
- Calculate and display Trust Scores and Verified badges.
- Enable in-app chat between matched ride participants.
- Investigate safety incidents, fraud, or violations of our Terms & Conditions.
- Comply with applicable Indian law and cooperate with law enforcement when legally required.
- Send transactional emails (OTP verification, password reset) via our branded email service.
Section 3 — Information We Do NOT Collect
- Payment card numbers, bank account details, or UPI IDs — we have no payment gateway.
- Real-time live location tracking beyond active ride coordination.
- Your contacts list, call logs, or SMS messages.
- Any data from minors — users must be 18 or older.
Section 4 — How We Share Your Information
- With Your Matched Ride Partner: Your name, profile photo, vehicle details, and approximate pickup/drop location are shared with your matched partner to facilitate the ride.
- With Admins: ChalSaath's internal admin team can view user profiles, KYC documents, and ride/booking data to handle safety, disputes, and compliance.
- With Law Enforcement: We will share information with Indian law enforcement authorities when legally required.
- With Service Providers: Firebase (Google) for authentication, database, storage, and push notifications; Resend.com for transactional emails; Google Cloud Vision API for live photo verification.
We do NOT sell your personal data to advertisers or third parties.
Section 5 — Data Retention
We retain your personal data for as long as your account is active. If you delete your account:
- Profile data and ride history are deleted within 30 days.
- KYC documents are deleted within 30 days.
- Chat messages are deleted within 30 days.
- Aggregate anonymized statistics may be retained indefinitely.
Section 6 — Your Rights (DPDP Act 2023)
- Right to Access: Request a copy of your personal data.
- Right to Correction: Correct inaccurate or incomplete data via app settings or by contacting us.
- Right to Erasure: Request deletion of your account and personal data.
- Right to Grievance Redressal: Lodge a complaint with our Grievance Officer within 30 days of any privacy concern.
To exercise any of these rights, contact us at support@chalsaath.com.
Section 7 — Data Security
- All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
- Firebase Security Rules restrict data access to authenticated users only.
- KYC documents are stored in Firebase Storage with restricted access (admin-only).
- Profile photos are verified using Google Cloud Vision API to prevent fake images.
- Passwords are never stored — Firebase Authentication manages all credentials.
Section 8 — Cookies and Tracking
The ChalSaath mobile app does not use browser cookies. We use Firebase Analytics and Firebase Crashlytics (anonymized crash reports) to improve app stability and performance. You can opt out of analytics in your device settings.
Section 9 — Children's Privacy
ChalSaath is strictly for users aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has registered, the account will be immediately terminated and data deleted. If you believe a minor has an account, contact us at support@chalsaath.com.
Section 10 — Third-Party Links
ChalSaath may display links to third-party websites or services (e.g., Google Maps). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.
Section 11 — Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification and update the "Effective Date" at the top of this page. Continued use of ChalSaath after the effective date constitutes acceptance of the revised policy.
Section 12 — Contact / Grievance Officer
For privacy-related queries, requests, or complaints:
- Email: support@chalsaath.com
- Organization: Ctrl Shift Solutions, India
- Response time: Within 30 days as required by DPDP Act 2023