Legal
Privacy policy
Last updated 29 September 2026
This policy explains what personal data RushGo collects when you use our app and website, why we collect it, who can see it, how long we keep it and the rights you have under India's Digital Personal Data Protection Act, 2023.
The short version
- We ask for as little as we can: your mobile number, your name and the details of your trips.
- Other members never see your phone number. They see your name, initials and rating.
- Card and UPI details go to our payment partner, Razorpay, never to us.
- We don't sell your data or show you ads, and the app doesn't track your location.
- You can delete your account in the app at any time.
Who we are
RushGo Technologies ("RushGo", "we", "us") decides how and why your personal data is used for the RushGo app and website. This makes us the Data Fiduciary under the Digital Personal Data Protection Act, 2023. Our contact details are at the end of this policy.
What we collect
| What | Details |
|---|---|
| Account | Your mobile number, which you sign in with, and your name. |
| Rides you publish | Pickup and destination, date and times, vehicle model and registration number, seats, price per seat and preferences such as AC. |
| Bookings | The rides you book, seats, fares, cancellations and their outcome. |
| Wallet and payments | Money added, commitments, fares, earnings and refunds, and the payment references Razorpay gives us (order and payment IDs and status). Not your card number, UPI PIN or bank passwords. |
| Chat | Messages between you and the other person on a booking, and when they were read. |
| Ratings | Your rating and whether your profile is verified. |
| Technical data | Your IP address and device or browser type, which we use to keep sign-in secure, limit abuse and fix problems. |
| On your device only | Your sign-in, kept in your phone's secure storage, and your recent searches. We don't receive your recent searches. |
We don't collect your device's location, contacts or photos, and we don't use advertising or analytics trackers in the app or on this website.
How we use it
- To create your account and sign you in with a one-time code.
- To show rides, connect ride givers and passengers, and let you chat about a booking.
- To hold and return commitments, take fares, pay ride givers and process refunds.
- To send you updates about your rides and bookings in the app.
- To keep RushGo safe: preventing fraud, fake accounts and abuse, and investigating reports.
- To answer your questions and complaints.
- To meet legal obligations, such as keeping tax and accounting records and responding to lawful requests.
We use your data because you give your consent when you sign up, and, where the Digital Personal Data Protection Act, 2023 allows, for legitimate uses such as meeting a legal obligation. You can withdraw your consent by deleting your account.
Where your data is stored
Our servers are in Singapore. Transfers of personal data outside India follow the Digital Personal Data Protection Act, 2023, which allows them except to countries that the Government of India restricts.
How long we keep it
| Data | How long |
|---|---|
| Your account: name and phone number | Until you delete your account. |
| Sign-in codes | Stored only in a scrambled (hashed) form, valid for 5 minutes and deleted within a day. |
| Signed-in sessions | Up to 30 days without use, and removed within 7 days after that. All end when you delete your account. |
| Chat messages and notifications | Until you delete your account. Messages the other person sent you stay in their history. |
| Records of rides, bookings and payments | Up to 8 years, because tax and accounting laws require them. After you delete your account, they're kept without your name or phone number. |
| Phone number after you delete your account | Only if we owe you money from your wallet, and only until we've returned it. |
| Technical logs | No longer than 180 days. |
| Recent searches | Only on your device, until you delete your account or clear the app's data. |
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- get a summary of the personal data we hold about you and who we've shared it with;
- correct or update it. You can change your name in the app; to change your mobile number, contact us;
- erase it by deleting your account in the app (Profile, then Delete account) or by asking us;
- withdraw your consent, which you do by deleting your account;
- nominate someone to use these rights for you if you die or become unable to;
- complain to us, and if you're not satisfied with our answer, to the Data Protection Board of India.
To use these rights, write to our Grievance Officer from the details below. We'll confirm it's you by sending a code to your registered number, and we'll reply within 15 days.
How we protect your data
- The app and website only talk to our servers over encrypted connections (HTTPS).
- Sign-in codes and sessions are stored only in hashed form, and repeated wrong attempts are blocked.
- Only people who need it to run RushGo can access personal data.
No system is perfectly secure. If a breach affects your personal data, we'll tell you and the Data Protection Board of India as the law requires.
Children
RushGo is only for people aged 18 or over, and we don't knowingly collect data about children. If you think a child has signed up, contact us and we'll delete the account.
This website
This website doesn't use cookies or analytics. It's hosted on GitHub Pages, which may keep technical logs such as IP addresses in order to run its service.
Changes to this policy
If we change this policy in a significant way, we'll tell you in the app before the change takes effect. The date at the top shows when it was last updated.