Privacy policy
Draft for review. This page is being checked before the YatryOne apps go live. Questions: support@yatryone.com
This policy explains how YatryOne (“we”, “us”) handles personal data in the YatryOne app (for riders and people sending goods), the YatryOne Driver app (for drivers and fleet owners) and this website. We follow India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. Who we are
YatryOne is a ride and goods transport platform based in Kalaburagi (Gulbarga), Karnataka, India. We decide how the data described here is used (the “Data Fiduciary” under the DPDP Act). Write to us at support@yatryone.com. Our Grievance Officer’s name will be published before the apps go live.
2. What we collect
Everyone who uses the apps
- Mobile number, to log you in with a one-time password (OTP) sent by text message. To stop misuse, Google may check that the login comes from the real app (Play Integrity or reCAPTCHA).
- Name you type in the app.
- Ride records: places, times, distance, fare, agreed prices, how it was paid, tips, ratings and any report or alert.
- Chat messages and voice notes sent inside a ride. Any run of 6 or more digits typed in the chat is hidden automatically, so phone numbers are not passed on.
- A push address (Firebase Cloud Messaging token) and an app installation ID, to send ride notices, and your app language.
We use no advertising, analytics or crash-reporting tools of our own, and the apps do not use the advertising ID.
Riders and people sending goods
- Location: your pickup, stops and drop. If you allow location, the app uses your phone’s position to find your pickup when you book, and to check that you are at the station when you take a station token. You can set the pickup on the map instead. We do not follow your position during the ride; the app follows the driver’s.
- A pickup note you write (phone numbers in it are hidden) and a spoken pickup hint you record, up to 15 seconds. Drivers offered your ride can read and hear them.
- Saved places (Home, Work) and up to three trusted contacts (name and mobile) you type in yourself. The app never reads your phone’s address book.
- Your gender, only if you choose to give it, to offer the woman driver option.
- That a ride is a hospital ride, if you choose that option, so drivers get it first.
- When you book for someone else, their name and mobile number; when you pick up a friend on the way, the friend’s name and, if you give it, their mobile number.
- For goods: what you send, its weight, and the names and mobile numbers of the receiver and of the people at any stops.
- For heavy truck loads: goods details and value, the receiver’s name and mobile, the e-way bill number, a photo of a mining transit permit when the goods need one, and a photo of your UPI payment proof if you add it.
Drivers
- Location while you are online and during a trip, even when the app is closed or not in use, to send you ride requests nearby, to check that you reached the pickup and the drop, and to show your vehicle to your rider, to anyone your rider shares a live trip link with, and to the YatryOne office during the trip. Location stops when you go offline or the trip ends. Your live position is kept only as the latest one: each update replaces the one before. Your position when you take a ride (and when the road to the pickup is worked out again), and for heavy trucks your position when you report at the loading and unloading yards, is kept with that ride record.
- Selfie and photos of your driving licence, Aadhaar card, vehicle RC, insurance and permit, for verification.
- Vehicle number and type, the area you work in, gender (for the woman driver option) and UPI ID (shown to your rider so they can pay you).
- For heavy trucks: licence details the office types from your licence photo (valid till, date of birth).
- Trip photos: goods at loading and at the drop; for heavy trucks also gate photos, weigh slips, the lorry receipt, proof of delivery, toll receipts and breakdown photos.
- Odometer readings for car hire by the hour.
- Your work on the app: when you are online, rides you accept, price offers, cancel reasons and strike records.
- Your invite code, the invite code you used when you registered (if any), and the invites you earned free pass days for.
Fleet owners
- Name, mobile number, business type (owner or transport firm), your area, GSTIN if you give it, and for heavy trucks the UPI ID shippers pay to.
- Your vehicles and their papers (photos of RC, insurance, permit, fitness, PUC and FASTag), your papers’ valid-till dates, and which driver drives which vehicle.
- For heavy trucks: where each truck usually stands (home base, a place on the map), its RC weights and permit type, return truck posts you make, and shippers’ ratings.
What we do not collect
- Card or bank details. Rides are paid to the driver in cash or by UPI in your own UPI app; YatryOne never handles the money.
- Your contacts list, text messages, call log, files or the other apps on your phone. For login, Android gives the app only the one message with your code. The apps see only the photos you pick or take for them.
3. Why we use it
- To create your account and log you in.
- To show fares, the road route and its time, match riders with nearby drivers and run each ride.
- To keep rides safe: PIN and delivery codes, SOS and silent alerts, plate checks, reports of extra cash.
- To prevent fraud and misuse: arrival checks, locking codes after wrong tries, strike rules.
- To verify drivers, vehicles and fleets before their first ride.
- To send ride notices, and to show your ride history, receipts, earnings and ratings.
- To answer support requests and complaints.
- To meet legal duties, for example records that transport and tax rules require.
We do not sell personal data and we do not use it for advertising.
4. Who can see what
- Drivers offered your ride see your name, pickup, stops, drop, fare, your pickup note and spoken hint, and for goods the receiver’s name. Only the driver who takes the ride gets the receiver’s mobile number, to deliver.
- During a ride, the rider sees the driver’s name, selfie, rating, vehicle, number plate and live position until the trip ends, and the driver’s UPI ID to pay. The driver sees the rider’s name, pickup, stops and drop. Phone numbers are not shown to each other.
- Live trip link: when you share a live trip link, anyone who has the link sees the vehicle, its number plate, the driver’s first name, the pickup and drop names and where the vehicle is, until 1 hour after the trip (at most 3 days). It never shows phone numbers or your name.
- Booking for someone else: the rider’s name is shown to the driver; the mobile number you give is seen only by you and the YatryOne office.
- Picking up a friend on the way: drivers offered the ride see your friend’s name and the pickup place; the friend’s mobile number, if you give it, is seen only by you and the YatryOne office.
- Driver invites: the inviting driver sees the new driver’s first name and how many rides are done.
- Heavy truck loads: truck owners offered your load see the area names, distance, weight, goods and price, and your rating and number of trips as a shipper, never the exact places, the receiver or your name. The owner of the truck you choose and its driver see the load with your name; the driver also gets the receiver’s mobile number, to deliver. You see the truck owner’s business name, GSTIN and UPI ID, to pay the owner.
- Return truck posts (a truck going back empty) are shown to everyone using the app: the owner’s business name and rating, the truck, the route, the date and the price.
- Fleet owners see the drivers on their own vehicles: the driver profile (name, mobile number, vehicle, area, UPI ID, gender, rating, account status such as a block for strike points, and for heavy trucks the licence’s date of birth and valid-till date), whether the driver is online or on a ride, the rides and fares of their vehicles, and the goods photos taken on those rides. They never see riders’ names or numbers on city rides.
- The YatryOne office sees live rides, ride chats, alerts, reports, and driver and fleet documents, to keep rides safe, settle complaints and verify drivers. An SOS or silent alert gives the office your ride, the driver’s live position, both phone numbers and your trusted contacts (and on a ride booked for someone else, that person’s name and mobile number), so it can get you help.
- Service providers that process data for us:
- Google Firebase (Google Cloud) runs the login, the database, photo and voice storage, our server functions and notifications. The database and files are stored in Google’s Mumbai region, India. Login text messages and notifications go through Google’s services.
- Maps and road routes come from Google Maps Platform. The map inside the apps is loaded from Google, which collects its own diagnostics, crash data, how the map is used and an anonymous usage ID. Your pickup, stops and drop, and the driver’s position on the way to the pickup, are sent to Google’s Routes service to find the road, its distance and time.
- Place names and place search use your phone’s own location service.
- Apps you choose to open: when you tap to pay by UPI, open directions, call, use WhatsApp or share trip details, that app gets what you send it, under its own privacy policy.
- Authorities, when the law requires it, for example a valid order from the police or a court.
5. How long we keep it
- Account details: while your account is open.
- Live trip links stop working 1 hour after the trip and are deleted with your account.
- Driver location: the live position only as the latest one, replaced at every update. The driver’s position when a ride is taken, and at heavy truck yards, stays with the ride record, like the places of each ride.
- Ride records, chats, trip photos, safety alerts and complaints: kept with the ride record. We will publish a deletion schedule once the legal periods (transport, tax and consumer-protection law) are confirmed. When you delete your account, your name on past rides is replaced with “Deleted user” or “Deleted driver”, and the personal details listed on Delete your account are removed.
- Driver and fleet document photos: while the account is open. A driver’s photos are deleted together with the account. A fleet’s paper photos are deleted straight after the account, and a vehicle’s papers when the owner removes that vehicle; if a storage error stops that, they stay until we remove them (write to us and we will check).
6. Your rights
- See and correct your details in the app (name, saved places, trusted contacts; drivers: UPI ID).
- Delete your account from the app at any time, or by email: see Delete your account.
- Withdraw location, notification or microphone permission in your phone’s settings. Riders can still book by setting the pickup on the map; drivers cannot go online without location.
- Ask us what personal data we hold about you, or name a person to act for you, by writing to us.
- Raise a complaint with our Grievance Officer, and if you are not satisfied, with the Data Protection Board of India.
7. Children
You must be 18 or older to create an account. A child may ride with an adult who booked the ride.
8. Security
Data travels encrypted (HTTPS) and Google stores it encrypted. Access is controlled by security rules that are tested with every change: for example a driver reads only their own records and the requests offered to them; a driver’s document photos are visible only to that driver and the office, a fleet’s vehicle papers only to its owner and the office, and a rider sees the driver’s selfie only during their ride. If a data breach affects you, we will tell you and the Data Protection Board as the law requires.
9. This website
This website sets no cookies and uses no analytics or tracking. Like any website, our hosting service (Google Firebase Hosting) handles your IP address to deliver the pages. A live trip page asks our server (Google Cloud, Mumbai) for the trip while it is open and stores nothing on your device. If you email us, we use your email address only to reply.
10. Changes
If we change this policy we will update this page and the date at the top, and tell you in the app for important changes.
11. Contact
Email support@yatryone.com. YatryOne, Kalaburagi (Gulbarga), Karnataka, India.
Grievance Officer: name to be published here before the apps go live. Until then, write to support@yatryone.com with “Grievance” in the subject.