This policy explains what personal data the GO 96 app (for passengers and drivers) and its website collect,
why, who we share it with, how long we keep it and the rights you have. GO 96 is operated by
[Legal entity name], [Registered business address] (“we”, “us”). For the purposes of India’s Digital Personal Data
Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for this data.
1. Data we collect
Account and profile
- Mobile number — used to create your account and to log in with a one-time password (OTP) sent by SMS.
- Name, email address, gender and an emergency contact number, which you give when you sign up or edit your profile.
- Passengers may also add a profile photo and saved places (for example “Home” or “Work”).
- Your role (passenger or driver) and account dates.
Location
- Passengers: the pickup and drop-off places you choose, and your precise (GPS) location when you use
the map to set a pickup point or see nearby cabs. While a trip is active — from booking until it ends — the app sends
your live location so the driver can find you, and for trip sharing and SOS. We do not store passenger location when no trip is active.
- Drivers: your precise live location while you are online in the driver app and during trips, so we can
offer you nearby rides and show your position to your passenger. Your last known position is stored while you are online and cleared when you go offline.
- Place searches and map positions are sent to Google Maps Platform (Places, Geocoding, Distance Matrix) to find addresses and estimate routes and fares.
Driver verification (KYC)
- A selfie, your driving licence number, vehicle registration number and type, a photo of the front of your vehicle
showing the number plate, and documents you upload (such as licence, RC or insurance) with their expiry dates.
- When you take these photos, the app checks them automatically on your phone: that the selfie shows one face, and that the
vehicle photo shows a car whose number plate matches the vehicle number you entered. This check runs on your device only;
no face template or biometric identifier is created or stored, and we do not use your photo to identify you.
- These are reviewed by the GO 96 owner/administrator to approve your account and to remind you before a document expires.
Trips, ratings and payments
- Trip details: pickup and drop-off addresses and coordinates, times, fare estimate and final fare, surge applied,
status, cancellation reasons and the 4-digit ride-start code.
- Ratings (1–5 stars) and any comments you leave about a trip, and ratings others leave about you.
- Payment records: payment mode (cash or UPI), amount and status, and — for drivers — daily cash settlement records with the owner.
- We do not collect or store card numbers, UPI PINs or bank log-ins. For UPI, the app shows the
owner’s UPI ID / QR code and you pay inside your own UPI app; the driver then confirms that the payment was received.
Safety features
- Share trip: creates a private, hard-to-guess link (
go96taxi-production.up.railway.app/track/…). Anyone with the link can see the
trip status, pickup and drop-off, the driver’s name and vehicle number, and the live positions of the vehicle and passenger
while the trip is active. Phone numbers are not shown. Locations stop being shown when the trip ends, and the link expires after 12 hours.
- SOS: sends an SMS to the emergency contact saved in your profile with the name and phone number of the
person raising the alert, their live location (a map link), a live-tracking link, the trip status, pickup and drop-off,
the driver’s name, phone number and vehicle, and the passenger’s name and phone number. The GO 96 owner/administrator is alerted at the same time.
Device and technical data
- A Firebase Cloud Messaging (FCM) push token for your device, the device platform, and the IP address and time of each login.
- Records of the SMS, push notifications and emails we send you (recipient, message type, time and delivery status).
- Server logs used for security and troubleshooting, which can include phone numbers, IP addresses and account IDs.
App permissions
Location (to set pickups, find nearby cabs and track trips), notifications (ride updates), and camera / photos (driver
verification photos and profile photos). You can turn permissions off in your phone’s settings, but some features will stop working.
2. Why we use it
- To create and secure your account and log you in (OTP).
- To match passengers with the nearest available driver, show each other’s position, run the trip and calculate the fare.
- To verify drivers and keep their documents up to date.
- To record payments and cash settlements, issue receipts and meet accounting and tax obligations.
- For safety: SOS alerts, trip sharing and handling complaints, disputes and incidents.
- To send service messages (OTP, ride updates, receipts) by SMS, push notification or email.
- To keep the service working and secure, and to prevent fraud and misuse.
We do not sell your personal data and we do not use it for advertising.
3. Legal basis and consent
We process your personal data on the basis of the consent you give when you sign up and when you grant app permissions
(section 6 of the DPDP Act), and for legitimate uses permitted by section 7 — for example to comply with law, to respond to a
medical emergency or a threat to someone’s life or safety (such as an SOS alert), and for the purpose for which you
voluntarily provided the data. You can withdraw consent at any time by deleting your account (see section 8) or turning off
permissions; this does not affect processing that happened before, and some records must still be kept as described in section 6.
4. Who we share it with
- Between passenger and driver during a trip. The driver sees your name, pickup and drop-off, and your live
location until pickup. The passenger sees the driver’s name, vehicle type and number, rating and live location, and can call the
driver during an active trip. Each can rate the other.
- The GO 96 owner/administrator, who runs the service and can see accounts, trips, payments, settlements,
driver verification documents and SOS alerts.
- Your emergency contact and anyone you share a trip link with, as described above, when you use those features.
- Service providers who process data for us:
- Railway (railway.app) — hosting of our servers and database;
- Google — Firebase Cloud Messaging (push notifications), Google Maps Platform (maps, place search, geocoding and route
estimates) and Gmail (emails, such as sign-up codes);
- SMS: our text messages are sent from an Android phone that we operate as an SMS gateway, through its mobile network
operator. Message content passes through that operator, and the gateway phone may keep a copy in its message history.
- Authorities, when required by law or a valid legal request, or to protect someone’s safety.
Our servers and those of our providers may be located outside India. Where data is transferred abroad we do so as permitted under the DPDP Act.
5. Security
Data is sent over encrypted connections (HTTPS). Log-in uses one-time passwords and short-lived access tokens; each feature
checks your role (passenger, driver or owner); driver documents are visible only to you and the owner/administrator; trip links are
random and expire. No system is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of
India and affected users as the DPDP Act requires.
6. How long we keep it
| Data | Kept for |
|---|
| Account and profile (phone, name, email, gender, emergency contact, photo, saved places) | Until you delete your account. Then erased immediately. |
| Driver verification (selfie, vehicle photo, documents, licence and vehicle numbers) | Until you delete your account. Then erased immediately. |
| Live location | Held in server memory only: drivers until they go offline (or 2 hours without an update); passengers only during an active trip (at most 2 hours after the last update). Cleared on account deletion. |
| OTP codes | 5 minutes. |
| Trip-share links | 12 hours; no location is shown once the trip ends. |
| Device push tokens and login sessions | Until you log out or the token stops working; deleted with your account. |
| Trip, payment and cash settlement records | As long as Indian accounting and tax laws require (up to 8 years), and for handling disputes.
When you delete your account these records are kept without your name, phone number, email, UPI ID or comments; for passengers, pickup and drop-off addresses are removed and coordinates are reduced to about 1 km precision. |
| Star ratings | Kept without your identity (they make up drivers’ average ratings); comments are deleted with your account. |
| Message delivery records | Kept for operations; your phone number and push tokens are removed when you delete your account. |
| Server logs | Kept by our hosting provider for a limited period under its log-retention policy. |
7. Your rights
Under the DPDP Act you have the right to:
- Access a summary of your personal data and how it is processed — most of it is visible in the app; for a copy, contact us.
- Correction and updating — edit your profile in the app, or contact us for anything you cannot change yourself.
- Erasure — delete your account (section 8).
- Grievance redressal — contact our Grievance Officer (section 10).
- Nominate another person to exercise your rights in the event of your death or incapacity.
If you are not satisfied with our response, you can complain to the Data Protection Board of India.
8. Deleting your account
In the app: Profile → Delete account. Without the app: use the account deletion page
and confirm with a code sent to your registered mobile number. An account cannot be deleted while a ride is in progress, or — for
drivers — while collected cash has not yet been settled with GO 96. What is erased and what is kept is described in section 6.
9. Children
GO 96 is only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has
created an account, contact us and we will delete it.
We will acknowledge your request and respond within the time required by the DPDP Act and its rules.
11. Changes to this policy
We may update this policy when the app or the law changes. We will change the effective date above and, for significant changes,
tell you in the app or by SMS before they take effect.