Privacy Policy — UrbanCarriers

Overview

UrbanCarriers collects data so the app can create accounts, verify users, complete bookings, track active deliveries, settle payments and payouts, and support safety and dispute handling.

This policy is written in plain English. It is designed to cover what the app actually collects, including data that must be disclosed for Google Play Data Safety and Indian privacy compliance.

What we collect

Some data is collected from all users. Other data depends on whether you sign up as a shipper, driver, or fleet aggregator.

Shippers

Shippers can create bookings, pay for deliveries, and track service activity.

• We collect phone number, full name, profile photo, and role for account setup.
• Email is optional and used mainly for payments through PayU.
• Business name and GST number are optional profile fields.
• Booking data includes pickup and drop addresses, cargo type, weight, distance, and price so a delivery can be created and fulfilled.
• We store payment transaction IDs returned by PayU for reconciliation, support, and records.

Drivers

Drivers need additional verification and delivery workflow data because they complete trips and receive payouts.

• Aadhaar number and driving licence number are collected for KYC and driver verification.
• Foreground location is used for address suggestions and in-app delivery workflow.
• Background location is used only while a driver has an active delivery and only for real-time trip tracking.
• Proof-of-delivery photos are captured and stored privately for delivery records.
• UPI ID, bank account number, and IFSC code may be collected for payout requests.
• Push notification tokens are used for booking alerts and service notifications.
• Earnings data includes booking value, platform fee, and net payout.

Fleet Aggregators

Fleet aggregators can manage business identity and invite drivers into fleet operations.

• We collect company name, GST number, and PAN number for KYC and business records.
• We collect driver invitation records, including invited driver phone numbers.

Sensitive Personal Data

Certain data needs stronger protection. For UrbanCarriers, this includes Aadhaar number and bank or UPI payout details. We treat this information as sensitive and collect it only when it is needed for KYC, payouts, or compliance.

If you do not want to provide sensitive data, some driver features such as KYC approval or payout processing may not be available. You may also withdraw consent later, subject to records we must retain for legal or operational reasons.

Background and precise location

UrbanCarriers uses location in two different ways, and this is important for Google Play disclosure.

On Android, this may run through a persistent foreground service while an active delivery is in progress. A driver can stop background location by going offline, ending the active delivery flow, or changing device location permissions. If location access is denied, some app features may not work properly.

Contacts permission

The app can read device contacts only to help users fill pickup or drop contact name and phone fields faster.

• Contacts are read only on the device.
• Contacts are never uploaded to any UrbanCarriers or third-party server.
• Contacts are not used for advertising or marketing.
• You can deny or remove this permission from your device settings at any time.

How we use data

• Create accounts and log users in through OTP verification.
• Match bookings with drivers and fleet operations.
• Show maps, search addresses, and support booking flows.
• Track active deliveries in real time where needed.
• Verify driver and fleet identity and eligibility.
• Process payments, payouts, and transaction records.
• Store proof-of-delivery records and handle disputes.
• Send booking alerts, updates, and other service notifications.
• Support fraud prevention, safety, compliance, and customer support.
• Improve app reliability and user experience.

Third-party processors

We use trusted service providers to operate the app. They receive only the data needed for their part of the service.

When we share data

We do not sell personal data.

We may share data only in these situations:

• With processors listed above to run authentication, storage, maps, notifications, and payments.
• With drivers, fleet partners, or shippers when needed to complete a booking.
• With support or operations staff who need the information to do their work.
• With regulators, law enforcement, or courts if required by law.

Data retention

We keep personal data only as long as needed for the purpose it was collected for, unless the law requires a longer period.

• Account profile data: while the account is active and up to 24 months after inactivity.
• Booking and delivery records: up to 8 years for support, accounting, disputes, and compliance.
• Payment and payout records: up to 8 years for finance, tax, and reconciliation.
• Driver KYC records: for the period of active onboarding or engagement and up to 5 years after closure where needed for compliance or disputes.
• Proof-of-delivery photos: up to 24 months unless a dispute or legal hold requires longer retention.
• Push tokens: until logout, uninstall, token refresh, or reasonable inactivity cleanup.
• Contacts from the contact picker: not retained by us because they are not uploaded.

Your rights and choices

Under the DPDPA, you can ask us to help you understand, correct, or erase your personal data, subject to legal and operational limits.

• Ask what personal data we hold about you.
• Request correction of inaccurate or outdated information.
• Request erasure of personal data that is no longer needed.
• Withdraw consent for future processing where consent is the basis.
• Raise a grievance if you are not satisfied with how your data is handled.

You can also control permissions such as location, camera, contacts, and notifications through your device settings.

Security

We use reasonable security measures to protect personal data, including authentication controls, role-based access, secure cloud storage, private storage controls for delivery photos, and encrypted connections where applicable.

No system is perfectly secure, so we cannot promise absolute security. We review access and handling practices regularly and limit internal access to people who need it.

Children

UrbanCarriers is not intended for children under 18 years of age. We do not knowingly allow children to create driver, shipper, or fleet aggregator accounts.

Policy changes

If we update this policy, we will change the effective date and version number on this page. For material changes, we will also notify users in the app before or when the updated policy takes effect.

Grievance Officer

If you want to exercise your rights, withdraw consent, request deletion, or raise a grievance, contact:

Google Play Data Safety summary

This summary is provided in a format that is easy to compare against the app’s Google Play Data Safety disclosures.