Privacy Policy

1. Information We Collect

To provide a secure, reliable, and compliant matching service, we collect the following categories of information:

• Account & Profile Details: Full name, phone number, email address, date of birth, gender, bio, and profile picture.
• Device Permissions: We may request access to your device's Camera and Photo Library strictly to allow you to upload profile pictures or vehicle images.
• Vehicle Information: Vehicle specification (car/bike), brand, model, registration plate number, seating capacity, and color (for verified drivers).
• Saved Addresses & Travel Preferences: Home/work locations and travel choices (AC/Non-AC, smoking/non-smoking, pet preferences, music, chat style).
• Route & Location Data: Pickup and drop-off coordinates inputted by users to calculate travel paths and suggest matching routes. Note: We utilize location APIs strictly for route calculation during active app usage and do not perform continuous background tracking.
• In-App Communications: Text messages exchanged within TripTalk’s internal messaging system, monitored solely to prevent fraud and ensure platform safety.

2. How We Use Your Information

We process your data strictly to fulfill our obligations as an intermediary platform:

• Authenticating user profiles securely via OTP or OAuth (Google Sign-In).
• Matching drivers and passengers traveling along compatible or intersecting routes.
• Facilitating secure in-app communication for pickup coordination.
• Enforcing our Terms of Service, preventing fraudulent activities, and ensuring the safety of the TripTalk community.

3. Data Sharing & Third-Party Services

We maintain strict confidentiality regarding your personal data. Sharing occurs only under the following conditions:

• With Co-Travelers: Your public profile (first name, picture, rating) and vehicle details (for drivers) are visible to matched users to facilitate the ride.
• With Trusted Third Parties: We use secure, industry-standard third-party providers for hosting (AWS/Render), map routing, and SMS delivery. These providers are bound by strict data processing agreements.
• Legal Compliance: We do not sell or rent your data. We may disclose information only if required by law enforcement, court orders, or government authorities under applicable legal frameworks (including the Indian IT Act, 2000).

4. Data Retention & Account Deletion

You retain full control over your data and can request deletion directly through the app settings or via our support email.

• Ephemeral In-App Messaging: To prioritize user privacy, TripTalk employs a 24-hour auto-deletion policy for all in-app chat messages. Messages exchanged between co-travelers for ride coordination are automatically and permanently purged from our servers 24 hours after they are sent, unless retained temporarily for an active safety or fraud investigation.
• Voluntary Deactivation: Deactivating your profile instantly hides your details from the public platform and initiates a 30-day grace period.
• Permanent Account Closure & Legal Safeguards: Upon a deletion request, our systems verify your activity. If you have no published or booked trips in the preceding 14 days, your data is erased immediately.
• 14-Day Trip Rule: For safety and dispute resolution, if you have participated in a ride within the last 14 days, your account undergoes a mandatory 30-day secure deactivation before our background systems permanently purge your records.

5. Children's Privacy

TripTalk is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that a user is under 18, their account and associated data will be immediately terminated and deleted.

6. Security Infrastructure

We implement robust, industry-standard security measures including HTTPS protocols, secure token storage (JWT), and cryptographic hashing (BCrypt) for passwords to protect your data from unauthorized access, alteration, or disclosure.