Privacy Policy — Zippy Fleet

Who this policy covers

Zippy Fleet is an internal tool a vehicle fleet operator uses to run its own drivers, vehicles, attendance and compliance. It is not a consumer app: there is no public sign-up, and your account is created for you by your fleet office. This policy covers drivers using the Zippy Fleet app and staff using the fleet dashboard. If you are a passenger booking a cab, or a partner using the Zippy Partner app, a different policy applies to you.

Location — only at check-in and check-out

• We read your device's precise location once, at the moment you finish a check-in or a check-out.
• We do not collect location in the background, we do not collect it while the app is closed, and we do not record your route. There is no background-location permission in this app at all.
• We use it to record where a shift started and ended, so the office can confirm you were with the vehicle and settle a dispute about a trip from evidence rather than memory.
• Before Android asks for location permission, the app shows you an explanation of what is collected, when, why and who sees it, and asks you to accept. If you decline, Android is never asked, nothing is collected, and you can still check in — the record is simply saved without a location.
• A check-in with no location is an ordinary case, not a fault: underground car parks have no usable GPS.

Photographs you take in the app

• The vehicle from four sides, at check-in and check-out, recording its condition at handover.
• The odometer, so the reading you type can be checked against the picture that proves it.
• A photograph of yourself with the vehicle, which is the evidence that you were the person who took it out.
• The camera is only used while you are taking one of these photographs. The app cannot use it at any other time.

Other information the app records

• Your mobile number, used to sign you in. There is no password — a one-time code is sent to the number your office registered.
• Odometer readings, shift start and end times, and trip details you enter.
• The make and model of your phone and the app version, recorded with a check-in so the office can diagnose a problem you report.

What your office records separately

To put you on the road legally, your fleet office holds your name, date of birth, address, contact details, an emergency contact, and identity and licence documents such as your driving licence, Aadhaar, PAN or voter ID. These are entered by office staff in the dashboard, not by you in the app. The driver app has no screen that displays identity documents and no way to fetch them — the server refuses those requests from a driver session even though the documents are about you.

What the app does not do

• No advertising, no advertising identifiers, and no analytics or tracking software of any kind.
• No notifications permission — the app never asks for one.
• No access to your contacts, messages, call history, photo library or files.
• We do not sell your personal data, and we never share it for advertising.

How we use it

To confirm you were with the vehicle at the start and end of a shift; to record the vehicle's condition at handover so responsibility for damage is clear; to calculate attendance, distance driven and pay; to check that a vehicle's insurance, pollution certificate and fitness are current before you drive it and that your licence is valid; and to answer an insurance claim, a traffic challan or a police enquiry.

Who we share it with

• Your own fleet office. Its staff can see your profile, documents, shifts and check-in photographs in order to run the fleet.
• Amazon Web Services — hosting and file storage, in the Mumbai (ap-south-1) region. Your data stays in India.
• MSG91 — receives your mobile number so it can send your login code.
• Google Maps Platform — used to turn an address into a place and to estimate distances. It receives the search text and coordinates involved, not your identity.
• Law enforcement, a court or a transport authority, where we are legally required to disclose.

How it is protected

• All traffic between the app and the server is encrypted with HTTPS.
• Photographs and documents are held in private storage that cannot be read from the public internet, and are served only through short-lived links issued after the server has checked who is asking.
• You can only reach files attached to your own shifts. That is verified against the database, not against the address of the file.
• Login codes are stored only as a one-way hash, so a copy of the database does not hand anyone a working code.

How long we keep it

Your records are kept while you drive for the operator, and afterwards for as long as they are needed to meet legal, tax, insurance and employment obligations, or to resolve a dispute that is still open. Check-in photographs are operational evidence and are kept for the period your operator sets for that purpose.

Your choices and your rights

• Location is optional. Decline it in the app, or turn it off later in Android Settings — check-in continues to work either way.
• You may ask for a copy of the personal data held about you, ask for something incorrect to be corrected, or ask for your data to be deleted where the operator is not required to keep it.
• Because your account is created and owned by your fleet office, these requests are handled by them. Uninstalling the app does not delete records the operator must keep.

Children

This app is for people employed or engaged to drive. It is not directed at children and is not intended for anyone under 18.

Changes to this policy

If we change what we collect or how we use it, we will update the date at the top of this page.

Contact

Questions about this policy, or a request about your own data: write to zippycab.services@gmail.com or call +91 62923 43075. You can also speak to your fleet office directly.