Privacy Policy & Prominent Disclosures
Complete, transparent data governance, continuous background GPS telemetry policies, UIDAI Aadhaar cryptographic masking, and statutory data safety standards for all users and driver partners across India.
Firmbeginners It Solutions Private Limited strictly complies with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and Google Play Store Developer Program Policies. We act as a responsible Data Fiduciary, ensuring your personal identity credentials, telemetry coordinates, and financial records are safeguarded with military-grade encryption and sovereign data residency in India.
1. Data Fiduciary & Statutory Regulatory Scope
Firmbeginners It Solutions Private Limited ("YatriCare", "we", "us", or "our"), incorporated under the Companies Act, 2013, operates the YatriCare 2.0 mobility consumer platform, the YatriCare Partner mobile applications for commercial drivers and fleet owners, and the official web portal at https://yatricare.com.
This Privacy Policy applies to all individuals ("Data Principals") who download, access, register, or interact with our mobility aggregation services across India, including:
- Passenger Consumers: Individuals requesting, booking, and utilizing city or outstation passenger cab rides.
- Driver Captains: Licensed commercial taxi drivers operating registered transport vehicles.
- Fleet Operators & Cab Owners: Business entities or individual owners listing commercial vehicles and managing assigned driver rosters.
2. Google Play Mandatory Prominent In-App Disclosures
Google Play policies require prominent in-app disclosures and explicit user consent prior to accessing sensitive device capabilities. Below is an exhaustive breakdown of each capability utilized by our mobile applications:
A. Background Location & Real-Time GPS Telemetry (Mandatory for Driver Captains)
Foreground ServiceProminent In-App Disclosure Statement: The YatriCare Partner application collects high-precision geographical coordinates (latitude, longitude, travel velocity, heading bearing) to enable: (1) real-time passenger turn-by-turn navigation, (2) live GPS meter kilometer fare calculation, (3) accurate nearby ride dispatch assignment, and (4) driver emergency safety telemetry even when the application is closed or running in the background.
B. Camera & Photo Gallery Storage (KYC & Payment Proof)
Document KYCProminent In-App Disclosure Statement: Camera and photo gallery access are required strictly to permit driver partners and fleet owners to photograph and upload: (1) Commercial Driving License, (2) Vehicle Registration Certificate (RC) and fitness permits, (3) Vehicle inspection angles, and (4) In-cab passenger direct UPI payment transaction receipts.
Uploaded images are cryptographically encrypted at rest using AES-256 and never shared with commercial advertising networks.
C. Push Notifications & High-Priority 45s Audible Dispatch Sirens
Priority AlertsProminent In-App Disclosure Statement: Notifications deliver high-priority 45-second audible dispatch sirens and real-time counter-offer alerts when nearby passengers book trips, ensuring drivers never miss an immediate commercial dispatch opportunity even when the phone is locked.
D. VoIP Audio & Contact Number Privacy Masking
Privacy MaskingTo prevent harassment and protect personal privacy, direct passenger mobile numbers are cryptographically masked. In-app VoIP calling connects drivers and passengers without exposing direct phone numbers.
3. UIDAI Aadhaar Cryptographic Masking Standard (Regulation 16A)
In strict compliance with UIDAI Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Regulations, 2016 (Section 29 and Regulation 16A) and Supreme Court of India privacy directives:
• Immediate Masking: Any 12-digit Aadhaar number submitted during partner KYC onboarding is instantly masked (e.g. XXXX-XXXX-4921).
• Zero Raw Storage: Raw 12-digit Aadhaar numbers are never logged, indexed, queried, or exported.
• No Biometric Collection: Fingerprint, iris, or facial biometric data is never collected, accepted, or stored.
4. Zero Third-Party Monetization & Absolute Disclosure Safeguards
Firmbeginners It Solutions Private Limited enforces a strict zero third-party monetization policy. Under no circumstances do we sell, rent, lease, or monetize user phone numbers, travel itineraries, fleet rosters, or driver credentials to digital advertising brokerages or third-party lead generation aggregators.
Personal data is disclosed strictly under the following statutory conditions:
- Fulfillment of Booked Rides: Sharing pickup/drop locations and vehicle specs between matched passengers and drivers.
- Judicial & Police Orders: Lawful compliance with valid warrants or notices issued under the Bharatiya Nagarik Suraksha Sanhita (BNSS) / CrPC.
- Emergency Support Integration: Escalation to the National Emergency Response Support System (ERSS 112) upon active in-app SOS distress trigger.
- Statutory Transport Audits: Compliance audits mandated by the Ministry of Road Transport and Highways (MoRTH) or State Transport Departments.
5. Cryptographic Security & Indian Sovereign Data Residency (CERT-In)
All personal information, identity tokens, telemetry coordinates, and financial ledgers are protected with multi-layered enterprise encryption:
All database records and file attachments encrypted.
256-bit encrypted secure communication channels.
Sovereign cloud data centers compliant with CERT-In.
6. Data Retention & Account / Data Deletion Portal (Google Play Data Safety)
In compliance with Google Play Data Safety requirements and Section 12 of the DPDPA 2023, users and driver partners maintain full control over account termination and data erasure:
Statutory Exception: Commercial invoice records and tax payment references (UTR) are retained for a period of 7 years in accordance with Section 44AA of the Income Tax Act, 1961, after which they are permanently purged.
7. Data Principal Statutory Rights (DPDPA 2023 Sections 11–14)
Request a complete summary of all personal data held and processing activities performed.
Update outdated or inaccurate personal credentials, mobile numbers, or vehicle rosters.
Request complete purging of personal identity data upon formal account deactivation.
Directly escalate grievances to our Statutory Grievance Redressal Officer.
8. Statutory Grievance Redressal Officer & Corporate Contact
Pursuant to Rule 3(11) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 10 of the Digital Personal Data Protection Act, 2023:
Statutory Acknowledgement: < 24 Hours • Final Resolution: < 15 Business Days
Platform Brands: YatriCare 2.0 & YatriCare Partner