Privacy Policy

Quick Ride operated by CoRide Mobility Private Limited. This Privacy Policy ("Privacy Policy" or "Policy") is effective as on 22-Oct-2026 ("Effective Date"). The Privacy Policy has been last updated on: 22-Oct-2026.

1. Introduction

CoRide Mobility Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at No.19 & 36/14K, KMJ AVEN, CHINNAPPANA HALLI VILLAGE, Marathahalli Colony, Bangalore, Bangalore North, Karnataka, India ("Company", "We", "Us" or "Our"), provides carpooling services under the name "Quick Ride Carpooling" through the Quick Ride mobile application, website and associated interface, which are owned and operated by iDisha Info Labs Private Limited ("iDisha"), pursuant to applicable arrangements between CoRide and iDisha. These carpooling services, together with our offline interactions such as emails, phone calls, or in-person communication, form the "Platform".

The Platform helps vehicle owners share journeys with co-Ride Takers travelling the same way and split the cost. This Privacy Policy explains what Personal Data ("Personal Data" or "Data") We collect, why We collect it, how We use, share and protect it, and the rights and choices You have. It forms part of Our Terms of Use.

This Privacy Policy is published in compliance with the Digital Personal Data Protection Act, 2023, as amended from time to time ("DPDP Act"), the Digital Personal Data Protection Rules, 2025, as amended from time to time ("DPDP Rules"), the Information Technology Act, 2000, as amended from time to time ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as amended from time to time ("SPDI Rules"), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended from time to time ("Intermediary Rules"), and other applicable regulations. All of the above shall collectively be referred to as "Data Protection Laws".

For the Personal Data described in this policy, We are the "Data Fiduciary" under the DPDP Act. "You" means any person who uses the Platform, whether as a vehicle owner (Car or Bike) offering a ride ("Ride Giver") or as a co-Ride Taker ("Ride Taker").

Please read this Policy carefully. If You do not agree with it, please do not use the Platform. Where the law requires Your consent, We will ask for it separately and clearly before We process Your Data. You do not give consent merely by reading this policy or by installing the app. The Platform currently offers it in English; to request another language, write to the contact set out in Section 18.

2. Personal Data We Collect

We collect only the Personal Data that We need to use to run the Platform and provide services. This includes:

  • Account information: Your name, date of birth, mobile number, email address, profile photograph, gender, and login credentials such as an OTP.
  • Identity verification information: Company name, profession, official email address, government issued ID, the type and last four digits of a government identity document, a selfie used to match You to that document, and the result of the verification. We do not store your full Aadhaar number. The selfie is processed to create a facial template that is used only to match You to your document and is deleted within 180 days of verification.
  • Ride Giver and vehicle information (Ride Givers only): Driving licence number and validity, vehicle type, vehicle registration number, make, model and colour, and insurance details.
  • Trip information: Pickup and drop locations, home and office addresses, route, date and time of the trip, seats offered or booked, trip status, and ratings and reviews You give or receive.
  • Location information: The precise location of your device while a trip is active or while You use a location-based feature, and your approximate location when the app is open.
  • Payment information: Your UPI ID or a token representing your payment instrument, transaction references and transaction amounts, and (for Ride Givers) the designated bank or UPI account to facilitate payouts of shared-cost savings accumulated by offering empty seats to co-riders. We do not store your card number or CVV; all card payments are securely managed and processed exclusively by our authorized third-party payment partner.
  • Safety and support information: Emergency contacts You choose to add, SOS alerts, incident reports, and Your communications with Our support team, including call recordings.
  • Device and usage information: Device model, operating system, app version, IP address, advertising identifier, crash reports, and how You use the app.
  • Contacts: Phone contacts that You choose to share only if You use the invite or referral feature.
  • Referral and endorsement information: Contact information and network details of your personal or professional acquaintances, as voluntarily provided by You, for the purpose of facilitating user endorsements, peer referrals, and community network building.
  • Mobile device ID / tokens: Device-specific credentials used to deliver real-time transaction updates, security alerts, and platform engagement notifications.
  • Social media handles: Links to your designated external social media accounts used to display authenticated professional or personal profile summaries on Our Platform.

We collect this information (a) directly from You, (b) automatically from your device when You use the Platform and have given the relevant permission, and (c) from Our identity-verification and payment partners when You are directed to them.

If You give Us the Personal Data of another person, such as an emergency contact, You confirm that You have their permission to do so and We will not be liable to obtain separate consent from such person.

We do not knowingly collect Data about your health, religion, caste, sexual orientation, or political views. We may also hold limited Personal Data of people who are not users, such as emergency contacts and nominees named by a user, people who contact Our support team or apply for jobs with us, and visitors to Our Website. We use that Data only for the purpose for which it was given to Us.

3. Why We Use Your Personal Data

We use your Personal Data only for the following specified purposes:

  • To create and secure your account and verify your identity and, for Ride Givers, your driving licence and vehicle.
  • To match Ride Takers and Ride Givers, show limited details to your match, enable live tracking, and let users rate each other.
  • To collect your share of the trip cost and pay out Ride Givers through Our payment partner.
  • To use your precise location for navigation, pickup coordination, route-deviation alerts, and safety during a trip.
  • To provide safety features such as the SOS button and trip sharing with your emergency contacts, and to investigate incidents and support requests.
  • To maintain the quality, security, and integrity of the Platform and to comply with legal and regulatory obligations.
  • To communicate with you about your account, trips, updates, offers, and service-related information, subject to your communication preferences.

Quick Ride also uses the data it collects to enable reliable and convenient ride sharing services, improve matching, support customer service, conduct research and development, send marketing or non-marketing communications, and assist with legal proceedings, where permitted by law.

4. CONSENT AND YOUR CHOICES
  • We process your Personal Data on the basis of your consent, except where the DPDP Act allows Processing without consent. Your consent will be free, specific, informed, unconditional and unambiguous, and given by a clear affirmative action, such as ticking a box or switching on a setting in the app. Each request for consent will tell You what Data is needed and for which purpose, and will link to this Privacy Policy and to the ways of withdrawing consent and contacting us.
  • You may use the core features of the Platform without consenting to analytics or marketing. Where a feature cannot work without particular Data, such as precise location during a trip, We will state the same when We ask for such Data.
  • You may withdraw your consent at any time, as easily as You gave it, through Settings > Privacy > Manage consents in the app or by writing to Us at support@quickride.in. After You withdraw your consent, We will stop Processing your Personal Data for that purpose within a reasonable time and will ask Our Data Processors to do the same, unless the law requires Us to keep it. Withdrawal does not affect Processing that happened before You withdrew. You will bear the consequences of withdrawal, which may include Our being unable to provide a feature or the whole service.
  • The DPDP Act allows Us to process Personal Data without consent in limited cases. We rely on these only where they apply, for example where You have voluntarily given Us your Data for a purpose You have told Us about and have not objected to, where We must comply with a law or a court or tribunal order, or where We must respond to a medical emergency or an immediate threat to the life or health of any person.
  • When Consent Managers registered with the Data Protection Board of India become available, You will also be able to give, review and withdraw your consent through a Consent Manager of your choice.
5. WHO WE SHARE YOUR PERSONAL DATA WITH
  • We share your Personal Data only as needed for the purposes in section 3, and only with:
  • Other users on your trip: a Ride Taker sees the Ride Giver's first name, photograph, rating, vehicle details, profession and office details, statistics of platform usage, route, fare, and live location during the trip. A Ride Giver sees the Ride Taker's first name, photograph, rating, profession and office details, statistics of platform usage, route, and pickup and drop points. Phone numbers are masked, and calls and chats take place within the app. Users may use this information only for the trip. Using it to contact, follow, harass or identify the other person after the trip, or sharing it with anyone else, breaches Our Terms of Use and may lead to removal from the Platform and, where the law requires, a report to the authorities.
  • Data Processors: service providers who process Data on Our behalf, such as cloud hosting, mapping, SMS, Email, and Payment gateways, identity and licence verification, payment, customer support and analytics providers. They receive only the Data they need and are bound by written contracts to follow Our instructions, to keep the Data secure and to delete it when We ask.
  • iDisha Info Labs Private Limited: For convenience of usage, the taxi services offered by iDisha Info Labs Private Limited. (“iDisha”) are hosted on the Quick Ride app. If You choose to use the taxi services, Your Personal Data will be shared with iDisha so that You can avail those services. iDisha acts as a separate fiduciary for the taxi services, and its handling of Your Data is governed by its own privacy policy.
  • Insurers. where applicable, insurers and claim handlers, to process a claim made by or against You.
  • Your emergency contacts. The live location of You and Your ride information, when you share a trip or press the SOS button.only when You share a trip or press the SOS button, the live locat
  • Authorities: Government bodies, courts and law-enforcement agencies, where the law requires or a lawful order is made. As an intermediary, we provide information or assistance to a lawfully authorised Government agency within 72 hours of receiving its written order stating the purpose.
  • Successors: a buyer or successor to Our business, if We merge, are acquired or sell Our business, who will be bound by this Policy. We will tell You when this happens.
  • A list of the categories of Data Processors We use is available on request.
6. TRANSFER OF PERSONAL DATA OUTSIDE INDIA
  • We store your Personal Data on servers located in India. Some of Our Data Processors, such as [SMS or analytics provider], may process Data outside India.
  • The DPDP Act permits transfers of Personal Data outside India except to countries or territories that the Central Government restricts by notification. We do not transfer Personal Data to any restricted country. We require overseas Data Processors to protect your Data at a standard no lower than t
7. LOCATION DATA AND SAFETY FEATURES
  • We collect your precise location only while a trip is active or You are using a feature that needs it, such as setting a pickup point. You can turn off location access in your device settings at any time, but We will then be unable to match or track trips.
  • Safety features, such as trip sharing and SOS, use your location and trip details only when You switch them on or press SOS.
8. CHILDREN AND PERSONS WITH DISABILITY
  • The Platform is meant for persons aged 18 years and above. No person under 18 may register as a Ride Giver or Ride Taker on their own account. A child may travel only on a booking made by a parent or guardian, who gives verifiable consent on the child's behalf before We process the child's Data. We verify that the parent is an adult by checking identity and age details We already hold or details issued by an authorised entity,.
  • If We learn that an account belongs to a person under 18,We will suspend it and delete the Data, unless the law permits Us to keep it. We do not process a child's Personal Data in any way that is likely to harm the child's Well-being. We do not track or monitor the behaviour of children, or direct advertising at them.
  • If You are a person with disability and have a lawful guardian, your guardian may give consent on your behalf. We will verify that the guardian is lawfully appointed before relying on their consent, as the DPDP Rules require.
9. HOW LONG WE KEEP YOUR PERSONAL DATA
  • We keep your Personal Data only for as long as it is needed for the purpose for which it was collected, and We erase it when You withdraw your consent or that purpose is served, unless the law requires Us to retain it. In general:
  • account and profile Data is kept while your account is active and for 84 months after it is closed, to handle disputes;
  • identity and licence verification records are kept for 84 months after account closure;
  • trip, rating and incident records are kept for 5 years from the trip, to deal with claims, disputes and legal proceedings;
  • payment and invoice records are kept for, as long as accounting and tax laws require;
  • your registration details are kept for 3yrs after you cancel or withdraw your registration, and information and records of content we remove or disable access to are preserved for 3yrs, or longer if a court or an authorised Government agency requires it, as Rule 3(1)(g) and (h) of the Intermediary Rules require, even if you ask us to erase them earlier
  • precise location trails are kept for 180 days after a trip ends, unless an incident is open; and
  • traffic Data and system logs are kept for at least one year, as the DPDP Rules require.
  • If your account stays inactive for 2 years, We may give You at least 48 hours' notice before erasing it, so that You can log in or ask for your Data. After erasure We may keep anonymised Data that can no longer identify You.
10. HOW WE PROTECT YOUR PERSONAL DATA
  • We take reasonable security safeguards in accordance with to prevent Personal Data breaches. These include encryption of Data in transit and at rest; masking or tokenisation of identifiers such as licence and payment details; role-based access controls and multi-factor authentication for Our staff; logging and continuous monitoring of access to Personal Data; tested backups; written contracts requiring Data Processors to apply equivalent safeguards; and staff training. Our information security programme follows well defined Information security policy and is audited annually.
  • No system is completely secure. Please keep your login details private and inform Us at once if You suspect misuse of your account.
11. PERSONAL DATA BREACH
  • If a Personal Data breach affects You, We will inform You without delay through the app and by SMS or email. Our message will describe what happened, when and where it happened, the likely consequences for You, the steps We have taken to limit harm, the steps You can take to protect yourself, and whom to contact.
  • We will also report the breach to the Data Protection Board of India without delay, followed by a detailed report within 72 hours, and report cyber security incidents to CERT-In within six hours, as the law requires.
12. YOUR RIGHTS
  • Under the DPDP Act, You have the right to:
  • access a summary of the Personal Data We process about You and Our Processing activities, and the identities of all other Data Fiduciaries and Data Processors with whom We have shared it, together with a description of the Data shared;
  • correction, completion and updating of your Personal Data that is inaccurate, incomplete or out of date;
  • erasure of your Personal Data when it is no longer needed for the purpose for which it was collected or You withdraw your consent, unless the law requires Us to keep it;
  • withdraw consent at any time, as described in section 4;
  • grievance redressal, as described in section 13; and
  • nominate another person to exercise your rights on your behalf if You die or become incapable of doing so.
  • You can exercise these rights through Settings > Privacy in the app or by writing to Our Grievance Officer in section 13. We may need to verify your identity before acting on a request. We will respond within 30 days and in any case within the time the DPDP Rules allow.
  • You also have duties under the DPDP Act. You must comply with applicable laws, must not impersonate another person, must not suppress material information when giving Us your Data, must not make a false or frivolous complaint, and must give Us only verifiably authentic information when exercising your rights.
13. GRIEVANCE REDRESSAL
  • If You have a question or complaint about how We handle your Personal Data , or wish to exercise your rights, please contact Our Grievance Officer:
  • Name: Shobhana BN
  • Designation: CTO
  • Address: No.19 & 36/14K, KMJ AVEN, CHINNAPPANA HALLI VILLAGE, Marathahalli Colony, Bangalore, Bangalore North, Karnataka, India
  • Email: nodalofficer@quickride.in
  • We will acknowledge your complaint within 24 hours and resolve it within 7 days, and in any case within the maximum period the DPDP Rules allow.
  • If You are not satisfied with Our response, or do not receive one in time, You may make a complaint to the Data Protection Board of India. The Board will ordinarily consider a complaint only after You have used Our grievance process.
14. ADDITIONAL COMPLIANCE INFORMATION
  • If the Central Government notifies us as a Significant Data Fiduciary We will appoint a Data Protection Officer based in India who reports to our board or equivalent body, publish their business contact details here, appoint an independent data auditor to carry out a data audit, and carry out periodic data protection impact assessments and audits, under Clause 10 of the DPDP Act (as clarified by the Removal of Difficulties Order dated 5 October 2026) and Rule 13 of the DPDP Rules.
  • We are an intermediary under the Information Technology Act, 2000. Our grievance officer will acknowledge your complaint within 24 hours and resolve it within 7 days. A complaint asking us to remove content that breaches Rule 3(1)(b) of the Intermediary Rules will be acted on within 36 hours, and a complaint about intimate or impersonating images of you within 2 hours. We will remove or disable access to unlawful content within 3 hours of a court order or a reasoned written notice from an authorised officer. If you are not satisfied with our decision, or we do not resolve your complaint in time, you may appeal to the Grievance Appellate Committee within 30 days of the Grievance Officer's communication. Where these periods are shorter than those in clause 13.2, the shorter periods apply to complaints covered by those Rules.
  • Our Terms of Use and this policy are available in English and in any language listed in the Eighth Schedule to the Constitution. You must not host, upload, display or share information that belongs to another person, impersonates another person, or is unlawful or prohibited under Rule 3(1)(b) of the Intermediary Rules. If you break our rules we may terminate or suspend your access, or remove or disable access to the information, and unlawful content may expose you to penalty or punishment under the IT Act or other law; offences that must be reported by law will be reported to the authorities.
15. COOKIES AND SIMILAR TECHNOLOGIES
  • Our Website uses cookies, and Our app uses software development kits (SDKs), to keep You logged in, remember your settings, measure performance and prevent fraud. Strictly necessary cookies work without consent. Analytics and marketing cookies and SDKs run only if You accept them in the cookie banner or in Settings > Privacy, and You can change your choice at any time. We do not use them to show You targeted advertising.
16. CHANGES TO THIS PRIVACY POLICY
  • We may update this policy from time to time, for example when Our services or the law change. We will notify You of material changes in the app and by email or SMS before they take effect. If a change requires your consent, We will ask for it again; continuing to use the Platform will not be treated as consent. The “last updated” date at the top shows the current version, and earlier versions are available on request.
17. OVERNING LAW
  • This Privacy Policy is governed by the laws of India. Subject to your rights under the DPDP Act, the courts at Bangalore shall have jurisdiction over any dispute arising from it.
18. CONTACT US
  • For any question about this Privacy Policy or your Personal Data, please write to support@quickride.in or to the Grievance Officer named in section 13.
Document