Privacy policy
This policy explains how Tripzok handles personal data when you use the customer app, the partner app or this website. We follow India's Digital Personal Data Protection Act, 2023 and the rules made under it, and we keep collection to what a safe trip actually needs.
1. Scope
This policy covers the Tripzok apps and tripzok.com. It does not cover what a partner or a third-party service does with your data outside the platform — for example if you choose to share your trip link in a messaging app.
The data fiduciary is the company operating Tripzok. Its registered details are on every invoice and available from privacy@tripzok.com.
2. What we collect
| Category | Examples | Why it is needed |
|---|---|---|
| Account | Mobile number, name, email (optional), language | Sign-in by OTP, receipts, support contact |
| Trip | Pickup, drop, route, distance, timestamps, fare, service type | Matching, pricing, receipts, dispute resolution |
| Location | Precise GPS while the app is in use and, for partners, while online | Navigation, live tracking, safety |
| Payment | Method, masked card or UPI reference, wallet balance | Processing and refunds — never your full card number |
| Device | Model, OS version, app version, device identifier, IP address | Fraud prevention, crash diagnosis, support |
| Partner KYC | Licence, RC, insurance, identity and bank details | Mandatory verification before activation |
| Support | Messages, call logs with the support desk, complaint details | Resolving issues and safety review |
| Parcel and goods | Declared contents, weight, handover OTP, photos where used | Safe handover and claims |
We do not collect your contacts, photo library or microphone unless you deliberately attach something to a support message.
3. Location data
Customers: location is used while you pick a point on the map, while a trip is active, and for a short period after a trip ends so we can resolve safety reports. We do not track you in the background when no trip is active.
Partners: location is used while you are online and between accepting an offer and completing the trip. Going offline stops collection. Partners should be aware that ETA accuracy, incentives and safety checks all depend on this.
You can withdraw location permission in your phone settings. Doing so stops the app from working as intended — you cannot be picked up or matched without a location.
4. Why we use your data
- To create your account, verify your number and keep it secure.
- To match you with a partner, calculate the fare and show live progress.
- To keep trips safe: PIN verification, SOS routing, sharing a trip with the people you choose.
- To take payment, issue receipts, settle partner payouts and handle refunds.
- To investigate complaints, fraud and safety incidents, and to meet legal obligations.
- To improve the product: aggregated trip statistics, crash reports and feature usage. Analytics never include your precise location history.
- To send service messages — trip updates, receipts, safety notices — and, if you opt in, offers. You can opt out of marketing at any time.
We rely on your consent for optional things such as marketing and analytics, and on the legitimate uses recognised by law for the core service — a ride cannot be provided without a pickup point.
5. Who we share with
| Recipient | What they receive |
|---|---|
| The assigned partner | First name, pickup and drop, trip PIN (entered by you), masked phone number for calls routed through the app |
| Payment and wallet providers | Transaction identifiers and amounts — not your full card details |
| Cloud and mapping providers | Encrypted trip and location data processed on our instructions |
| Communication providers | Your number, to deliver OTPs and trip messages |
| Law enforcement or regulators | Only where legally required, or where needed to respond to a credible safety threat |
| Insurers | Trip and incident details, when a claim is opened |
We do not sell personal data. Processors act on written instructions and are bound by confidentiality and security obligations.
6. What partners see
Before pickup a partner sees your first name, the pickup and drop points, and a contact number that is masked or routed through the app. After the trip the number is masked again. Your full address history, saved places and payment details are never shown to a partner.
7. Cookies and this website
tripzok.com is a static site. It sets no advertising cookies and loads no third-party tracking scripts. Fonts and images are served from this domain, so visiting the site does not report you to another company. If we add analytics later, this section will say so before it goes live.
8. How long we keep data
| Data | Retention |
|---|---|
| Trip records and receipts | As long as tax and accounting law requires, then deleted or anonymised |
| Support conversations | Up to 24 months from the last message |
| Safety incident records | Longer where a claim, investigation or legal proceeding is open |
| Precise location history | Short-lived; retained in detail only for the trip and any open incident |
| Partner KYC documents | For the duration of the partnership plus the statutory period after it ends |
| Marketing preferences | Until you withdraw consent |
When a deletion request is honoured, residual copies in backups are removed on the normal backup rotation cycle.
9. Your rights
- Access — ask for a summary of the personal data we hold about you.
- Correction — fix inaccurate details, including your name and number.
- Erasure — ask us to delete your account and data that we are not required to keep. Use the deletion page.
- Withdraw consent — for marketing, analytics or optional permissions, at any time.
- Nominate — name someone who may exercise these rights if you die or become incapacitated.
- Complain — to our grievance officer, and to the Data Protection Board of India if you are not satisfied.
We respond to verified requests within the period required by law. We may ask you to confirm control of your registered number first, so that nobody else can request your data.
10. Security
Data is encrypted in transit, access is role-limited and logged, and KYC documents are stored with stricter access than trip data. Staff access is granted per case, not by default. If a personal data breach affects you, we notify you and the authorities as required, and we tell you what we know and what we are doing about it.
11. Children
Tripzok is not intended for anyone under 18 to use independently. A minor travelling must be accompanied by an adult account holder. If we learn that we hold data of a child without valid consent, we delete it.
12. Changes
We update this policy when the product or the law changes. Material changes are notified in the app before they apply, and the version and date at the top of this page always describe the current text. Earlier versions are available from privacy@tripzok.com.
13. Contact
Privacy questions and requests: privacy@tripzok.com.
Unresolved complaints: our grievance officer.
General support: support@tripzok.com.