Privacy policy

YELLANGARI PRANAV SREEVATSA, operating Chaloo, is the data controller for the personal data described in this policy. Contact details are in the Business and Operator Information and the Contact section at the end of this page.

• Account data you provide directly: name, email address, phone number, and profile information.
• Ride data: bookings, ride requests, ride history, and ratings/reviews.
• Location data: boarding and drop-off GPS coordinates recorded by the driver's device during a ride, used to measure the distance a fare is based on, plus any origin/destination you search for on the map.
• Payment data: the outcome of each payment (amount, status, timestamp) and, for a driver, their UPI ID (encrypted at rest) — never your full card number, UPI PIN, or bank credentials, which Chaloo never receives (see Section 5).

Your data is used to match and facilitate rides, calculate fares, process payments, communicate ride and account updates, and improve the platform. We do not sell your personal data to third parties.

We use cookies to maintain your session, remember your preferences, and analyze platform usage. You can manage cookie preferences in your browser settings.

We share the minimum data necessary with the following providers, each acting under their own privacy and security terms:

• Your own UPI app (Google Pay, PhonePe, Paytm, or similar) — a passenger's UPI app receives the driver's UPI ID and the fare amount to complete the transfer directly with the driver's bank; Chaloo is not a party to that transfer and does not learn your card, UPI PIN, or bank credentials from it.
• Google Maps — receives coordinates and addresses you search or that are recorded during a ride, to calculate routes, distances, and display maps.
• Email service provider — receives your email address to deliver transactional email (password resets, booking and payment notifications).
• Infrastructure providers (database and caching hosts) — store platform data on our behalf and do not use it for their own purposes.

We retain account and ride data for as long as your account is active. Payment and financial records are retained for as long as required by applicable Indian law after the transaction (typically several years for financial/audit records), even if you delete your account, because those records exist to satisfy legal obligations, not platform convenience.

You have the right to access or correct your personal data at any time through your profile settings. To delete your account, contact support (below) with your request; we will process account deletion requests manually and confirm once complete, subject to the retention obligations in Section 6 for payment and financial records.

We implement security measures including encrypted storage of sensitive fields, encrypted connections (HTTPS/TLS) end to end, and access controls limiting who can view personal or payment data.

We may update this policy as the platform changes. The effective date at the top of this page reflects the last update. Material changes will be communicated through the platform.

If you have a concern about how your data is handled, contact us using the details below. We will acknowledge and respond to privacy-related requests within a reasonable time.