Privacy & Data Protection

Privacy Policy

Last Updated: August 26, 2026 • Effective Immediately

1. Introduction & Scope

Welcome to Ghumakkadh ("we", "us", "our", or "Ghumakkadh"), a digital mobility and logistics brand owned and operated by Hindustaan Innovations Pvt. Ltd., headquartered in Raipur, Chhattisgarh, India.

We are dedicated to safeguarding the privacy and personal data of every individual who interacts with our platform. This comprehensive Privacy Policy explains our practices regarding the collection, storage, processing, sharing, transfer, retention, and protection of your personal information across our applications and web platform:

Ghumakkadh Passenger & Sender App: For riders booking point-to-point transit and senders dispatching intra-city parcels.
Ghumakkadh Driver / Captain App: For commercial driver partners and vehicle fleet owners providing transportation and courier services.
Ghumakkadh Web Platform (ghumakkadh.in): For account support, service information, and customer assistance.

By accessing, downloading, or using any component of the Ghumakkadh Platform, you acknowledge that you have read and understood this Privacy Policy and agree to our processing of your information as described herein.

2. Information We Collect

We collect information necessary to connect passengers with drivers, calculate accurate fares, route intra-city parcels, maintain continuous passenger safety, and fulfill our statutory legal requirements under Indian law.

2.1 Identity & Contact Data

When you register an account, book rides, or onboard as a partner, we collect:

Full legal name, profile avatar/photograph;
Mobile phone number and email address;
Saved addresses (e.g. Home, Work, Frequent destinations);
Trusted Emergency Contacts (names and phone numbers for SOS alerts).

2.2 Driver Partner KYC & Fleet Verification Data

For commercial driver partners, compliance with the Motor Vehicles Act, 1988 requires collecting:

Commercial Driving License (DL) details, category, and expiry date;
Vehicle Registration Certificate (RC), commercial permits, and fitness certificates;
Vehicle insurance policy documents and Pollution Under Control (PUC) certificates;
Government-issued identity cards (Aadhaar Card, PAN Card, Voter ID);
Police background verification certificates and live facial KYC selfies.

2.3 Real-Time Geolocation & Route Telemetry

Location data is vital for ride-hailing and parcel logistics:

For Passengers & Senders: High-accuracy GPS coordinates collected while the app is active in the foreground to detect exact pickup pins, match nearest drivers, display live vehicle approach, and share trip progress with emergency contacts.
For Driver Partners: Continuous high-precision GPS tracking (both in foreground and background while marked "Online") to broadcast location to nearby riders, compute route distances, log waiting times, and calculate earnings.

2.4 Trip, Transaction & Parcel Data

For every booking, we automatically generate and record:

Pickup coordinates, destination coordinates, and intermediate stops;
Trip timestamps, route polylines, duration, average speed, and distance traveled;
Selected vehicle category (Bike, Auto, Cab Economy, Sedan, SUV);
Parcel package description, sender and recipient details, declared cargo weight;
Trip fare breakdown (Base rate, distance fee, time charge, dynamic surge, waiting fees, tolls, and GST).

3. Payment Details & Financial Security

All digital payment transactions on Ghumakkadh are processed through RBI-authorized payment aggregators and gateways, including Razorpay.

Zero Sensitive Storage: Ghumakkadh does NOT store complete credit/debit card numbers, CVVs, card PINs, or UPI security pins on internal servers.
Payment Tokens: We retain secure tokenized transaction IDs, payment statuses (Success, Pending, Failed), payment method types (UPI, Card, Wallet, Cash), and invoice numbers for accounting and dispute resolution.
Driver Settlement Accounts: For driver partners, we securely store bank account numbers, IFSC codes, and verified UPI IDs to process automated weekly and daily earnings payouts.

4. Communications & Telephony Masking

To protect the personal contact information of both passengers and drivers:

Encrypted Number Masking: When a rider calls a driver (or vice versa) through the app, phone calls are routed through a virtual telecom masking service. Neither party sees the other's personal mobile number.
Chat Transcripts: In-app text chats between riders and drivers during an active trip are recorded and stored for quality assurance, dispute resolution, and harassment investigations.
Transactional Notifications: We send essential OTPs, driver arrival alerts, trip receipts, and safety notifications via SMS, Push Notifications, and WhatsApp.

5. Technical, Device & Diagnostic Data

When you access our platform, our servers automatically log technical metadata, including:

IP address, network provider, and connection type (Wi-Fi/4G/5G);
Device model, manufacturer, hardware specifications, and OS version;
Unique device tokens for Firebase Cloud Messaging (FCM) push notifications;
App crash logs, performance diagnostics, and API response latencies to troubleshoot system failures.

6. How We Use Your Personal Data

We process personal information only for legitimate, transparent purposes:

Core Mobility & Logistics Services: Dispatching drivers, calculating optimal routes, managing parcel delivery chains, processing fares, and issuing tax invoices.
Passenger & Driver Safety: Verifying start-trip OTPs, monitoring SOS emergency signals, dispatching live coordinates to emergency contacts, and investigating safety incidents.
Customer Support & Dispute Resolution: Resolving fare discrepancies, lost-and-found items, cancellation reviews, and refund disbursements.
Fraud Prevention & Security: Detecting GPS spoofing, automated bot scripts, fake accounts, promotional voucher abuse, and compromised devices.
Legal & Regulatory Compliance: Complying with transport aggregator rules, taxation mandates (GST), and lawful orders issued by Indian courts or law enforcement.

7. How We Share Your Information

We do NOT sell, rent, or trade your personal data to third-party data brokers. We share data only with the following authorized entities:

Between Riders and Drivers:

During an active trip, riders see the driver's name, photo, vehicle make/model, license plate number, rating, and live GPS location. Drivers see the rider's first name, pickup coordinates, drop coordinates, and parcel delivery instructions.

Emergency Services & Contacts:

If the in-app SOS button is triggered, live vehicle location, route coordinates, driver details, and passenger information are transmitted to local police (112) and saved emergency contacts.

Authorized Technology Partners:

Mapping infrastructure (Google Maps API), payment processing (Razorpay), cloud hosting, telecom masking, and SMS gateway providers under strict non-disclosure obligations.

Law Enforcement & Legal Authorities:

When formally required by Indian statutory authorities, court orders, or Section 91 CrPC notices during criminal investigations or accident inquiries.

8. Data Security & Storage Architecture

We implement enterprise-grade technical and organizational measures to safeguard personal data:

Data in Transit: 256-bit TLS/SSL encryption for all data flowing between mobile applications and our backend servers.
Data at Rest: AES-256 encrypted databases with secure credential vaulting and isolated VPC network architecture.
Access Controls: Multi-factor authentication (MFA) and strict role-based access control (RBAC) restricting customer data access to authorized personnel.
Indian Cloud Servers: Data is hosted primarily in secure data center regions located within the Republic of India.

9. Data Retention & Anonymization

We retain personal data for as long as your account remains active or as required to fulfill the purposes set forth in this policy.

Trip & Invoice Records: Stored for a minimum of 7 years in compliance with the Goods and Services Tax (GST) Act and Indian accounting laws.
Driver Partner KYC Files: Retained during the partnership tenure and up to 3 years following deactivation for regulatory inspection.
Anonymized Telemetry: Technical logs stripped of personal identifiers may be stored indefinitely for traffic modeling and AI platform optimization.

10. Your Privacy Rights & Choices

Under applicable Indian data protection frameworks, you hold the following rights:

Access & Review: View your profile, ride receipts, transaction history, and saved addresses in the app.
Correction: Update personal contact information directly through profile settings.
Revoke Permissions: Disable location permissions or push notifications via your mobile device OS settings (note that disabling location disables ride booking).
Opt-Out of Marketing: Unsubscribe from promotional WhatsApp and SMS broadcasts by following opt-out links.

11. Account & Data Deletion

Users and driver partners may request permanent deletion of their account and associated personal data at any time through our dedicated Delete Account page or by emailing our privacy team.

Upon receiving a valid request, we permanently purge or anonymize your personal records within 30 days, retaining only those transaction and tax logs required by statutory law.

12. Children's Privacy

Ghumakkadh services are strictly intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we discover that a minor under 18 has created an independent account, we will immediately terminate the profile and erase all associated records.

13. Policy Updates & Notifications

We may revise this Privacy Policy periodically to accommodate new features, security protocols, or legislative updates. Whenever material revisions occur, we will notify you through in-app notifications or email and update the "Last Updated" date at the top of this document. Continued use of Ghumakkadh after changes take effect constitutes acceptance.

14. Grievance Redressal Officer

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Redressal Officer for Ghumakkadh is:

Designation: Data Protection & Grievance Redressal Officer

Legal Entity: Hindustaan Innovations Pvt. Ltd.

Email: support@hindustaan.in

Helpline: 0771-299-4005

Headquarters: CO: B-41, Sector-8A, Kamal-Vihar, Raipur (C.G.) - 492001, Chhattisgarh, India

By using Ghumakkadh, you confirm that you have read and agreed to this Privacy Policy.