1. Who we are
KTAXIS – Kerala On Wheels ("KTAXIS", "we", "us") operates the KTAXIS ride-hailing platform: the KTAXIS mobile apps for iOS and Android, the website at ktaxis.com, and related services (together, the "Platform"). This policy explains what personal data we collect from riders, drivers and franchise partners, why, who we share it with, and the choices you have.
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for your personal data.
Registered entity: KeralaOnWheels Private Limited
Registered address: Mamootil House, Vayalathala, P.O. Ranni, Kerala 685507, India
2. Summary
- We collect what we need to run rides: your account details, your location, your trips and your payments.
- Drivers' location is shared live with their rider during a trip. Riders' pickup point is shared with their matched driver.
- Card and UPI details are handled by Razorpay. We never see or store your full card number or UPI PIN.
- Calls between riders and drivers go through masked numbers, so neither sees the other's real phone number.
- We do not sell your data, show third-party ads, or use advertising or tracking SDKs.
- You can delete your account from inside the app at any time.
3. Information we collect
Information you give us
- Account details: name, email address, phone number and password. Passwords are stored only as a salted hash, never in plain text.
- Driver & franchise details: driving licence number, vehicle registration number, vehicle details, and any licence, registration or KYC documents you upload for approval.
- Messages: the content of in-app chat between a rider and their driver during a trip.
- Ratings & reviews: star ratings, comments and tips you give after a trip.
- Support requests: anything you tell us when you contact support or use the SOS feature.
Information collected when you use the Platform
- Precise location (GPS):
- Riders: while the app is open, to suggest your pickup point, and during an active trip, to show your position to your driver.
- Drivers: continuously while you are set to Online, including when the app is in the background, so we can offer you nearby ride requests and show your live position to your rider. Location collection stops when you go Offline.
- Trip information: pickup and drop-off addresses, route, distance, time, fare, ride type, status (completed, cancelled), and the trip's one-time verification code (OTP).
- Payment & wallet information: payment method type (UPI, card or wallet), payment status and reference IDs from Razorpay, wallet balance, wallet transactions, referral rewards, and driver earnings and withdrawals.
- Call records: when you call your rider or driver through the app, our call provider records the time, duration and masked numbers used. We do not record the audio of calls.
- Technical data: IP address, device type, operating system and app version, recorded in our server logs to keep the Platform secure and working.
What we do not collect
We do not access your contacts, photos, microphone or camera, and we do not use analytics, advertising or cross-app tracking tools.
4. App permissions
- Location — "While using the app" (riders and drivers): needed to set your pickup point and track trips.
- Location — "Always" (drivers only): lets the app keep sharing your position while you are Online and the app is in the background. You can change this at any time in your phone's Settings, but you may stop receiving ride requests.
- Phone: used only to start a masked call to your rider or driver when you tap the call button.
5. How we use your information
- To create and manage your account and verify your identity, including approving drivers.
- To match riders with nearby drivers, provide live trip tracking and in-trip chat and calls.
- To calculate fares and routes, process payments, and pay out driver earnings and referral rewards.
- To send one-time passwords (OTPs) and service messages about your account and trips.
- To handle support requests and SOS alerts, and to investigate safety incidents, fraud and misuse.
- To keep the Platform secure and reliable, and to comply with our legal obligations.
We process your data on the basis of the consent you give when you sign up and use the Platform, and for the "legitimate uses" permitted by the DPDP Act, such as complying with law, responding to emergencies and preventing fraud. We do not use your data for advertising, and we will ask for your consent before sending you any promotional messages.
6. Who we share it with
Other users
- Your driver sees: your name and your pickup and drop-off points.
- Your rider sees: your name, photo (if any), vehicle details, rating and live location during the trip.
Service providers who process data for us
- Razorpay: processes card, UPI and other payments. Payment details you enter are handled under Razorpay's privacy policy.
- Google Maps Platform: displays maps and calculates routes, using pickup and drop-off locations. See Google's privacy policy.
- Exotel and Twilio: connect masked phone calls between riders and drivers.
- Hosting and email providers: run our servers and database and deliver account emails such as OTPs.
These providers may use your data only to provide their service to us, under contracts that require them to keep it confidential and secure.
Legal and safety reasons
We may share data with police, courts or government authorities where required by law, or where needed to protect someone's life or safety (for example after an SOS alert).
We do not sell your personal data, and we do not share it with advertisers or data brokers.
7. Where your data is stored
Our servers and database are located in the United States (DigitalOcean). Some of our service providers (such as Google and Twilio) may process data on servers outside India. Where that happens, we rely on them to protect it to standards consistent with this policy and with Indian law.
8. How long we keep it
- Account data: for as long as your account is active.
- Trip, payment and wallet records: for up to 8 years after the transaction, as required by Indian tax and accounting laws.
- Chat messages: for up to 90 days after the trip, so we can investigate any complaint, then deleted.
- Live driver location: only the latest position is kept for matching; the location history of a trip is stored as part of that trip record.
- Server logs: for up to 90 days.
When data is no longer needed, we delete it or anonymise it so it can no longer identify you.
9. Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you and who we have shared it with.
- Correction: fix inaccurate or incomplete data. You can update most profile details yourself in the app.
- Erasure: ask us to delete your data (see Deleting your account).
- Withdraw consent: at any time. This will not affect processing already done, but we may not be able to provide rides without the data we need.
- Grievance redressal: complain to our Grievance Officer (see Contact & grievances).
- Nominate: name another person to exercise these rights for you in case of death or incapacity.
To exercise any of these rights, email support@ktaxis.com from the email address on your account. We may ask you to verify your identity. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Deleting your account
You can delete your account at any time:
- In the app: go to Profile → Delete Account and confirm.
- By email: write to support@ktaxis.com from the email address on your account.
Your account is deactivated immediately and you will no longer be able to log in. We then delete your personal data within 30 days, except records we must keep by law (such as trip and payment records for tax purposes, see How long we keep it). Please withdraw any wallet balance or driver earnings before deleting your account.
11. Security
We protect your data with encrypted connections (HTTPS) between the apps and our servers, salted password hashing, secure on-device storage for login tokens, and access controls that limit who on our team can see personal data. No system is completely secure, so please use a strong, unique password and never share your login OTP or ride OTP with anyone except your driver.
If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.
12. Children's privacy
You must be 18 or older to create an account. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
13. Website storage & cookies
Our website uses your browser's local storage only to keep you signed in and remember basic preferences. We do not use advertising or third-party tracking cookies.
14. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. We will notify you in the app or by email before any significant change takes effect.