Privacy Policy

Draft, pending legal review. Placeholders in [brackets] need real values before this is final.

Last updated: [date]

Who we are

Sobat is a meeting layer for shared cabs — we help people going the same way find each other, meet up, and split a fare they arrange and pay for themselves. We don’t operate vehicles, employ drivers, or process payments. Sobat is operated by [Company/Entity Name], [registered address].

What we collect

To run the matching and safety features described below, we collect:

• Phone number, and email if you sign in with Google
• First name and profile photo
• Gender, age range, and a coarse profession category — shown only to riders you’re matched with
• Pickup and drop locations for each trip you post, and your device location if you use “current location” to set one
• Identity verification result from our KYC provider (a pass/fail outcome only — we never store your ID number or a copy of your ID document ourselves)
• Messages you send in a group chat, and ratings you give or receive
• A push-notification token, if you allow notifications

Why we collect it

Only to match you with compatible riders, coordinate the meetup, verify identity before a first ride, and let riders rate each other. We don’t use your data for advertising, and we don’t sell it.

Who we share it with

We use a small number of service providers to run the app, each processing only what they need to do their job: Supabase (hosting our database and login), Twilio (sending SMS verification codes), Google (sign-in, and location search), Expo (delivering push notifications), GitHub (hosting this website), and our identity verification provider. None of them are permitted to use your data for their own purposes.

Location data

Pickup and drop points you post are visible to riders you’re matched or browsing candidates with. We treat this as our most sensitive data category — it’s kept only as long as needed for the trip and matching history, and access is limited to people you’ve actually matched with.

Website and newsletter

If you subscribe to updates on this website, we store your email address only to send you news about Sobat, such as when it launches. You can unsubscribe at any time. This website doesn’t use cookies, advertising or analytics trackers.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us what data we hold about you, correct it, or ask us to delete it. You can delete your account and all associated data yourself at any time from Profile → Delete account in the app, or on our website at getsobat.in/delete-account.html, or contact us at [grievance officer email].

Age

Sobat is for users 18 and older. We don’t knowingly collect data from anyone younger.

Grievance officer

[Grievance Officer Name]
[Email]
[Address]

Changes

If this policy changes materially, we’ll let you know in the app before the change takes effect.

Governing law

This policy is governed by the laws of India.