Olyezy logoOlyezy← Back to site
Legal

Privacy Policy

This policy explains what personal data Olyezy collects when you book a cab through our Android app or website, why we collect it, who we share it with, how long we keep it, and the choices you have. We have written it to be read, not skimmed past.
Effective: 16 September 2026Last updated: 16 September 2026

01Who we are

Olyezy is an outstation and intercity cab booking service operated by Olyezy Mobility Solutions Pvt. Ltd., a company incorporated in India and operating primarily from Chennai, Tamil Nadu.

For the purposes of the Digital Personal Data Protection Act, 2023 (the DPDP Act), Olyezy Mobility Solutions Pvt. Ltd. is the Data Fiduciary responsible for the personal data described in this policy. You are the Data Principal.

Olyezy Mobility Solutions Pvt. Ltd.
Registered office: REGISTERED_ADDRESS
CIN: CIN  ·  GSTIN: GSTIN
Email: connect@olyezy.com
Phone: +91 99006 10570
WhatsApp: +91 99006 10570

02Scope of this policy

This policy applies to:

  • the Olyezy Android application published on Google Play (package ANDROID_PACKAGE_NAME);
  • the Olyezy website at https://olyezy.com, including the booking form; and
  • bookings, enquiries and support conversations you have with us over phone, WhatsApp or email.

It does not apply to the independent practices of drivers, vehicle operators or any third-party service you reach through a link in our app. Where we name a third party below, their own privacy policy governs what they do with your data once it reaches them.

03Information we collect

We collect only what a cab booking actually requires. The table below lists every category of personal data we handle, and matches the declarations we make on our Google Play Data Safety form.

CategoryWhat it includesHow we get it
Identity and contactYour name, mobile number, and email address if you give oneYou enter it when you sign up or book
Account credentialsYour mobile number and the one-time password (OTP) used to verify it. We never store the OTP after verification, and we do not use passwords.You enter it at login
Trip informationPickup and drop addresses, stops, pickup and return date and time, trip type, vehicle chosen, and travel preferences you tick (for example travelling with elders, a patient, women-only travel, or extra luggage)You enter it when booking
LocationPrecise or approximate device location, and location recorded during an active trip. See section 4.Your device, with your permission
Payment informationBooking amount, payment status, payment reference and refund records. We never receive or store your full card number, CVV, UPI PIN or net-banking credentials — those go directly to our payment gateway.Our payment gateway reports it back to us
Camera, photos and contactsA photo or document only if you choose to upload one, and a contact only if you use the contact picker to book on someone else’s behalf. We read only the entry you select, never your whole address book or gallery.You choose and select it
Device and technical dataDevice model, operating system version, app version, language, time zone, IP address, app install identifier and push notification tokenCollected automatically by the app
Diagnostics and usageCrash reports, error logs, and aggregate in-app events such as screens opened and bookings startedCollected automatically by our analytics SDKs
Support communicationsMessages, call records and feedback you send us, including WhatsApp conversationsYou send it to us
We do not collect sensitive data we have no use for
We do not ask for and do not want your Aadhaar number, PAN, biometric data, health records, religious or caste information, or political affiliation. Please do not send these to us in support messages. Travel preferences such as "travelling with a patient" are used solely to assign a suitable vehicle and driver, and are deleted with the booking record.

04Location data, including background location

Location is the most sensitive data our app handles, so we describe it separately and in full.

Location while you are using the app

With your permission, the app reads your device location to detect your pickup point, show nearby landmarks, and estimate distance and fare. You can decline this permission and type your pickup address manually instead — the app remains fully usable.

Location while the app is closed or not in use

For a confirmed, active trip, and only if you grant the separate background location permission, the app collects location while the app is in the background. We use this for one purpose: to show live trip progress, share your trip status with the people you choose, and let our support team locate you if something goes wrong on an outstation route.

What background location is never used for
  • It starts only when a trip is confirmed and stops automatically when the trip ends, is cancelled, or you turn it off.
  • We do not track you between trips, and we do not collect location when you have no active booking.
  • We do not sell location data, share it with data brokers, or use it for advertising or profiling of any kind.

Before the app asks Android for background location, it shows you a disclosure screen explaining this use, and the permission is entirely optional. You can withdraw it at any time in Android Settings → Apps → Olyezy → Permissions → Location, and the app will continue to work for booking and travelling, without live trip tracking.

05Device permissions the app requests

Every permission is requested in context, with an explanation, at the moment it is first needed. Declining any of them leaves the core booking flow working.

PermissionWhy the app asksIf you decline
Location (precise, while in use)Detect your pickup point and estimate fareType your pickup address manually
Location (background)Live trip progress during a confirmed tripEverything works; live tracking is off
NotificationsBooking confirmation, driver details, trip and payment updatesYou get updates by SMS, call or WhatsApp instead
CameraTake a photo to attach to a support requestAttach an existing file, or send nothing
Photos and mediaAttach an existing image to a support requestNo effect on booking
ContactsPick a phone number when booking for someone elseType the number manually

06How and why we use your data

Under the DPDP Act we must tell you the purpose of every use, and process your data only for that purpose. The legal basis is either your consent, which you give when you sign up or grant a permission, or a legitimate use permitted by the Act, such as performing the service you asked for or meeting a legal obligation.

PurposeData usedBasis
Creating and securing your accountMobile number, OTP, device identifiersConsent / performance of service
Taking, confirming and fulfilling a booking, and passing trip details to your driverName, phone, trip details, location, preferencesPerformance of service
Calculating distance, route and fare estimatesPickup and drop addresses, locationPerformance of service
Collecting payment and issuing refundsName, phone, email, booking and payment referencePerformance of service / legal obligation
Sending booking, driver and trip notificationsPhone number, push token, trip statusPerformance of service
Live trip progress and safety supportBackground location during an active tripConsent (separately granted, withdrawable)
Customer support and complaint resolutionContact details, booking history, your messagesPerformance of service / legal obligation
Keeping the app stable and diagnosing crashesDevice data, crash logs, aggregate usage eventsLegitimate use
Preventing fraud, misuse and fake bookingsDevice identifiers, phone number, booking patternsLegitimate use
Tax, accounting and statutory record-keepingInvoices, trip and payment recordsLegal obligation
Offers and promotional messagesName, phone number, emailConsent — optional, and you may opt out at any time
What we never do
We do not sell your personal data. We do not share it with data brokers. We do not use your location or trip history to build advertising profiles, and we do not run third-party advertising networks inside the app.

07Who we share your data with

We share personal data only with the parties below, only to the extent each one needs it, and under contracts requiring them to protect it and use it for no other purpose.

RecipientPurposeWhat they receiveWhere
Drivers and vehicle-operator partnersCompleting the trip you bookedName, phone number, pickup and drop location, trip preferencesIndia
Google Maps Platform (Places, Directions, Maps SDK)Address autocomplete, distance and route estimation, in-app mapsSearch text, approximate or precise location, device identifiersIndia, United States
Google Firebase (Cloud Messaging, Analytics, Crashlytics)Push notifications, crash diagnostics, aggregate usage analyticsDevice and app identifiers, crash logs, in-app eventsIndia, United States
Payment gateway — [[PAYMENT_GATEWAY_NAME]]Processing advance payments and refundsName, phone, email, booking amount and referenceIndia
Telegram (internal dispatch channel)Alerting our operations team to a new or cancelled bookingName, phone number, pickup and drop location, trip detailsOutside India
Cloud hosting and database providersRunning the app, the website and our booking databaseAll data described in this policy, stored at restIndia, and other regions as configured

Legal and safety disclosures

We may also disclose personal data where we are legally required to, or where it is genuinely necessary: in response to a valid order from a court, police or regulator; to comply with transport, tax or aggregator regulations; to establish or defend a legal claim; or to address an urgent threat to someone’s life or safety. We disclose the minimum necessary in each case.

Business transfers

If our business is merged, acquired or reorganised, personal data may transfer to the successor entity. It would remain subject to this policy, and we would notify you before any change that materially affects your rights.

08Cookies, SDKs and advertising identifiers

Our website uses strictly necessary cookies to keep your session and booking form working, and analytics cookies to understand which routes and pages people use. You can clear or block cookies in your browser; strictly necessary ones cannot be turned off without breaking the site.

The Android app does not use cookies, but the SDKs listed in section 7 use device and app identifiers to distinguish one installation from another. We do not use the Android Advertising ID for advertising or cross-app tracking. You can reset or delete the advertising identifier at any time in Android Settings → Privacy → Ads.

09How long we keep your data

We keep personal data only as long as the purpose requires, or as long as the law demands — whichever is longer. When a purpose ends and no legal obligation applies, we delete or irreversibly anonymise the data.

DataRetention period
Account profile (name, phone, email, saved addresses)Until you delete your account
Trip and booking records, invoices, payment and refund records8 years from the end of the relevant financial year, as required by the Companies Act, 2013 and GST law — retained even after account deletion, then permanently deleted
Location collected during a trip90 days after the trip ends, then deleted or anonymised
Push notification tokensUntil you uninstall the app or disable notifications
Crash and diagnostic logsUp to 180 days, per our analytics provider’s retention settings
Support conversations and complaint records3 years from resolution
Marketing consent and opt-out recordsRetained as long as needed to honour your choice
Encrypted backupsDeleted data may persist in backups for up to 90 days before those backups roll off

10How we protect your data

We apply reasonable security safeguards appropriate to the sensitivity of the data, including encryption in transit using HTTPS/TLS, encryption at rest for our databases, access controls that limit staff access to those who need it for their role, OTP-based authentication rather than stored passwords, and logging of administrative access.

No system is perfectly secure, and we do not claim otherwise. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by the DPDP Act and applicable CERT-In directions, and tell you plainly what happened and what to do about it.

Please help us: keep your OTP to yourself. Our staff and our drivers will never ask you for your OTP, and you should never share it with anyone who does.

11Your rights under the DPDP Act, 2023

As a Data Principal, you have the following rights. Exercising them is free.

  • Right to access — obtain a summary of the personal data we hold about you, how we process it, and who we have shared it with.
  • Right to correction and completion — have inaccurate or incomplete data corrected or completed. Most of it you can edit yourself in the app.
  • Right to erasure — have your personal data deleted where we no longer need it for the purpose it was collected and no law requires us to keep it.
  • Right to withdraw consent — withdraw any consent you gave, as easily as you gave it. Withdrawal applies going forward and does not undo processing already carried out lawfully.
  • Right to grievance redressal — complain to our Grievance Officer and receive a response, before escalating anywhere else.
  • Right to nominate — nominate another person to exercise these rights on your behalf if you die or become incapacitated.

To exercise any right, email connect@olyezy.com from your registered contact, or write to our Grievance Officer in section 16. We will verify that the request is genuinely yours before acting on it, and respond within the timelines set out in the DPDP Act. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12Deleting your account and data

You can delete your Olyezy account and the personal data attached to it at any time, from inside the app or from our website — you do not need to install the app to ask for deletion.

How to delete your account
In the app: Profile → Account → Delete account.
On the web: https://olyezy.com/delete-account.

Our Account & Data Deletion Policy sets out exactly what is deleted, what we are legally required to retain and for how long, and how long the process takes.

13Children

Olyezy is not directed at children. You must be at least 18 years old to create an account or make a booking. We do not knowingly collect personal data from anyone under 18, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children, which the DPDP Act prohibits.

A child may of course travel in a booked vehicle, accompanied by an adult. In that case we collect no data about the child beyond what the booking adult chooses to tell us. If you believe a child has given us personal data, write to us and we will delete it promptly.

14Transfers outside India

We store personal data in Indiawherever we can. Some of the service providers in section 7 — notably Google’s analytics and messaging infrastructure, and the Telegram channel our dispatch team uses — process data on servers outside India.

Where data is transferred outside India, we do so in line with section 16 of the DPDP Act and only to countries not restricted by the Central Government, under contracts that require the recipient to protect the data to the standard described in this policy.

15Changes to this policy

We update this policy when our practices, our app or the law changes. The effective date at the top always reflects the current version. If a change materially affects how we use your data or the rights you have, we will give you clear advance notice in the app, by email or by SMS, and where the law requires it we will ask for your consent again.

Continuing to use Olyezy after a change takes effect means you accept the updated policy.

16Contact and grievance redressal

For any question about this policy or about your personal data, contact us first — most issues are resolved quickly:

Olyezy Mobility Solutions Pvt. Ltd.
Registered office: REGISTERED_ADDRESS
CIN: CIN  ·  GSTIN: GSTIN
Email: connect@olyezy.com
Phone: +91 99006 10570
WhatsApp: +91 99006 10570

Grievance Officer

If you are not satisfied, or you wish to make a formal complaint about how we handle your personal data, you may contact our Grievance Officer, appointed under the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules:

Grievance Officer
Name: GRIEVANCE_OFFICER_NAME
Email: GRIEVANCE_OFFICER_EMAIL
Phone: GRIEVANCE_OFFICER_PHONE
Address: GRIEVANCE_OFFICER_ADDRESS
We acknowledge every complaint within 24 hours and aim to resolve it within 15 days of receipt.

If your complaint remains unresolved, you have the right to escalate it to the Data Protection Board of India.