Co-Ride Privacy Policy

This Policy explains what Personal Data we collect, why we collect it, how we use, share and protect it, and the rights and choices available to you.

Effective 31-Oct-2026 Last updated 31-Oct-2026 Co-Ride Carpooling

1. INTRODUCTION

1.1. CoRide Mobility Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at No.19 & 36/14K, KMJ AVEN, CHINNAPPANA HALLI VILLAGE, Marathahalli Colony, Bangalore, Bangalore North, Karnataka, India 560037 ( “Company”, “We”, “Us” or “Our”), owns and operates the Quick Ride mobile application and the website www.quickride.in, through which it provides carpooling and bike pooling services (which, together with the mobile application, the website and Our offline interactions with You, such as emails, phone calls or in-person communication, but excluding the taxi platform and taxi services of iDisha Info Labs Private Limited described in section 5, are the “Platform”). The Platform helps vehicle owners/ Ride Givers share journeys with passengers/ Ride Takers travelling the same way and split the cost.

1.2. With effect from 31-Oct-2026 (the “Transfer Date”), We acquired from iDisha Info Labs Private Limited (“iDisha”) the carpooling and bike pooling business carried on under the “Quick Ride” brand. As part of that transfer, iDisha transferred to Us the account details and carpool and bike pool records of users who registered before the Transfer Date. From the Transfer Date, We handle that Data under this Privacy Policy. Records of taxi bookings made before the Transfer Date were not transferred and remain with iDisha. A balance in the wallet operated by iDisha on the Quick Ride mobile application moves to Us only if You consent, as set out in Clause 9.8 of the Terms of Use.

1.3. This Privacy Policy explains what Personal Data (“Personal Data” or “Data”) We collect, why We collect it, how We use, share and protect it, and the rights and choices You have. It forms part of Our Terms of Use.

1.4. This Privacy Policy is published under Section 43A of the Information Technology Act, 2000 (“IT Act”), Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) and Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Rules”), each as amended from time to time, and other applicable laws (together, “Data Protection Laws”). The Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) will apply to Us from the dates notified by the Central Government, as explained in section 14.

1.5. We are the body corporate that collects, receives, stores, deals in and handles the Personal Data described in this Privacy Policy. “You” means any person who uses the Platform, whether as a Ride Giver or a Ride Taker. “Personal Data” means personal information as defined in the SPDI Rules, and includes sensitive personal data or information as defined in Rule 3 of the SPDI Rules (“SPDI”). Capitalised terms used but not defined in this Privacy Policy, such as “Ride Giver”, “Ride Taker”, “Ride”, “Booking” and “Wallet”, have the meanings given to them in the Terms of Use. Terms such as “Grievance Officer” and “Grievance Appellate Committee” have the meanings given to them in the Data Protection Laws.

1.6. Please read this Policy carefully. If You do not agree with it, please do not use the Platform. Where the law requires your consent, We will ask for it before We process your Data, as set out in section 4; You do not give consent merely by reading this policy or by installing the app. You may read this Privacy Policy in English or in any language listed in the Eighth Schedule to the Constitution of India. The Platform currently offers it in English; to request another, write to the contact in section 18.

2. PERSONAL DATA WE COLLECT

2.1. We collect only the Personal Data that We need to use to run the Platform and provide services. This includes:

(i). Account information: Your name, Date of birth, mobile number, email for communication, email address, profile photograph, gender, and login credentials such as an OTP;

(ii). Identity verification information: Company Name, Profession, Official email address, Government issued ID, the type and last four digits of a government identity document, a selfie used to match You to that document, and the result of the verification. We do not store your full Aadhaar number. The selfie is processed to create a facial template that is used only to match You to your document and is deleted within 180 days of verification. We ask for Your express consent before collecting it. If You choose to verify with Aadhaar, We use only a masked number or virtual ID, in line with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016, as amended from time to time. Verification may be conducted using any government ID, including Aadhaar, PAN, Voter ID, driving licence details;

(iii). Ride Giver and vehicle information (Ride Givers only): driving licence number and validity, vehicle type, vehicle registration number, make, model and colour, and insurance details;

(iv). Trip information: pickup and drop locations, home, office addresses, route, date and time of the trip, seats offered or booked, trip status, and ratings and reviews You give or receive;

(v). Location information: the precise location of your device while a trip is active or while You use a location-based feature, and your approximate location when the app is open;

(vi). Payment information: Your UPI ID or a token representing your payment instrument, transaction references and transaction amounts, and (for Ride Givers) the designated bank or UPI account to facilitate payouts of shared-cost savings accumulated by offering empty seats to co-riders. We do not store your card number or CVV, as all card payments are securely managed and processed exclusively by our authorized third-party payment partner. Payments are handled by Our payment partner;

(vii). Wallet information: the balance and transactions of Your Wallet, including any balance moved from the wallet operated by iDisha with Your consent;

(viii). Safety and support information: emergency contacts You choose to add, SOS alerts, incident reports, and your communications with Our support team, including call recordings;

(ix). Device and usage information: device model, operating system, app version, IP address, advertising identifier, crash reports and how You use the app;

(x). Contacts: phone contacts that You choose to share, only if You use the invite feature or referral features;

(xi). Endorsement and referrals: Contact information and network details of your personal or professional acquaintances, as voluntarily provided by You, for the purpose of facilitating user endorsements, peer referrals, and community network building;

(xii). Mobile Device ID / Tokens: Device specific credential utilized to deliver critical real-time transaction updates, security alerts, and platform engagement notifications directly to your mobile device;

(xiii). Social media Handles (LinkedIn, FB, X, Instagram, etc.): Links to your designated external social media accounts, utilised to display authenticated professional or personal profile summaries on Our Platform, thereby enabling other members to review your background and build mutual trust.

2.2. Of the Personal Data listed above, the following is SPDI under Rule 3 of the SPDI Rules: (a) passwords and login credentials; (b) financial information, such as Your bank account, UPI and other payment instrument details; (c) biometric information, such as the facial template created from Your selfie; and (d) any information about Your physical or medical condition that You choose to share with Us, for example in an incident report. We collect SPDI only with Your consent in writing. You give that consent electronically when You accept this Privacy Policy on registering, or on Your first use of the Platform after the Transfer Date, and when You provide the SPDI to Us. We use SPDI only for the purposes set out in section 3.

2.3. We collect this information (a) directly from You, (b) automatically from your device when You use the Platform and have given the relevant permission, (c) from Our identity-verification and payment partners when You are directed to them, and (d) from iDisha, for users who registered before the Transfer Date (see section 1).

2.4. If You give Us the Personal Data of another person, such as an emergency contact, You confirm that You have their permission to do so.

2.5. Except as stated above, We do not knowingly collect Data about your health, religion, caste, sexual orientation or political views.

2.6. We may also hold limited Personal Data of people who are not users, such as emergency contacts named by a user, people who contact Our support team or apply for jobs with Us, and visitors to Our Website. We use that Data only for the purpose for which it was given to Us.

3. WHY WE USE YOUR PERSONAL DATA

3.1. We use your Personal Data only for the following specified purposes:

(i). to create and secure your account and verify your identity and, for Ride Givers, your driving licence and vehicle;

(ii). to match Ride Takers and Ride Givers, show limited details to your match, enable live tracking and let users rate each other;

(iii). to collect your share of the trip cost and pay out Ride Givers through Our payment partner;

(iv). to use your precise location for navigation, pickup coordination and route-deviation alerts during a trip;

(v). to provide safety features such as the SOS button and trip sharing with your emergency contacts, and to investigate incidents and complaints;

(vi). to send You service messages about your trips, account and payments;

(vii). to detect and prevent fraud, misuse and security incidents, and to enforce Our Terms of Use;

(viii). to share Your email ID, mobile number and username with iDisha when You open the Taxi Tab (see section 5), so that iDisha can identify You;

(ix). to improve and analyse the Platform, but only where You have agreed;

(x). to send You offers, promotions and referral rewards, but only where You have agreed; and

(xi). to comply with laws, court orders and lawful requests of government authorities.

3.2. We will not use your Personal Data for any other purpose without first giving You a fresh notice and, where the law requires, obtaining your consent again.

3.3. We do not sell or rent your Personal Data to anyone.

3.4. Ratings and reviews are shown to other users as described in section 5. We may suspend, restrict or remove an account where verified reports, repeated low ratings, document mismatches or fraud indicators show that users' safety is at risk or Our Terms of Use have been breached. Some fraud and safety signals are generated by automated systems, but a member of Our team reviews every suspension or removal. You may ask for that review, and for the reasons for the decision, through the Grievance Officer in section 13.

3.5. We send promotional SMS, WhatsApp messages, calls, emails and push notifications only with your consent, and send promotional calls and SMS in line with the Telecom Commercial Communications Customer Preference Regulations, 2018. You may opt out at any time.

4. CONSENT AND YOUR CHOICES

4.1. We collect and use Your Personal Data with Your consent, which You give when You register and when You turn on a feature that needs particular Data. You consent to the collection of SPDI as set out in paragraph 2.2. This Privacy Policy tells You what Data We collect, why We collect it, who receives it, and Our name and address as the entity collecting and keeping it.

4.2. You may use the core features of the Platform without consenting to analytics or marketing. Where a feature cannot work without particular Data, such as precise location during a trip, We will state the same when We ask for such Data. You may also choose not to provide any Personal Data, including SPDI, but We may then be unable to provide the Platform or the feature that needs it.

4.3. You may withdraw your consent at any time, as easily as You gave it, through Settings > Privacy > Manage consents in the app or by writing to Us at support@quickride.in. After You withdraw your consent, We will stop processing your Personal Data for that purpose within a reasonable time and will ask Our service providers to do the same, unless the law requires Us to keep it. Withdrawal does not affect processing that happened before You withdrew. You will bear the consequences of withdrawal, which may include Our being unable to provide a feature or the whole service.

4.4. We may use or disclose Personal Data without Your consent only where the law permits it, for example to comply with a law or a court order, or where a Government agency lawfully authorised to obtain it asks for it in writing to verify identity or to prevent, detect, investigate or prosecute offences, including cyber incidents (see section 5).

5. WHO WE SHARE YOUR PERSONAL DATA WITH

5.1. We share your Personal Data only as needed for the purposes in section 3, and as described below, and only with:

(i). Other users on your trip: a Ride Taker sees the Ride Giver's first name, photograph, rating, vehicle details, profession and office details, statistics of platform usage, route, fare, and live location during the trip. A Ride Giver sees the Ride Taker's first name, photograph, rating, profession and office details, statistics of platform usage, route, and pickup and drop points. Phone numbers are masked, and calls and chats take place within the app. Users may use this information only for the trip. Using it to contact, follow, harass or identify the other person after the trip, or sharing it with anyone else, breaches Our Terms of Use and may lead to removal from the Platform and, where the law requires, a report to the authorities.

(ii). Service providers: service providers who process Data on Our behalf, such as cloud hosting, mapping, SMS, WhatsApp, email and telephony, payment gateways and payout partners, identity and licence verification, insurance, customer support and analytics providers. They receive only the Data they need and are bound by written contracts to follow Our instructions, to keep the Data secure to the standard required by the SPDI Rules, not to disclose it further, and to delete it when We ask.

(iii). iDisha Info Labs Private Limited: For Your convenience, the Platform contains a separate tab (“Taxi Tab”), which carries the branding specified by iDisha, through which iDisha provides taxi services (“Taxi Services”). We do not provide the Taxi Services. Each time You open the Taxi Tab, We share Your email ID, mobile number and username with iDisha so that iDisha can identify You and provide the Taxi Services. The Taxi Tab may use the location permission You have given to the Quick Ride mobile application. All other Data You provide while using the Taxi Services, including trip, location and payment details, is collected by iDisha on its own taxi platform, which We cannot access. iDisha is a separate body corporate and is responsible for that Data under the Data Protection Laws and its own privacy policy, which You must accept before You first use the Taxi Services.

(iv). Insurers: where applicable, insurers and claim handlers, to process a claim made by or against You.

(v). Your emergency contacts: Your live location and ride details, only when You share a trip or press the SOS button.

(vi). Authorities: Government agencies lawfully authorised to obtain information, on a written request stating the purpose, to verify identity or to prevent, detect, investigate or prosecute offences, including cyber incidents; and courts and authorities under a lawful order. As an intermediary, We provide information or assistance to a lawfully authorised Government agency within 72 hours of receiving its written order stating the purpose.

(vii). Successors: a buyer or successor to Our business, if We merge, are acquired or sell Our business or transfer it as a going concern, including to a group company, who will be bound by this Policy. We will tell You when this happens.

5.2. A list of the categories of service providers We use is available on request.

5.3. We do not publish Your SPDI. We disclose SPDI to a third party only with Your prior permission, where the disclosure has been agreed with You (including in this Privacy Policy and the Terms of Use), or where the disclosure is needed to comply with a legal obligation.

6. TRANSFER OF PERSONAL DATA OUTSIDE INDIA

6.1. We store your Personal Data on servers located in India. Some of Our service providers may process Data outside India.

6.2. We transfer Personal Data, including SPDI, to a person in India or outside India only if that person ensures the same level of data protection that We follow under the SPDI Rules, and only where the transfer is necessary to perform Our contract with You or You have consented to it. We retain within India the system logs that Indian law requires Us to keep here.

7. LOCATION DATA AND SAFETY FEATURES

7.1. We collect your precise location only while a trip is active or You are using a feature that needs it, such as setting a pickup point. You can turn off location access in your device settings at any time, but We will then be unable to match or track trips.

7.2. Safety features, such as trip sharing and SOS, use your location and trip details only when You switch them on or press SOS.

8. CHILDREN

8.1. The Platform is meant for persons aged 18 years and above. A person under 18 years may not register on the Platform. Their parent or lawful guardian may book a seat for them on a Ride, whether or not the parent or guardian travels with them. The parent or guardian is treated as the Ride Taker for that Booking, provides any Data about the child that We need for the Ride and remains responsible for the child during the Ride.

8.2. If We learn that an account belongs to a person under 18, We will suspend it and delete the Data, unless the law permits Us to keep it. We do not process a child's Personal Data in any way that is likely to harm the child's well-being. We do not track or monitor the behaviour of children, or direct advertising at them.

9. HOW LONG WE KEEP YOUR PERSONAL DATA

9.1. We keep your Personal Data only for as long as it is needed for the purpose for which it was collected, and We erase it when You withdraw your consent or that purpose is served, unless the law requires Us to retain it or We need it to deal with claims and disputes, as set out below. In general:

(i). account and profile Data is kept while your account is active and for 84 months after it is closed, to handle disputes;

(ii). identity and licence verification records are kept for 84 months after account closure;

(iii). trip, rating and incident records are kept for 5 years from the trip, to deal with claims, disputes and legal proceedings;

(iv). payment and invoice records are kept for as long as accounting and tax laws require;

(v). your registration details are kept for 3 years after you cancel or withdraw your registration, and information and records of content we remove or disable access to are preserved for 3 years, or longer if a court or an authorised Government agency requires it, as Rule 3(1)(g) and (h) of the Intermediary Rules require, even if you ask us to erase them earlier;

(vi). precise location trails are kept for 180 days after a trip ends, unless an incident is open; and

(vii). traffic Data and system logs are kept within India for at least one year.

9.2. If your account stays inactive for 2 years, We may close it after giving You at least 48 hours' notice, so that You can log in or ask for your Data. After closure, We keep Your Data as set out in paragraph 9.1, and after erasure We may keep anonymised Data that can no longer identify You.

10. HOW WE PROTECT YOUR PERSONAL DATA

10.1. We maintain reasonable security practices and procedures under Section 43A of the IT Act and Rule 8 of the SPDI Rules, through a documented information security programme and policies with managerial, technical, operational and physical security controls suited to the Data We hold.

10.2. No system is completely secure. Please keep your login details private and inform Us at once if You suspect misuse of your account.

11. PERSONAL DATA BREACH

11.1. If a Personal Data breach affects You, We will inform You without delay through the app and by SMS or email. Our message will describe what happened, when and where it happened, the likely consequences for You, the steps We have taken to limit harm, the steps You can take to protect yourself, and whom to contact.

11.2. We will also report cyber security incidents to CERT-In.

12. YOUR RIGHTS

12.1. Under the SPDI Rules, and Our Terms of Use, You may:

(i). review the Personal Data You have provided to Us;

(ii). correct, complete and update your Personal Data that is inaccurate, incomplete or out of date;

(iii). close Your account, after which We will keep Your Personal Data only as described in section 9;

(iv). withdraw consent at any time, as described in section 4; and

(v). seek grievance redressal, as described in section 13.

12.2. You can exercise these rights through Settings > Privacy in the app or by writing to Our Grievance Officer in section 13. We may need to verify your identity before acting on a request. We will respond within the periods required by the Data Protection Laws.

12.3. When the DPDP Act applies to Us, You will also have the rights given to a Data Principal under it, as described in section 14.

13. GRIEVANCE REDRESSAL

13.1. If You have a question or complaint about how We handle your Personal Data, or wish to exercise your rights, please contact Our Grievance Officer:

Name: Shobhana BN
Designation: CTO
Address: No.19 & 36/14K, KMJ AVEN, CHINNAPPANA HALLI VILLAGE, Marathahalli Colony, Bangalore, Bangalore North, Karnataka, India 560037
Email: nodalofficer@quickride.in
Phone: +91 9364789183

13.2. Complaints about how iDisha handles Data collected through the Taxi Services should be raised with iDisha under its privacy policy. If We receive such a complaint, or a request about that Data, We will forward it to iDisha.

14. ADDITIONAL COMPLIANCE INFORMATION

14.1. Digital Personal Data Protection Act, 2023: The provisions of the DPDP Act and the DPDP Rules are being brought into force in phases under notifications issued by the Central Government on 13 November 2025. Until the provisions that govern the processing of Your Personal Data apply to Us, We handle Your Personal Data under the IT Act and the SPDI Rules as described in this Privacy Policy. When those provisions apply, We will process Your Personal Data in accordance with the DPDP Act and the DPDP Rules, You will have the rights of a Data Principal under them, including the rights to access information about Your Personal Data, to correction and erasure, to grievance redressal and to nominate another person, and You may complain to the Data Protection Board of India. We will update this Privacy Policy, and notify You, before those provisions take effect.

14.2. You must not host, upload, display or share information that belongs to another person, impersonates another person, or is unlawful or prohibited under Rule 3(1)(b) of the Intermediary Rules (see Clause 10 of the Terms of Use). If You break Our rules We may terminate or suspend your access, or remove or disable access to the information, and unlawful content may expose You to penalty or punishment under the IT Act or other law; offences that must be reported by law will be reported to the authorities.

15. COOKIES AND SIMILAR TECHNOLOGIES

15.1. Our Website uses cookies, and Our app uses software development kits (SDKs), to keep You logged in, remember your settings, measure performance and prevent fraud. Strictly necessary cookies work without consent. Analytics and marketing cookies and SDKs run only if You accept them in the cookie banner or in Settings > Privacy, and You can change your choice at any time. We do not use them to show You targeted advertising.

16. CHANGES TO THIS PRIVACY POLICY

16.1. We may update this policy from time to time, for example when Our services or the law change. We will notify You of material changes in the app and by email or SMS before they take effect. If a change requires your consent, We will ask for it again; continuing to use the Platform will not be treated as consent. The “last updated” date at the top shows the current version, and earlier versions are available on request.

17. GOVERNING LAW

17.1. This Privacy Policy is governed by the laws of India. Subject to Your right to approach a consumer commission or any other forum available under law, the courts at Bengaluru, Karnataka shall have jurisdiction over any dispute arising from it.

18. CONTACT US

18.1. For any question about this Privacy Policy or your Personal Data, please write to support@quickride.in. If the issue is not resolved and you want to go to next level, reach to supportescalation@quickride.in. If still not resolved then you can reach to the Grievance Officer named in section 13.