Privacy Policy for Syncy

Last updated: 16 September 2026

Note: This policy identifies "Syncy" as the data controller. This will be updated with final legal entity details before public launch.

Syncy ("we", "us", "our") operates a mobile application that connects commuters to share rides on two-wheelers (bikes/scooters) and four-wheelers (cars) for cost-sharing purposes. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information, in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

By using Syncy, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information: Name, email address, phone number, password (stored encrypted), profile photo (optional).

Vehicle Information: Vehicle model or name (bike/scooter or car), vehicle registration number (for users posting rides).

Location Information: The places you enter for rides and searches, and your location when you allow it. See "When Syncy Uses Your Location" below.

Communications: Messages sent through in-app chat with the riders or passengers you book with. After a booking or ride ends, both of you can still read the conversation, but no new messages can be sent.

Ride & Usage Information: Ride history, ratings and reviews, push-notification device token.

When Syncy Uses Your Location

Syncy asks for location access only while you are using the app, and never collects your location in the background. You can use Syncy without allowing location by typing addresses instead; only the features below that need your position will not work.

How We Use Your Information

We use your information to create and manage your account, match you with nearby riders/passengers, enable in-app chat, display your name/photo/rating/vehicle details to matched users, send ride-related notifications, maintain safety and accountability, and improve the app.

We do not sell your personal information, and we do not use your data for advertising.

Sharing of Information

Who can see what

Your phone number and email are not shared with other users. We may share information with authorities if required by law.

Service providers: We use Google Maps Platform (Google LLC) to suggest addresses as you type, to find the location of the place you choose, to find the address of your current location or a point chosen on the map, to name pickup and drop-off points, to calculate route options, distances and travel times, and to show maps in the app.

The information sent to Google includes the text you type in an address field; the places involved in a ride or search, such as the start, destination, stops, pickup and drop-off points; the departure time and vehicle type used to calculate a route; and your approximate location for nearby suggestions. When a map is displayed, the map provider also receives technical information such as your device's IP address. Your name, phone number and email are never sent to Google. Google processes this information under the Google Privacy Policy (policies.google.com/privacy).

Navigation apps: When a rider taps "Start turn-by-turn", Syncy opens Google Maps, Waze or Apple Maps, whichever the rider chooses, with the upcoming pickup, drop-off or destination points. That app's own terms and privacy policy then apply. The rider's choice of navigation app is saved only on their phone.

Data Retention & Deletion

Ride locations: Ride locations, routes and travel times are deleted 30 days after they are calculated. The addresses you chose, dates, fares, ratings and chats stay in your ride history.

We retain your information while your account is active. You can delete your account at any time from Profile → Delete my account in the app, or by emailing our Grievance Officer below if you no longer have the app installed. Deletion is immediate and there is no recovery period.

What is deleted: your name, email address, phone number, profile photo, gender, vehicle details, push-notification token, and the ratings and reviews you received. Any upcoming rides or bookings are cancelled, and the other person is notified.

What remains, and why: messages you sent stay visible to the people you chatted with, because a conversation is a shared record belonging to both participants. Ratings and reviews you gave to others also remain, shown as from "Deleted User" — removing them would unfairly change another user's rating through no action of their own. Completed ride records are retained as part of the other participant's travel history. None of these remain linked to your name or contact details.

Safety record: for 12 months after deletion we retain a minimal record containing a one-way cryptographic hash of your email address and phone number, the deletion date, and your rating summary. This cannot be used to identify you or to contact you. Its only purpose is to allow us to respond to a lawful request or a safety complaint about a past ride, and to detect when a previously deleted account signs up again. The record is automatically purged after 12 months. This retention is permitted under the DPDP Act where processing is necessary for compliance with law or for safety purposes.

Your Rights

Under the DPDP Act, 2023, you may access your data, request correction or erasure, withdraw consent, and lodge a grievance with our Grievance Officer or, if unresolved, with the Data Protection Board of India.

Grievance Officer

Email: privacy@syncy.in

Data Security

We use reasonable technical measures (including encrypted password storage and TLS database connections) to protect your data, though no method of transmission or storage is 100% secure.

Children's Privacy

Syncy is intended for users aged 18 and above. We do not knowingly collect data from individuals under 18.

Changes to This Policy

We may update this Privacy Policy from time to time; material changes will be reflected in the "Last updated" date above.

Contact Us

Questions about this policy: privacy@syncy.in