Legal

Privacy Policy

This policy explains what personal data Roycab collects, why we collect it, who we share it with, and the rights you have over it — in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1.Who this applies to

This policy applies to everyone who uses Roycab — riders who book seats, drivers who offer rides, and vehicle owners who list cars and manage drivers — across our mobile apps and website.

2.The data we collect

We only collect what we need to run the service safely. Depending on your role, this includes:

Category	What it covers
Account & identity	Your name, mobile number (verified by OTP), email, profile photo, and password/PIN if set.
Driver & owner details	Vehicle make/model, registration (number plate), seating capacity, driving licence and vehicle documents, and the drivers an owner adds to a fleet.
Location	Precise GPS location for pickup/drop, route matching, live trip tracking and ETAs — including in the background during an active trip so riders and owners can follow the ride.
Trip & booking data	Routes you post or book, seats, dates, fares, ride status and your trip history.
Payment data	Wallet balance, platform/booking fees, and transaction records. Card/UPI payments are processed by our secure payment partners — we do not store your full card details.
Communications	In-app messages, support requests, ratings/feedback, OTP and notification logs.
Device & usage	Device model, OS, app version, language, IP address, crash logs and basic usage analytics.

3.How we use your data

• Create and secure your account, and verify you by OTP.
• Match riders with drivers, show routes and seats, and confirm bookings.
• Provide live tracking, ETAs and OTP-based boarding on every trip.
• Process platform fees and wallet transactions, and keep records.
• Keep the service safe — verify drivers and vehicles, detect fraud or misuse, and support women-safety features.
• Send service messages (booking confirmations, ride updates, receipts) and, with your consent, offers.
• Provide customer support and resolve disputes.
• Improve the app, and meet legal and regulatory obligations in India.

4.Who we share it with

Between riders, drivers and owners

To make a ride happen, we share limited details between the people on that trip — for example, a rider and the assigned driver see each other's first name, photo, vehicle details and live location, and can contact each other through the app. Owners can see trips and status for vehicles in their fleet. Share only what you are comfortable sharing on a trip.

Service providers

We use trusted partners who process data on our behalf under contract — including map and navigation services, SMS/OTP providers, payment gateways, cloud hosting, and analytics and crash-reporting tools. They may only use the data to provide their service to us.

Legal & safety

We may disclose data to law-enforcement, transport authorities, courts or regulators when required by law, or to protect the safety, rights or property of users and the public.

5.Data retention

We keep your data only as long as your account is active or as needed to provide the service, resolve disputes, and meet legal, tax and safety obligations. When it is no longer needed, we delete or anonymise it. Some trip and transaction records are retained for the period required by Indian law.

6.How we protect it

We use reasonable security practices — encryption in transit, access controls and secure infrastructure — to protect your data, consistent with the IT Act, 2000 and the DPDP Act, 2023. No system is perfectly secure, but if a breach is likely to affect you, we will notify you and the Data Protection Board of India as required.

7.Your rights (DPDP Act, 2023)

As a Data Principal in India, you can:

• Access a summary of the personal data we hold about you and how we process it.
• Correct or update inaccurate or incomplete data.
• Erase your data where it is no longer needed and the law allows.
• Withdraw consent at any time (this won't affect processing already done).
• Nominate another person to exercise your rights in case of death or incapacity.
• Grievance redressal — raise a concern and get a timely response.

To exercise any right, email us at info@borgfy.com. You may also delete your account from within the app.

8.Permissions we ask for

The app asks for location (to find rides and track trips), notifications (ride updates and OTPs), and optionally camera/photos (profile and document uploads). You can change these in your device settings, though some features won't work without location.

9.Children

Roycab is not intended for anyone under 18. We do not knowingly collect data from children. If a minor needs to travel, they must do so under a verifiable parent's or guardian's account and consent, as required by the DPDP Act.

10.Cookies & the website

Our website uses minimal cookies and similar tools for basic functionality and analytics. You can control cookies through your browser settings.

11.Changes to this policy

We may update this policy as the service or the law evolves. We'll post the new version here with a fresh "Last updated" date, and for significant changes we'll notify you in the app.

12.Grievance Officer & contact

For any privacy question, request or complaint, contact our Grievance Officer:

This policy is governed by the laws of India. Any disputes are subject to the jurisdiction of the courts in India.