This Privacy Policy explains how Chalo Technologies (Pvt) Ltd ("Chalo", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the Chalo mobile application and related services (the "Platform").
1. Information We Collect
1.1 Information You Provide
- Account information: name, phone number, email address.
- Identity verification (Drivers): CNIC number and photographs, driving license details and photographs, vehicle registration details.
- Payment information: JazzCash/Easypaisa account details, bank account details for Driver payouts.
- Profile information: profile photo (optional), ratings, ride history.
- Communications: messages sent through in-app chat, customer support inquiries.
1.2 Information Collected Automatically
- Location data: real-time GPS location during active rides (Riders and Drivers). Background location for Drivers when "online" and available for rides.
- Device information: device model, operating system, unique device identifiers, IP address.
- Usage data: app interactions, ride history, search history, session duration, crash logs.
- Transaction data: fare amounts, payment method used, timestamps.
1.3 Information from Third Parties
- Payment providers (JazzCash, Easypaisa): transaction confirmation, account verification.
- Map services (Google Maps): route data, estimated distances and durations.
2. How We Use Your Information
- Provide, operate, and improve the Platform.
- Match Riders with nearby Drivers and facilitate Rides.
- Process payments, subscriptions, and Driver payouts.
- Verify Driver identity and eligibility.
- Communicate with you about your account, rides, and promotions.
- Ensure safety and security of all Users (including fraud detection).
- Resolve disputes between Users.
- Comply with legal obligations and law enforcement requests.
- Analyze usage patterns to improve the Platform.
3. How We Share Your Information
3.1 With Other Users
- Riders see: Driver's name, photo, vehicle details, license plate, rating, real-time location during Ride.
- Drivers see: Rider's name, rating, pickup location, and destination.
3.2 With Service Providers
- Payment processors (JazzCash, Easypaisa) for transaction processing.
- Cloud hosting providers for data storage and processing.
- Map and navigation services (Google Maps) for routing.
- SMS providers for OTP verification and notifications.
- Analytics providers to understand Platform usage.
3.3 For Legal Reasons
We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Chalo, our Users, or the public.
3.4 We Do NOT
- Sell your personal information to third parties.
- Share your CNIC, driving license, or payment details with other Users.
- Use your data for purposes unrelated to the Platform without consent.
4. Location Data
- Rider location: collected only when the app is in use and during active rides.
- Driver location: collected when the Driver is "online", even in background. Necessary for matching.
- You can disable location services via device settings, but the Platform will not function without it.
- Location data from completed rides is stored for safety, dispute resolution, and fare calculation.
5. Data Retention
- Account data: retained while active, plus 2 years after deletion for legal compliance.
- Ride data: retained for 3 years for safety and dispute resolution.
- Financial records: retained for 6 years per Pakistani tax law.
- CNIC/license data: deleted within 90 days of account closure.
- Location data: retained 90 days in detail, then aggregated and anonymized.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure authentication with phone-based OTP.
- Access controls limiting employee access on a need-to-know basis.
- Regular security reviews.
However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
7. Your Rights
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and data (subject to legal retention requirements).
- Portability: Request your data in a structured, commonly used format.
- Objection: Object to processing of your data for marketing purposes.
- Withdrawal of consent: Withdraw consent at any time (may affect functionality).
To exercise these rights, contact us at privacy@thechalo.app. We will respond within 30 days.
8. Children's Privacy
The Platform is not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware we have collected data from a child under 18, we will delete it promptly.
9. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated via in-app notification or email at least 14 days in advance. Continued use constitutes acceptance.
10. Applicable Law
This Privacy Policy is governed by the laws of Pakistan, including the Prevention of Electronic Crimes Act (PECA) 2016 and any applicable data protection regulations.
11. Contact Us
Chalo Technologies (Pvt) Ltd
Email: privacy@thechalo.app
Website: thechalo.app