This document is published in compliance with the Digital Personal Data Protection Act, 2023 (India) and the Information Technology Act, 2000.
1. Data Fiduciary
This Privacy Policy is published by Trike Mobility (OPC) Private Limited (CIN: U49219TN2025OPC180057, GSTIN: 33AALCT8599F1ZP), having its registered office at 18, Kamaraj 1st Cross Street, Saligramam, Chennai – 600093, Tamil Nadu, India ("Trike", "we", "us", or "our"). We operate the Trike platform — a mobile and web application for on-demand electric vehicle logistics and last-mile delivery services across Tamil Nadu.
2. What Personal Data We Collect
Customers
Phone number (required) — used as your primary identifier and for OTP-based authentication.
Name and email address (optional) — for personalising your profile and communications.
Profile avatar (optional) — a photo you choose to upload.
Pickup and drop addresses, including GPS co-ordinates — provided by you when booking a service.
Saved addresses — locations you choose to save for quick reuse.
Booking history — service type, status, fare, distance, timestamps.
Payment identifiers — Razorpay order ID and payment ID (we do not store card numbers or CVVs).
Chat messages — text exchanged between you and your assigned driver within the app.
Ratings and reviews — scores and comments you give or receive.
Push notification subscription — browser or device token for sending service alerts.
Google account ID — only if you sign in via Google; used solely for authentication.
Device information — platform (Android / iOS / web) for push notification routing.
Drivers
All of the above, plus:
Driving licence number and a copy of the licence document — for identity and eligibility verification.
Real-time GPS location (latitude, longitude, speed, heading) — continuously recorded while a booking is active, to enable live tracking for customers and route optimisation.
3. Why We Process Your Data (Purpose Limitation)
To create and maintain your account and verify your identity via OTP.
To match customer bookings with available drivers and process the booking lifecycle.
To display your real-time driver location to the customer during an active booking.
To calculate fares, process payments through Razorpay, and issue invoices.
To facilitate in-app chat between customer and driver for booking co-ordination.
To send transactional push notifications (booking confirmations, status updates, OTP reminders).
To investigate and resolve disputes or complaints.
To comply with applicable laws, court orders, or requests from law enforcement authorities.
To maintain the safety, security, and integrity of our platform.
4. Phone Number Disclosure to Drivers
Important notice: Your registered mobile phone number is currently shared directly with the driver assigned to your booking. This is necessary for co-ordination (e.g., the driver calling you for directions or delivery confirmation). We do not use a phone-number masking or proxy-calling service at this time. By using the platform you expressly consent to this disclosure. We will update this policy if number masking is introduced.
5. What We Will Never Do
We will never sell, rent, or transfer your personal data to any third party for commercial purposes.
We will never use your data for advertising, behavioural profiling, or targeted marketing — by us or anyone else.
We will never share your data with any company outside the list in Section 6 below.
6. Data Sharing with Third Parties
Assigned driver — your name and phone number are shared to enable co-ordination for your booking.
Razorpay — your payment identifiers are shared with Razorpay (a PCI-DSS-compliant payment processor) solely to process transactions. Their privacy policy is at razorpay.com/privacy.
Mapbox — your map viewport interactions (zoom level, tile requests) are processed by Mapbox servers to render maps. Their privacy policy is at mapbox.com/legal/privacy.
Google (Sign-In only) — if you choose "Continue with Google", Google processes your ID token for authentication. Their privacy policy is at policies.google.com/privacy.
Firebase / Apple Push Notification Service — your device token is shared with these services solely to deliver push notifications.
Law enforcement or government authorities — only when legally compelled by a valid court order, subpoena, or applicable Indian law.
7. Cookies and Local Storage
The web application uses strictly necessary session cookies and local storage to keep you signed in and remember your theme preference. No advertising or tracking cookies are set. For full details, see our Cookie Policy.
Account data and booking history — retained for the duration of your account and for up to 3 years after closure, for legal, audit, and dispute resolution purposes.
Real-time driver location logs — retained for 90 days from the date of the trip, then permanently deleted.
Chat messages — retained for 1 year from the booking date.
Push notification tokens — deleted immediately upon logout or account deletion.
Payment identifiers — retained for 7 years in compliance with the Indian Accounting Standards and GST record-keeping requirements.
9. Security
We protect your data using industry-standard measures: HTTPS/TLS in transit, hashed tokens, HttpOnly cookies for session management, rate-limited OTP verification, and access controls restricting data to authorised personnel only. In the event of a personal data breach, we will notify affected users and the Data Protection Board of India within 72 hours of becoming aware of the breach, as required under the Digital Personal Data Protection Act, 2023.
10. Children's Data (Users Under 18)
The platform is accessible to users aged 13 and above. Users between the ages of 13 and 17 must have the consent of a parent or legal guardian to use the platform. By completing registration, a minor's parent or guardian confirms that they have reviewed and agreed to this Privacy Policy on behalf of the minor. We do not knowingly collect data from children under 13. If we discover that we have inadvertently collected personal data from a child under 13, we will delete it promptly.
11. Your Rights Under the DPDP Act, 2023
Right to access — you may request a summary of the personal data we hold about you.
Right to correction — you may request correction of inaccurate or incomplete data.
Right to erasure — you may request deletion of your personal data (subject to our legal retention obligations).
Right to withdraw consent — you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to nominate — you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Right to grievance redressal — you may lodge a complaint with our Grievance Officer (see Section 13).
To exercise any of these rights, email us at support@trike-mobility.com with the subject line "Data Rights Request". We will respond within 30 days.
12. Data Export and Account Deletion
You can download a copy of all personal data associated with your account from the "Data & Privacy" section in your profile. You may also permanently delete your account from that section; account deletion will trigger removal of all personal data subject to the retention obligations in Section 8.
13. Grievance Officer
In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer:
Address: 18, Kamaraj 1st Cross Street, Saligramam, Chennai – 600093, Tamil Nadu
We will acknowledge your grievance within 48 hours and resolve it within 30 days. If you are dissatisfied with our resolution, you may escalate to the Data Protection Board of India.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, notify you via in-app notification or SMS. Continued use of the platform after the effective date of the revised policy constitutes your acceptance.
15. Governing Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of the courts in Chennai, Tamil Nadu.