This Privacy Policy explains how ChalSaath, operated by Ctrl Shift Solutions
(Bengaluru, Karnataka, India), collects, uses, and protects your personal data when you use our
peer-to-peer ride-sharing platform. By using ChalSaath, you agree to this policy.
1 What Information We Collect
ChalSaath collects the following data during registration and use:
- Personal Information: Full name, date of birth, email address, mobile number.
- Profile Information: Profile photo (captured via live camera — no gallery uploads), gender.
- Identity Documents (optional): Aadhaar card, Driving Licence, Vehicle RC — collected only for KYC verification and trust score calculation.
- Location: Your approximate location during active rides, shared with your matched Car Owner or Rider for safety purposes.
- Device Information: FCM token for push notifications.
- Usage Data: Ride history, booking records, ratings, in-app chat messages, notification read status.
2 How We Use Your Information
We use your data to:
- Create and manage your ChalSaath account.
- Match you with Car Owners or Riders travelling the same route.
- Send ride notifications, booking confirmations, and safety alerts.
- Verify your identity through our KYC process.
- Calculate Trust Scores and display Verified badges.
- Enable in-app chat between matched ride participants.
- Investigate safety incidents, fraud, or Terms of Service violations.
- Comply with Indian law and cooperate with law enforcement when required.
- Send OTP verification and transactional emails via our branded email service.
3 What We Do NOT Collect
- Payment card numbers, bank account details, or UPI IDs — we have no payment gateway.
- Real-time live location tracking beyond active ride coordination.
- Your contacts list, call logs, or SMS messages.
- Any data from persons under 18 years of age.
4 How We Share Your Information
We share your data only in the following situations:
- With your matched ride partner: Your name, profile photo, vehicle details, and pickup/drop location.
- With admins: ChalSaath's internal admin team may view user profiles and KYC documents for safety, dispute resolution, and compliance.
- With law enforcement: When legally required under Indian law.
- With service providers: Firebase (Google), Resend.com, Google Cloud Vision API — these providers process data strictly on our behalf.
We do not sell your personal data to advertisers or third parties.
5 Data Retention
- We retain your personal data for as long as your account is active.
- After account deletion: profile data and ride history deleted within 30 days.
- KYC documents deleted within 30 days of account deletion.
- Chat messages may be retained up to 90 days for safety review.
- Certain records may be retained longer if required by law.
6 Your Rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:
- Access: Request a copy of the data we hold about you.
- Correction: Correct inaccurate or incomplete information.
- Erasure: Request deletion of your data.
- Grievance Redressal: File a complaint with our Data Protection Officer.
To exercise these rights, contact us at support@chalsaath.com. We respond to all valid requests within 30 days.
7 Data Security
- All data is stored on Google Firebase infrastructure with encryption at rest and in transit.
- Firebase Authentication manages all credentials — ChalSaath never stores passwords in plaintext.
- KYC documents are stored in Firebase Storage with private access controls.
- Despite these measures, no system is 100% secure. We will notify you of any significant breach as required by law.
8 Cookies & Tracking
The ChalSaath mobile app does not use browser cookies. We use Firebase Analytics and Firebase Crashlytics (anonymised crash reports) for app stability and improvement.
9 Children's Privacy
ChalSaath is for users aged 18 and above only. If we become aware that a minor has registered, their account will be immediately suspended. Please report such cases to support@chalsaath.com.
10 Third-Party Links
ChalSaath may display links to third-party websites. We are not responsible for their privacy practices. Please review their policies independently.
11 Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be notified via in-app notification. Continued use of ChalSaath after changes constitutes your acceptance of the revised policy.
12 Grievance Officer & Contact