Privacy Policy

1. Introduction

DriverID ("DriverID", "we", "us" or "our") provides a QR-based driver and vehicle identification service. A DriverID QR code placed on a vehicle lets people contact the vehicle owner, their family or emergency contacts when needed -- for example when a vehicle is blocking another, for parking issues or in an emergency -- without the owner's phone number being displayed on the vehicle.

This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to the DriverID website, the public QR scan web page, the DriverID Android and iOS apps, and related services (together, the "Services"). By using the Services you agree to this policy.

2. Information we collect

2.1 Information you provide (DriverID app users)

• Account & profile: mobile number (verified by OTP), name, email address, alternate mobile number, profile photo and similar profile details.
• Vehicle information: registration number, vehicle type and details of each vehicle you add, and the QR code(s) linked to them.
• Documents: Driving Licence, Registration Certificate (RC) and Pollution Under Control (PUC) details -- such as document numbers, issue and expiry dates -- and the document images you upload, along with their verification status.
• Contacts you add: names, relationships and phone numbers of family members and emergency contacts you choose to associate with a vehicle. Please make sure these people are aware you are sharing their details.
• Orders & delivery: QR/product orders, delivery addresses, promo or referral codes used, and order history.
• Payments & wallet: transaction records such as amount, order/payment IDs and status, and your DriverID wallet balance. Card, UPI and bank details are entered directly with our payment partner (Razorpay) -- we do not store your card or bank account details.
• Business card: any business card details and images you choose to add.
• Support communications: messages, photos and files you send to us through in-app support chat, email or the website contact form.

2.2 Information collected automatically

• Device information: device type, operating system and app version, and a push-notification token used to deliver notifications to your device.
• Usage & log data: API request logs, IP address, timestamps and error information used to operate, secure and troubleshoot the Services.
• Scan & contact history: records of when your QR code was scanned and who contacted you through it.

DriverID does not collect your device's precise location, and does not read your phone's contact list, call logs or SMS messages.

3. People who scan a DriverID QR

You do not need the app to scan a DriverID QR. To view the contact options for a vehicle, the person scanning is asked to verify their own mobile number with an OTP. We store that mobile number together with the vehicle scanned and the time of the scan. We do this so that every contact request is genuine and accountable, to prevent misuse, and so the vehicle owner can see who reached out about their vehicle.

After verification, the scanner sees only the information the vehicle owner has made available on the scan page (for example the option to contact the owner, a family contact or an emergency contact). Documents such as the Driving Licence, RC and PUC are not shown to people who scan the QR.

4. How we use information

• To create and manage your account and verify your mobile number.
• To activate QR codes, link them to your vehicles and show the public scan page.
• To let people who scan your QR reach you, your family or emergency contacts.
• To store and verify your documents and send reminders before they expire.
• To process orders, payments, wallet transactions, deliveries, referrals and promotions.
• To send service notifications (push, SMS or email) such as OTPs, expiry alerts, order updates and contact alerts.
• To provide customer support and respond to your enquiries.
• To keep the Services secure, prevent fraud and misuse, and fix problems.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal information, and we do not use it for third-party advertising.

5. Sharing & disclosure

We share information only as described below:

• With people who scan your QR -- limited to the contact options you have made available, after they verify their mobile number.
• Service providers who process data on our behalf, under confidentiality obligations, including:
  • Razorpay -- payment processing;
  • Google Firebase -- push notifications, in-app messaging and related services;
  • SMS and email providers -- delivering OTPs and notifications;
  • hosting and infrastructure providers that store our data;
  • courier partners -- delivering QR orders to your address.
• Legal requirements -- when required by law, court order or a lawful request from government or law-enforcement authorities, or to protect the rights, safety and property of DriverID, our users or the public.
• Business transfers -- if DriverID is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.

6. App permissions

The DriverID app may request the following permissions. You can manage them at any time in your device settings.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the Services. When you delete your account, we delete or anonymise your personal information within a reasonable period, except where we must keep certain records -- such as payment, invoice and tax records -- to meet legal, accounting or regulatory requirements, or to resolve disputes and prevent fraud.

8. Account & data deletion

You can ask us to delete your DriverID account and its associated data at any time:

• Email support@driverid.in with the subject "Account deletion request" from your registered email, or include your registered mobile number; or
• Send the request through the support chat in the DriverID app.

We may verify your identity before acting on the request. Once deleted, your profile, vehicles, documents, contacts and QR links are removed and your QR codes stop showing your details. Records we are legally required to keep (see section 7) are retained only for the required period. You can also ask us to delete specific items -- such as a document or a contact -- or delete them yourself in the app.

9. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), OTP-based verification, token-based authentication for the apps and access controls on our systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• access the personal information we hold about you;
• correct or update inaccurate information (most of it can be edited directly in the app);
• request deletion of your information;
• withdraw consent where we rely on it -- this may limit some features;
• raise a grievance with us about how your information is handled.

To exercise these rights, contact us using the details below.

11. Children

The Services are intended for users who are 18 years or older. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, notify you in the app or by other means. Continuing to use the Services after an update means you accept the revised policy.

13. Contact us

For questions, requests or grievances about this Privacy Policy or your personal information, contact:

DriverID -- Grievance Officer
support@driverid.in
Website contact form

We aim to respond to all requests within 30 days.