Privacy Policy

1. Who we are

Doio is operated by Infora Softwares Private Limited, a company incorporated in India. We are the data fiduciary for the personal data described below, under the Digital Personal Data Protection Act, 2023.

2. What we collect

Everyone

• Your phone number, to create and sign in to your account. It is the only identifier required to use Doio.
• Profile details you choose to add — name, profile photo and gender. Gender is used only to offer Purple Taxi, our women-only ride option.
• Trips and bookings — pickup and drop locations, route, fare, vehicle type, cancellation reasons and ratings.
• Payments and wallet — wallet top-ups, trip payments and refunds. We keep a record of each transaction, not the card or UPI details used.
• Messages you exchange with your captain or rider in the in-app chat, and support tickets you send us.
• Safety alerts — if you use SOS, your location and trip details at that moment.
• Device information, including a push notification token, and diagnostic information when the app has a problem.

Captains

• Verification documents — driving licence, vehicle registration certificate (RC) and an ID proof (Aadhaar or PAN), as photos.
• A live selfie, used to verify you and shown to riders at pickup.
• Vehicle details — make, model, number plate and class.
• Bank details for withdrawing your earnings.

Self Drive

• If you list a vehicle: its details, papers and photos.
• If you rent a vehicle: the live photos of the vehicle taken at handover and return, which record its condition.

What we deliberately do not collect

• Card or bank credentials for payments. Card and UPI payments are handled entirely by our payment partner; we only see a transaction reference and its status.
• Your contacts, photos or files, other than the specific photos you choose to upload.

3. Location

Riders: your location is used while you use the app to set your pickup point, find captains near you and show your trip in progress.

Captains: while you are online, your location is collected continuously — including when the app is closed or in the background — so that we can send you trip requests nearby and so riders can track an assigned trip. Collection stops when you go offline. Android shows a persistent notification whenever this is happening.

You can turn location access off in your phone's settings at any time; booking and driving won't work without it.

4. Why we use it

• To run the service — signing you in, matching riders with captains, calculating fares, navigating trips, handling rentals and parcel deliveries.
• To process payments, wallet top-ups, captain earnings and payouts, and to meet our tax obligations.
• To keep people safe — verifying captains, responding to SOS alerts, investigating reports, and preventing fraud and abuse.
• To send you trip updates and important service messages.
• To meet legal obligations, including keeping financial records for the periods Indian law requires.

We do not sell your personal data, and we do not use it for third-party advertising.

5. Who we share it with

The other side of your trip. During a trip, the rider and captain see each other's name and pickup or drop details, can chat in the app and can call each other. Riders also see the captain's photo and vehicle details.

Service providers, only for the job they do for us:

• Razorpay — processes payments, wallet top-ups and captain payouts.
• MSG91 — delivers your one-time login codes.
• Google Maps Platform — maps, place search, routes and distances.
• Google Firebase — delivers push notifications.
• Amazon Web Services — hosts the service and stores uploaded images. Our infrastructure is located in India (Mumbai region).

We may also disclose data where we are legally required to, or where it is necessary to protect someone's safety.

6. How long we keep it

Your profile and content stay while your account is open. When you delete your account we remove your profile, photo, saved places, messages and, for captains, verification documents and bank details. Two things survive deletion because the law requires it: financial records of trips, payments and payouts, kept for the statutory period, and safety records, such as SOS alerts and enforcement actions, kept so that safety incidents can be investigated and a banned account cannot simply be recreated. See Delete your account.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us for a copy of your data, correct anything inaccurate, delete your account and data, or withdraw a consent you previously gave, such as location access. You can edit your profile and request deletion directly in the app. For anything else, write to the Grievance Officer below.

8. Security

Data is encrypted in transit and at rest. Verification documents are stored privately, are viewable only by authorised reviewers, and every access to them is recorded in an audit log. Access to production systems is restricted. No system is perfectly secure, but we take this seriously and will tell you promptly if a breach affects you.

9. Children

Doio accounts are for people aged 18 and over. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we close it and delete the data.

10. Changes

If we change this policy materially we will tell you in the app before the change takes effect. The date at the top always reflects the current version.

11. Contact us