Privacy Policy

How Poolr collects, uses, and protects your personal data — written to India's Digital Personal Data Protection Act, 2023. Your consent is granular and you can withdraw it anytime.

1What we collect and why — itemised

• Name & profile — so other users can recognise who they are pooling with.
• Phone / email — to sign you in, send service messages (ride alerts, OTPs), and support you.
• Gender — only to power the optional same-gender filter.
• Home / start location & destination — to match you with people going your way. Your precise home point is never shown publicly.
• Live location — used only while a ride is relevant (matching or an active trip), unless you separately opt in to background location for live trip-sharing.
• Vehicle & commute details — to estimate fuel cost-sharing and CO₂ saved.
• Driver documents (licence, RC, insurance, PUC) — where you choose to drive, for eligibility review. Verified through DigiLocker where available (see section 2), otherwise uploaded by you and stored privately.
• Ratings, reports & ride history — to keep the community safe and show your savings.

2Verifying drivers through DigiLocker

If you choose to drive, you may verify your driving licence and vehicle registration through DigiLocker, the Government of India's document platform. You start this yourself and authorise the share inside DigiLocker — we never request your documents in the background, and riders are never asked to verify this way.

We receive only the fields needed to confirm eligibility, and we keep only the outcome: whether the check passed, the last four digits of the document number, its expiry date, and the time of the check. The document itself is never saved to our systems. We do not receive or store your Aadhaar number. Where you verify this way, we no longer ask you to upload photographs of those documents, and any copies you uploaded earlier are deleted.

3How consent works

Agreeing to these terms is kept separate from consenting to data processing, and both are separate from any marketing you opt in to. Marketing by email, SMS and push is off by default — you turn on only the channels you want, and each can be switched off again at any time in Settings. We keep a timestamped record of what you consented to.

4Your rights

You have the right to access, correct, and erase your personal data, to nominate another person to exercise your rights, and to withdraw consent. When you withdraw consent or close your account, we stop processing and erase your data unless the law requires us to keep it. Exercise any of these from Settings or via our Grievance Officer.

5Who we share it with

We share only what a ride needs: the other party to a pool sees what's necessary to travel together (name, approximate pickup, vehicle). We use trusted service providers (hosting, messaging) under confidentiality. We do not sell your data. Driver documents are shared only with Poolr's reviewers, and the outcome of a DigiLocker verification is shown to no one outside Poolr.

6Retention and security

We keep personal data only as long as needed for the purpose it was collected, or as the law requires, and then erase it. Verification outcomes are kept while your driver account is active and are erased when it is closed. Documents you upload are held in private storage readable only by our reviewers. We apply reasonable security safeguards to protect it.

7Data breaches

If a personal-data breach occurs, we will notify the affected users and the Data Protection Board of India as required under the DPDP Act.

8Children

Poolr is for adults. We do not knowingly allow anyone under 18 to create an account.

9Grievances and the Data Protection Board

For any privacy question or complaint, contact our Grievance Officer (see Grievance Redressal). You may also complain to the Data Protection Board of India.