SyncyPrivacy Policy for Syncy
Last updated: 2 November 2026
SYNCY (OPC) PRIVATE LIMITED ("Syncy", "we", "us", "our") operates a mobile application that connects commuters to share rides on two-wheelers (bikes/scooters) and four-wheelers (cars) for cost-sharing purposes. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information, in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
By using Syncy, you agree to the collection and use of information as described in this policy.
Information We Collect
Account Information: Name, email address, phone number, password (stored encrypted), profile photo (optional).
Vehicle Information: Vehicle model or name (bike/scooter or car), vehicle registration number (for users posting rides).
Location Information: The places you enter for rides and searches, and your location when you allow it. See "When Syncy Uses Your Location" below.
Communications: Messages sent through in-app chat with the riders or passengers you book with. After a booking or ride ends, both of you can still read the conversation, but no new messages can be sent.
Ride & Usage Information: Ride history, ratings and reviews, push-notification device token.
Ride Alerts: If you ask to be told when a matching ride is posted, we save that search — the two places you entered, the date and time you searched for, and your vehicle choice — so that we can check new rides against it.
SOS: If you pick an option on the SOS screen during a ride, we record which option you picked, the ride, the time, and your location at that moment. See "When Syncy Uses Your Location" below.
Crash reports: If the app hits an error or closes unexpectedly, it sends us a crash report so that we can fix the problem. A report contains the error and where in the app's code it happened, the app version, your phone's model and operating-system version, the name of the screen you were on, a short list of the screens you opened and the app features used just before (such as "loaded a ride", with no content), and a random number created when the app was installed so that we can tell how many phones are affected. It never contains your name, email address, phone number, location, messages or anything you typed. If you have no internet connection, the report waits on your phone and is sent later. Reports are seen only by the Syncy team and are not shared with anyone else.
Waitlist on syncy.in: If you join the waitlist on our website, we collect your email address, whether you want to find a ride or offer one, the two areas you type (From and To), your vehicle choice, and the time you agreed to be emailed. We ask for areas only, never a house address. We use this to send you one email when Syncy launches, and to count which routes people want. We send nothing else. The waitlist is separate from app accounts. Your IP address is used only to limit repeated sign-ups and is not stored with your entry.
Early access group: Before Syncy opens to everyone on Google Play, you can join early access through our Google Group (run by Google LLC). When you join, we can see the email address of the Google account you joined with. We use it only to let that account install Syncy from Google Play during early access. Other members cannot see it. The group is separate from your Syncy account.
When Syncy Uses Your Location
Syncy asks for location access only while you are using the app, and never collects your location in the background. You can use Syncy without allowing location by typing addresses instead; only the features below that need your position will not work.
- Places you enter. The start, destination, stops, pickup and drop-off points you choose for a ride or a search are sent to our server to find matching rides. They are saved only when you post a ride, send a booking request or set up a regular commute.
- "Use my current location". Your position is read once and used as the place for that ride or search. Its address is looked up with Google.
- Nearby suggestions. If you have already allowed location access, your approximate location is sent with an address search so that nearby places appear first.
- Pickup and drop-off suggestions. When you search a whole city and open a ride, your approximate location, rounded to about a kilometre, is sent with the request so that the suggested spots closest to you are listed first. It is used for that request only and is not stored.
- Reaching your drop-off. While you have a booked seat, if the app is open around your drop-off time, your location is checked once to see whether you are within a kilometre of your drop-off point, so the ride can show that you have arrived. We store only the time of that check and how far away you were, not the location itself.
- Distance to your pickup. A ride's details screen shows how far you are from your pickup. This is calculated on your phone and is not sent to us.
- Drive mode. While Drive mode is open, the app follows your location to show your next pickup or drop-off and to notice when you reach it. This stays on your phone, is not sent to us, and stops when you leave Drive mode.
- Ride completion check. When a rider marks a ride complete, their location is checked once to confirm they are near the destination or the last drop-off. We store only whether the check passed and how far away they were, not the location itself. A location reported by a mock-location app does not pass the check.
- Review check. When a passenger reviews a ride before the rider marks it complete, their location is checked once to confirm they are near their drop-off. This location is not stored.
- SOS. If you pick an option on the SOS screen during a ride — calling 112, sharing your ride, or telling Syncy — we record which option you picked, the ride, the time, and your location at that moment. This is the only place where Syncy stores your actual location, and it is kept so that it is available if the police or a complaint needs it later. Opening the SOS screen on its own records nothing, and the other person in the ride is never told. If your location is unavailable, the record is still saved without it.
How We Use Your Information
We use your information to create and manage your account, match you with nearby riders/passengers, enable in-app chat, display your name/photo/rating/vehicle details to matched users, send ride-related notifications, maintain safety and accountability, and improve the app.
We do not sell your personal information, and we do not use your data for advertising.
Sharing of Information
Who can see what
- People searching for rides can see a posted ride: the rider's name, photo and rating, vehicle model, a partly hidden vehicle number, the start and destination, route, stops, time, fare and free seats.
- The full vehicle number is shown only to the rider's accepted passengers.
- A rider can see the name, photo and rating of each passenger who requests their ride, the passenger's pickup and drop-off points on the route with times, the fare, and any note the passenger adds.
- Other passengers never see your name, your pickup or drop-off point, or the place you searched from. When explaining where a seat is free, they may see only an area name, such as "Manesar".
Your phone number and email are not shared with other users. We may share information with authorities if required by law.
Service providers: We use Google Maps Platform (Google LLC) to suggest addresses as you type, to find the location of the place you choose, to find the address of your current location or a point chosen on the map, to name pickup and drop-off points, to calculate route options, distances and travel times, and to show maps in the app.
The information sent to Google includes the text you type in an address field; the places involved in a ride or search, such as the start, destination, stops, pickup and drop-off points; the departure time and vehicle type used to calculate a route; and your approximate location for nearby suggestions. When a map is displayed, the map provider also receives technical information such as your device's IP address. Your name, phone number and email are never sent to Google. Google processes this information under the Google Privacy Policy (policies.google.com/privacy).
Emergency contacts: The names and numbers you add as emergency contacts are saved only on your phone and are never sent to us. When you share your ride from the SOS screen, the message is sent by your phone's own messaging or sharing app, not by Syncy, so we do not see who you sent it to.
Navigation apps: When a rider taps "Start turn-by-turn", Syncy opens Google Maps, Waze or Apple Maps, whichever the rider chooses, with the upcoming pickup, drop-off or destination points. That app's own terms and privacy policy then apply. The rider's choice of navigation app is saved only on their phone.
Data Retention & Deletion
Ride locations: Ride locations, routes and travel times are deleted 30 days after they are calculated. The addresses you chose, dates, fares, ratings and chats stay in your ride history.
Ride alerts: a ride alert and the search saved with it are kept for up to 7 days. The alert and everything saved with it are deleted as soon as it ends — when those 7 days pass, when you turn it off, or when you book a matching ride.
Early access group: we remove members from the group when early access ends, when Syncy opens to everyone on Google Play. You can leave the group yourself at any time.
Waitlist: waitlist entries are deleted 6 months after Syncy launches. You can ask us to remove yours sooner at any time by writing to privacy@syncy.in from that email address.
Crash reports: crash reports are deleted 60 days after they are received.
Backups: we keep encrypted backups of our database so that we can recover if something fails. They are encrypted with a key that only Syncy holds and are stored with a cloud storage provider that cannot read them. When information is deleted, including when you delete your account, copies of it can remain in these backups for up to 30 days, after which the oldest backups are removed. Backups are used only to restore Syncy after a failure.
SOS records: an SOS record, including the location saved with it, is kept while your account is active. If you delete your account it is not removed straight away: it is kept for 12 months from the date of deletion and then purged automatically, the same window as the safety record described below. This is the one thing we keep beyond deletion that contains a location, and it is kept only so that we can answer a lawful request or a safety complaint about that ride.
We retain your information while your account is active. You can delete your account at any time from Profile → Delete my account in the app, or without the app at www.syncy.in/delete-account, where you confirm with your password and a code we email you. If you can't reach that email, write to Syncy at the grievance address below. Deletion is immediate and there is no recovery period.
What is deleted: your name, email address, phone number, profile photo, gender, vehicle details, the driving licence and vehicle RC details you sent for verification, push-notification token, and the ratings and reviews you received. Any upcoming rides or bookings are cancelled, and the other person is notified.
What remains, and why: SOS records are kept for 12 months as described above. Messages you sent stay visible to the people you chatted with, because a conversation is a shared record belonging to both participants. Ratings and reviews you gave to others also remain, shown as from "Deleted User" — removing them would unfairly change another user's rating through no action of their own. Completed ride records are retained as part of the other participant's travel history. None of these remain linked to your name or contact details.
Safety record: for 12 months after deletion we retain a minimal record containing a one-way cryptographic hash of your email address and phone number, the deletion date, and your rating summary. This cannot be used to identify you or to contact you. Its only purpose is to allow us to respond to a lawful request or a safety complaint about a past ride, and to detect when a previously deleted account signs up again. The record is automatically purged after 12 months. This retention is permitted under the DPDP Act where processing is necessary for compliance with law or for safety purposes.
Your Rights
Under the DPDP Act, 2023, you may access your data, request correction or erasure, withdraw consent, and lodge a grievance with Syncy or, if unresolved, with the Data Protection Board of India.
Grievances
Write to Syncy: privacy@syncy.in
We respond to grievances within 30 days.
Data Security
We use reasonable technical measures (including encrypted password storage and TLS database connections) to protect your data, though no method of transmission or storage is 100% secure.
Children's Privacy
Syncy is intended for users aged 18 and above. We do not knowingly collect data from individuals under 18.
Changes to This Policy
We may update this Privacy Policy from time to time; material changes will be reflected in the "Last updated" date above.
Contact Us
Questions about this policy: privacy@syncy.in