Privacy‐Policy

PickupKaro Privacy Policy Last updated: 25/10/2025

This Privacy Policy describes how PickupKaro (“Company”, “we”, “our”, or “us”) collects, uses, discloses, and protects information when you use our mobile application and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect Account Information Name, email, phone number, address, profile photo, and user ID. Collected during registration and profile updates via our in‑app forms and APIs. Authentication and Device Identifiers Access tokens, refresh tokens (stored in device storage via AsyncStorage). Device identifiers to help detect fraud and secure sessions. Location Information Foreground device location (latitude/longitude, accuracy, speed, timestamp) to find nearby captains, show pickup/destination, track ride progress, and improve maps. Reverse geocoding requests are sent to Google Maps APIs to obtain addresses from coordinates. Ride Information Ride creation details, pickup/drop coordinates and addresses, ride status, assigned captain info, fare estimates, ride completion (including OTP verification), ride history. Favorites and Search User-saved favorite locations and search inputs to improve convenience. Notifications Firebase Cloud Messaging (FCM) token to deliver notifications (e.g., driver selection, ride status). Local notification interactions (e.g., accept/reject driver actions). Usage and Log Data Basic app event logs, API request metadata, error reports to diagnose and improve functionality. How We Use Your Information Provide and Operate the Service Account creation, authentication, session management. Match you with nearby captains, estimate fares, complete rides (including OTP flow). Display maps, addresses, and routing information. Communications Send transactional push notifications (ride status, driver assignment). Send service-related messages (security, policy updates). Safety, Security, and Support Detect, prevent, and respond to fraud, abuse, and safety incidents. Troubleshoot issues, monitor performance, and improve reliability. Legal and Compliance Comply with applicable laws and enforce our Terms and policies. Legal Basis for Processing Where required by law, we process your information based on:

Contractual necessity (to provide the Service you request). Legitimate interests (safety, security, improvement). Consent (e.g., notifications on Android 13+, location access). Legal obligations (where applicable). Sharing and Disclosure We share your information only as described below:

Service Providers Cloud hosting, analytics, customer support, notification delivery, and mapping/geocoding service providers who process data on our behalf under confidentiality obligations. Drivers/Captains Limited ride-related details necessary to facilitate the ride (e.g., pickup/drop locations, contact name, and necessary identifiers). Third‑Party APIs and SDKs Google Maps Platform (maps, geocoding) to convert coordinates to addresses and support map features. Firebase Cloud Messaging to deliver push notifications. Legal and Safety When required by law, legal process, or to protect rights, safety, or property. Business Transfers In connection with a merger, acquisition, or asset sale, subject to this Policy. We do not sell your personal information.

Third‑Party Services Google Maps Platform Used for maps and geocoding. Data sent may include location coordinates and addresses. Policies: https://policies.google.com/privacy Firebase Cloud Messaging Used to send push notifications. Data sent may include FCM tokens and notification metadata. Policies: https://firebase.google.com/support/privacy Please review their privacy policies for details on their processing.

Permissions We Request and Why Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) To find nearby captains, display your pickup/destination, and track rides in real time. Requested at runtime in PermissionsScreen . Notifications (POST_NOTIFICATIONS on Android 13+) To inform you about driver selection, ride updates, and important alerts. Requested at runtime for supported Android versions. Internet To communicate securely with our backend and third‑party services (e.g., Google Maps APIs). Vibrate To add vibration feedback for critical notifications. Receive Boot Completed To ensure notification channels and required services are restored after device reboot, if needed. Data Retention We retain account, ride, and location records for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. If you delete your account or request deletion, we will delete or anonymize your personal information subject to legal retention requirements. Data Security We use industry-standard security measures, including HTTPS/TLS in transit, token-based authentication, and access controls. No method of transmission or storage is 100% secure; we work continuously to protect your information. Your Rights and Choices Access, Update, Delete You can access and update your profile in-app. You may request deletion of your account and associated data by contacting us (see Contact section). Permissions You can grant or revoke location and notification permissions via your device settings. Some features may not function without these permissions. Communications You can control notifications via in-app settings (where available) and device settings. Children’s Privacy The Service is not directed to children under the age of 13 (or as defined by local law). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us to request deletion.

International Data Transfers Your information may be transferred to and processed on servers located outside your country. We take steps to ensure appropriate safeguards are in place consistent with applicable law.

Changes to This Privacy Policy We may update this Policy from time to time. We will notify you of material changes by updating the “Last updated” date, in-app notices, or other appropriate means. Continued use of the Service after changes means you accept the updated Policy.

Contact Us Email: mayankpatidarpk@gmail.com Address: PicKupKaro, 16, Bagdipura, Dhamnod, Madhya Pradesh, India.