Privacy Policy

TheOneTouch is a ride-booking service that connects riders with nearby toto (e-rickshaw), bike and taxi drivers in one touch. It is operated by [Your legal business name], [Registered business address] (“TheOneTouch”, “we”, “us” or “our”).

This policy covers:

• TheOneTouch, the rider app (com.theonetouch.user)
• OneTouch Loco, the driver app (com.theonetouch.loco)
• this website

Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and its rules, we are the Data Fiduciary for the personal data described here. By creating an account or using our apps, you agree to this policy. If you don’t agree, please don’t use them.

We collect only what we need to verify who you are, match you with a ride and keep every trip safe.

If you ride TheOneTouch

Before you save someone as a passenger, please make sure they’re happy for you to share their name and number with us and their driver.

If you drive OneTouch Loco

Location

• Riders: your precise location while you use the app, to set your pickup point, show nearby vehicles, draw the route and follow your driver. When you search for a place, what you type is sent to Google Places for suggestions.
• Drivers: your precise live location while you are online or on a trip, so riders can be matched with you and watch you approach. It is removed when you go offline or lose connection.
• Weather: your coordinates, without your name or any account details, are sent to Open-Meteo to draw the live sky in the app.

We do not collect location in the background when you are not using the app or, for drivers, when you are offline.

In-ride chat

During an active ride, riders and drivers can exchange messages, photos (taken with the camera or picked from the gallery) and “share my location” pins. These travel only between the two people on that ride and are deleted when the ride ends. We keep no chat history.

Payments

Payments are processed by Cashfree Payments. See Payments & Cashfree for exactly what we receive.

Stored only on your phone

Saved places, saved passengers, appearance settings (light, dark or follow the sky), onboarding progress, graphics settings and your sign-in state are kept in the app’s storage on your device. We cannot see them. They are removed when you clear the app’s data or uninstall it.

Technical information

We do not use advertising SDKs or third-party analytics. Google services built into the apps (Firebase and Google Maps) may process technical information such as IP address, device model, operating system version, app instance identifiers and diagnostic data so that they can deliver and secure their services, under Google’s Privacy Policy.

• Create and secure your account, and verify identity: Aadhaar for riders, licence and RC for drivers. This also stops duplicate or fake accounts.
• Match riders with nearby drivers, quote fares and show routes, live ETAs and the vehicle on the map.
• Let the rider and driver on a trip contact each other by phone or in-app chat.
• Process payments, refunds and receipts through Cashfree Payments.
• Keep trips safe with the ride OTP and trip details, and look into incidents and reports.
• Provide customer support and resolve disputes.
• Meet our legal obligations and respond to lawful requests from authorities.
• Keep the apps running smoothly, for example by switching to lighter graphics on slower phones (that setting stays on your device).

We rely on the consent you give when you sign up and use the apps, and on the legitimate uses allowed by Section 7 of the DPDP Act, such as complying with the law or responding to an emergency that threatens someone’s safety. You can withdraw consent at any time (see Your rights).

We never use your data for advertising and we never sell it.

When you pay online, you enter your payment details on Cashfree’s secure checkout. They go directly to Cashfree Payments and your bank or card network, not to us.

• What we share with Cashfree: to create a payment we send your name, mobile number, email address and the order amount, which Cashfree needs to process the payment and prevent fraud.
• Refunds go back through Cashfree Payments to the method you paid with. How long they take depends on your bank.
• Cash: if you pay the driver in cash, no payment data is collected.
• Records: we keep transaction records for as long as tax and accounting laws require.

Cashfree Payments handles your payment data under its own Privacy Policy.

Between riders and drivers

• When you request a ride, your name (or your passenger’s), mobile number, pickup and drop points, fare, ride mode and any boost are offered to nearby drivers (up to five at a time, widening the search step by step) so one of them can accept. If you book for someone else, the driver also sees your name and number as the booker.
• Once a driver accepts, the rider sees the driver’s name (as on the licence), mobile number, vehicle type, make and colour, number plate, rating, trip count and live location until the ride ends.
• While a driver is online, their profile and live position are shared through our matching system with riders’ apps, so nearby riders can see available vehicles on the map and be matched with them.

With others

• Service providers that run parts of our service for us, listed in Service providers. They may use your data only to provide that service.
• Authorities, when the law, a court order or a lawful government request requires it, or when needed to protect someone’s safety or our legal rights.
• A new owner, if our business is merged or sold. Your data stays protected by this policy.

We have no servers of our own. These trusted providers run parts of the service for us, each under its own privacy policy:

Your phone asks you before an app can use any of these. You can change them at any time in your phone’s settings.

Our apps do not ask for your contacts, microphone, call logs or files.

• Location of data: rider accounts are stored on Google Cloud (Firebase) in Mumbai, India. Live ride data passes through Firebase servers in Singapore. Our service providers may process data outside India, as the DPDP Act permits.
• Encryption: all data travels over encrypted connections (HTTPS/TLS), and Google encrypts stored data.
• Strict access rules: each rider can read and change only their own account. Only the rider and driver on a ride, and drivers it is being offered to, can read that ride. Drivers can change only their own profile. Your verified Aadhaar record cannot be altered once saved.
• Minimal data: no Aadhaar numbers, OTPs, card numbers or UPI PINs are stored.
• Limited staff access: only people who need it to support you or run the service can access personal data.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

Under the DPDP Act, you have the right to:

To use any of these rights, email support@yourdomain.com from the email address or with the mobile number on your account. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.

You can ask us to delete your TheOneTouch or OneTouch Loco account and its data at any time.

1. Email usWrite to support@yourdomain.com with the subject “Delete my account”. Riders: send it from the Google account you sign in with. Drivers: include your registered mobile number.
2. We confirm it’s youWe may ask you to confirm a code sent to your registered mobile, so nobody else can delete your account.
3. We delete it within 30 daysWe’ll email you when it’s done.

Data kept on your phone (saved places, passengers, driver documents and settings) is removed when you sign out and uninstall the app.

Our apps are meant for people aged 18 and over, and we do not knowingly create accounts for children. If you believe a child has created an account, contact us and we will delete it.

A parent or guardian may book a ride for a child in their care using the passenger feature. The child’s name and a contact number are then shared with the driver for that trip only.

This website is a simple static page. It sets no cookies, runs no analytics or advertising trackers, and loads nothing from third parties. Our web host, Hostinger, may keep standard server logs (such as IP address, browser type and time of visit) for security and to keep the site running.

We may update this policy as our apps or the law change. When we do, we’ll change the “Last updated” date at the top. For significant changes, we’ll let you know in the app or by email before they take effect.