This Privacy Policy explains how Poolzy Mobility Private Limited (“Poolzy”, “we”, “us”) collects, uses, stores, shares, and protects personal information when you use the Poolzy mobile app. Poolzy is available on Google Play and the Apple App Store. It is not offered as a web app. This page is published on poolzy.in so you can read it.
1. Introduction
Poolzy is a trusted commute network for verified professionals. The apps help people who travel similar office routes find one another and share a ride. Poolzy is not a taxi service, transport company, or ride-hailing platform. We do not operate vehicles, employ drivers, or collect ride fares. We only provide the tools that let members connect and coordinate.
You use Poolzy on your phone: Android from Google Play, or iOS from the App Store. Searching, booking, and hosting happen only in the app.
You decide what optional information to add to your profile. We collect only what we need to run the service, keep the community trusted, and meet our legal duties. We never sell your personal information.
This policy is written for users in India and is intended to meet the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the privacy expectations of Apple’s App Store and Google Play. If you use Poolzy from outside India, section 15 explains how that affects you.
2. Information we collect
We collect information you give us, information created when you use Poolzy, and limited information from the services that help us operate the platform.
2.1 Account information
- Name, so other members can recognise you.
- Mobile number, required to create an account and sign in with a one-time password.
- Email address. A company work email is required before you can search, book, or host rides. Personal inboxes such as Gmail, Yahoo, and Outlook are not accepted for that check, except where we expressly allow a test account.
- Profile photo, if you choose to add one.
- Company details, such as company name and job title, if you provide them.
- Vehicle details if you host rides, such as car brand, model, and registration number. You provide these yourself.
- Optional profile details you choose to add, such as gender (used only for women-only ride filters) and an emergency contact name and phone number.
2.2 Payment information
Ride contributions are paid directly between members, usually by UPI to the host. Poolzy does not collect that fare.
If you host and accept those payments, we store the UPI ID and payment display name you enter so riders can pay you. We do not store card numbers, CVV codes, or UPI PINs.
Poolzy Plus, our platform membership, is billed through Razorpay. Razorpay processes the payment. We keep limited billing records such as an order ID, payment ID, amount, tax, plan, and status. We do not receive or store your full card or bank credentials.
2.3 Device information and IP address
- Device and app details such as operating system, app version, and a push-notification token.
- Security signals used to confirm the app is genuine (Firebase App Check).
- IP address and similar network data in server logs, used for security, fraud prevention, and troubleshooting.
- App diagnostics, including crash reports and events about how the app is used, so we can fix faults and keep the service reliable.
2.4 Location information
To match commutes, we use the places you enter, such as home, work, pickup, and drop points, and the coordinates of those places. See section 8 for how device location is handled.
2.5 Information from using the service
- Rides you publish or book, seats, times, routes, and booking status.
- In-app chat with a ride partner.
- Commute feedback, cancellation and no-show records, and the commute score shown on your profile.
- Referral codes and referral relationships, if you join or share a referral.
- Preferences stored on your device, such as notification choices and recent place searches.
3. How we use your information
We use personal information to:
- Create and secure your account, and sign you in.
- Verify that you are a working professional, as described in section 4.
- Match hosts and riders on similar routes and show the profiles needed to decide whether to share a commute.
- Let members coordinate a ride, including in-app chat.
- Record Poolzy Plus membership and the payment status members mark for peer-to-peer ride contributions.
- Calculate commute scores and apply community standards.
- Send service messages, including ride updates and verification codes.
- Detect abuse, fraud, and security threats.
- Fix faults and keep the app reliable, using crash reports and app diagnostics.
- Comply with law, respond to valid legal requests, and keep records we are required to retain.
We do not use your information to sell advertising profiles, and we do not sell personal information to data brokers.
4. Verification process
Poolzy is a private community. Before you can search, book, or host, we generally require:
- A verified mobile number, confirmed with a one-time password.
- A verified work email at your organisation. We send a one-time code to that address. Personal email domains are not accepted for this check.
An active Poolzy Plus membership, or an eligible waiver, is also required to use search, booking, and hosting.
A verification badge means Poolzy completed the checks described in the app. It is not an endorsement by Poolzy, your employer, or any government authority. We may ask you to verify again if our checks change.
5. Sharing of information
We share personal information only when it is needed to operate Poolzy or when the law requires it.
5.1 Other members
- Discovery profile. Members browsing rides may see a limited profile, such as your name, photo, company, job title, verification status, commute score, and, for hosts, vehicle model and payment display name. Your home and work addresses, phone number, email, and emergency contact are not shown on that public profile.
- Confirmed ride partners. After a booking is accepted, the other person may see contact details needed to complete the commute and settle payment directly.
5.2 Service providers
We use processors who handle data for us. They are listed in section 10. They may process data only to provide their service to Poolzy.
5.3 Legal and safety
We may disclose information if required by law, regulation, court order, or a government authority, or when necessary to protect the rights, safety, or property of Poolzy, our members, or the public.
We do not sell your personal information.
6. Data storage and security
We protect personal information with industry-standard measures appropriate to a mobile service, including:
- Encryption in transit (HTTPS/TLS).
- Access controls so members can read and write only the data their role allows.
- Server-side checks for sensitive actions such as verification codes, payments, and account deletion.
- App attestation on production builds.
No method of storage or transmission is completely secure. Please use a current version of the app and keep your phone secure.
Account data is stored using Google Firebase. Some providers may store data on servers outside India. Section 15 explains international processing.
7. Your rights
Subject to the DPDP Act and other laws that apply to you, you can:
- Access the profile and ride information shown in the app, and ask us for a copy of the personal information we hold about you.
- Update your name, photo, company details, vehicle details, and other profile fields in the app.
- Correct information that is inaccurate. You can edit most fields yourself. For anything you cannot change in the app, email us and we will correct it if we can confirm the request is yours.
- Delete your account in Settings → Delete account. You confirm by typing DELETE. Deletion is paused if you still have an upcoming confirmed ride, so you can complete or cancel it first. You may also email contact@poolzy.in to request deletion.
- Control optional device permissions, such as notifications and location, in your phone settings and in the app where those choices are offered.
- Raise a grievance using the contact details in section 17. We aim to acknowledge grievances within 24 hours and to resolve them within the time the law requires.
When you delete your account we delete your profile, profile photo, phone and work-email records, referral code mapping, notifications, and sign-in account. We may keep limited records that we still need for legal, tax, fraud-prevention, or safety reasons, such as past ride records, completed-ride messages, feedback, and subscription payment records. Where we can, we remove or detach your name and contact details from those records.
8. Location data usage
Poolzy matches commutes from the addresses and points you choose, not from continuous tracking of your phone.
- You control the places you save. You can change or remove them in the app.
- We turn those places into coordinates so we can search routes and show pickup and drop points. This uses map providers listed in section 10.
- Device location (GPS) is optional. We ask for it only if a feature needs it, such as centring a map while you pick a place, and only after you grant permission in your phone settings. You can refuse or turn that permission off. Some map features may then be limited. You can still enter an address by typing it.
- We do not track your live location during a commute, and we do not offer a live location-sharing link.
- Safety tools open your phone’s own dialer or messages app. Poolzy does not place the call or send the SMS for you, and those actions do not start location tracking.
9. Cookies and similar technologies
poolzy.in is an information site. You cannot book or host a ride there. The site does not use advertising cookies and does not allow third-party ad networks to track you across sites. Our hosting provider may keep short-lived technical logs, such as IP address, browser type, and the page requested, to deliver the site and protect it from abuse. If you follow a link to an app store, a map provider, or a payment page, that service may set its own cookies under its own policy.
The mobile app does not use browser cookies. It stores preferences on your device, such as notification settings.
10. Third-party services
We use the following providers to run Poolzy. Their processing is covered by their own terms and privacy policies as well as our instructions:
- Google Firebase, for authentication, database, file storage, cloud functions, push notifications (Firebase Cloud Messaging), crash reports, app diagnostics, and App Check.
- Google Maps Platform, for address search, geocoding, and routing of places you enter.
- Apple MapKit, to display the map in the iOS app.
- OpenRouteService, as a routing fallback when it is configured.
- Razorpay, to collect Poolzy Plus subscription payments.
- Apple, for App Store distribution, and for Apple sign-in where you choose it.
- Google Play services, for Play distribution, Google sign-in where you choose it, and related device services on Android.
- Resend, to deliver work-email verification codes from verify@poolzy.in.
We do not control these providers. If a link takes you to their site or checkout, their privacy policy applies to what they collect there.
11. Payment information
- Ride contributions are paid by you directly to the other member, typically by UPI. Poolzy does not hold that money and does not store your UPI PIN or card number.
- Poolzy Plus fees are processed by Razorpay. Checkout happens on Razorpay’s secure flow. Poolzy stores only the membership and billing records described in section 2.2, which we need for access to the service, support, tax, and disputes.
- Prices and tax are shown in the app before you pay.
12. Communications
We contact you to operate the service:
- SMS or authenticator messages for sign-in codes, sent through our authentication provider.
- Email for work-email verification and, where needed, service or policy notices.
- Push notifications and in-app messages for ride requests, booking updates, chat, and membership. You can turn off ride and chat pushes in Settings. Messages required to complete a payment or keep your account secure may still be sent.
- In-app chat between a host and a rider for a specific ride. Messages are stored so both people can coordinate.
We do not send third-party marketing. We may send occasional product notices about Poolzy itself. You can ignore those notices; they are not a condition of using a ride you have already booked.
13. Children’s privacy
Poolzy is only for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email contact@poolzy.in and we will delete it.
14. Data retention
- While your account is open, we keep your information for as long as we need it to provide Poolzy.
- Verification codes are stored in hashed form and deleted automatically after they expire or after a successful check, usually within minutes.
- Security rate-limit records are deleted after about 7 days.
- Payment records for Poolzy Plus are kept for as long as tax, accounting, and dispute rules require.
- After you delete your account, we delete or detach personal information as described in section 7, except for the limited records we must keep.
15. International users
Poolzy is operated from India and is intended for commutes in India. If you use the service from another country, your information will be processed in India and, where our providers require it, in other countries including the United States and the European Union.
Those countries may have different data-protection laws. Where the EU or UK GDPR applies to you, you may also have the right to restrict or object to certain processing, and the right to data portability, in addition to the rights in section 7. To use any of these rights, contact us. You may also complain to a supervisory authority in your country. Our grievance contact for India is in section 17.
16. Changes to this Privacy Policy
We may update this policy when our product or the law changes. We will change the effective date at the top of this page and, for material changes, notify you in the app or by email where that is reasonable. If you keep using Poolzy after the new effective date, the updated policy applies to you as far as the law allows.
Effective date: 20 October 2026
17. Contact information
For privacy questions, access or deletion requests, or a grievance under the DPDP Act:
Poolzy Mobility Private Limited
CIN: U63122ME2026PTC476533
Email: contact@poolzy.in
Website: https://poolzy.in