Privacy Policy

Keyro is a product of MEETINGAI QUANTUM SOLUTIONS PRIVATE LIMITED, a company incorporated in India ("we", "us", "our"). Keyro provides self-drive vehicle rentals, driver-on-hire, kids-safe school-pickup services, and shared Pool Rides in Telangana, India. This Privacy Policy explains what personal information we collect, why we collect it, and how we protect it.

1. Information we collect

• Account details: name, email address, mobile number, password (stored hashed).
• Identity (KYC) documents: driving licence (front and back), selfie, Aadhaar number (encrypted at rest). Required by Indian motor vehicle regulations and our insurance partners.
• Location: approximate and precise GPS location for trip tracking, pickup verification, safety, and dispute resolution, and for Pool Ride live location sharing when you choose to enable it. Pool Ride updates also include the update time and travel direction when available. If you opt in and grant the required device permissions, Pool Ride location updates continue in the background, including while you use other apps or lock your phone. See section 8 for sharing controls. You can disable precise location in your device settings; some features will not work.
• Payment information: processed entirely by Razorpay (PCI-DSS compliant). We never see or store your card or UPI credentials. We retain only the transaction ID and amount.
• Trip photos: photos of the vehicle taken at pickup and drop-off, for damage and condition records.
• Device information: device model, OS version, app version, and a non-reversible installation ID, used for crash reports and abuse prevention.
• Communications: in-app chat messages between buddies, owners, and drivers are retained for safety and dispute resolution.

2. How we use your information

• To create and operate your account and process bookings.
• To verify your identity and driving licence before allowing rentals.
• To enable communication between renters, owners, and drivers.
• To coordinate Pool Ride pickups and meetups using opt-in live locations and pickup-proximity notifications.
• To process payments and refunds via Razorpay.
• To investigate accidents, traffic violations, claims, and disputes.
• To send service notifications (booking confirmations, OTPs, payment receipts).
• To improve the app and fix bugs through aggregated analytics.

3. How we share your information

We do not sell your personal information. We share it only with:

• Other Keyro users involved in your booking (e.g. a host sees the renter's name, photo, and rating; a driver sees the buddy's pickup location). During opt-in Pool Ride sharing, the host can see eligible riders' shared positions, and eligible riders can see the host's shared position and their own position. Riders cannot see other riders' live positions. These live positions are not displayed publicly.
• Service providers who process data on our behalf: Razorpay (payments), our SMTP provider (emails), our hosting provider (Replit), our SMS/OTP gateway, and Google/Photon mapping services. Each is bound by contractual confidentiality.
• Law enforcement or regulators when required by Indian law, court order, or to prevent fraud and serious harm.
• Insurance partners when processing a claim related to your booking.

4. Data security

• All network traffic uses HTTPS / TLS 1.2+.
• Passwords are hashed using BCrypt — never stored in plaintext.
• Aadhaar numbers are encrypted at rest using AES-256.
• Access to production databases is restricted to authorised engineers using multi-factor authentication.

5. Data retention

We retain account and booking records for as long as your account is active, plus 7 years thereafter (required by Indian tax and motor vehicle regulations). KYC documents and trip records related to a disputed or unresolved claim are retained until the claim is closed.

Pool Ride live location sharing uses a latest-position record: each new update replaces the previous live position. When our server processes your stop-sharing request, the live coordinates are cleared. A sharing-session record may remain to enforce your opt-out and prevent delayed updates from restoring sharing. If your device cannot reach our server, the last submitted position may remain visible briefly until the stop request is processed or the position becomes too old to display.

6. Your rights

You may:

• Access, correct, or download a copy of your personal data.
• Request deletion of your account and associated personal data, subject to legal retention requirements above.
• Withdraw consent for non-essential communications.
• Stop Pool Ride location sharing in the app or withdraw location permission in your device settings, without closing your account.

To exercise these rights, email support@keyrorentals.com from the email address registered on your account. We respond within 30 days.

7. Children

Keyro is not directed at users under 18. We do not knowingly collect personal information from minors. If we discover such data we will delete it.

8. Location data — disclosures required by Google Play

Keyro collects precise (GPS) and approximate location data for its location-based features. When you explicitly enable background sharing for a Pool Ride and grant the required permissions, Keyro collects location data to enable live location sharing and pickup coordination even when the app is in the background or not in use, including while your phone is locked. Background sharing is optional; granting a device permission alone does not start a Pool Ride sharing session.

• What is collected and why: your location, update time, and travel direction when available are sent to Keyro's servers to keep your shared position current, coordinate pickups and meetups, and provide pickup-proximity notifications.
• Who can see it: access is limited to eligible participants in the same Pool Ride. The host can view participating riders' shared positions; riders can view the host's shared position and their own. Live positions are not shown on public ride listings or shared with unrelated users.
• Your choice: Keyro explains background sharing before requesting background-location permission. You can cancel, choose “Only while open” for foreground-only sharing, or allow background sharing. Android displays an ongoing notification while the location foreground service is running.
• How to stop: use the stop-sharing control on the Pool Ride live map or the in-app location-sharing banner. You can also revoke Keyro's location permission in your device settings. Sharing is stopped on sign-out and when the app detects that the ride has ended, been cancelled, your participation is no longer eligible, or the sharing session has expired. The server rejects further updates for ended or cancelled rides, ineligible participants, and revoked or expired sharing sessions.
• Scope: sharing is tied to the Pool Ride you selected, not continuous tracking of all your activity. Choosing foreground-only sharing or declining background permission does not enable background sharing. Device settings, battery restrictions, or the operating system stopping the app can interrupt updates.

Location data is not shared with third parties for advertising and is not sold. Service providers process location data only as needed to deliver the features described in this policy. For live-position retention and removal, see section 5.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above will change. Material changes will be notified in the app and by email.