Privacy Policy

Kruze Commute (the "App") is owned and operated by Invicto Technologies Private Limited ("Kruze", "we", "us" or "our"), a company incorporated in India. We operate a technology platform that connects riders with independent driver partners for point-to-point transport.

This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have. It applies to the App, our website at kruze.in, and any related services. By using Kruze Commute, you agree to this Policy. If you do not agree, please do not use the App.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

Information you give us. Your name, mobile number, email address, profile photo, saved addresses (such as home and work), emergency contacts, and any feedback, ratings or support messages you send us.

Location data. Precise GPS location from your device to show nearby vehicles, set pickup points, navigate your trip, calculate fares and provide support. Rider location is collected while the App is in use and, if you allow it, in the background during an active trip so we can share live trip status and respond to safety incidents. You can turn location permissions off in your device settings, but core booking features will not work without them.

Trip and transaction data. Pickup and drop-off points, route taken, date and time, distance, duration, fare breakdown, waiting time, cancellations, tolls, promotions applied, and payment status.

Payment data. Payments are processed by RBI-authorised payment gateways. We receive a transaction reference, payment method type and status. We do not store your full card number, CVV or UPI PIN.

Device and usage data. Device model, operating system, app version, unique device and advertising identifiers, IP address, mobile network, crash logs, and how you interact with screens and features.

Communications. Calls and chat messages between riders and driver partners are routed through masked numbers or in-app chat. We retain metadata (time, duration) and may retain message content for safety, fraud and dispute resolution.

Driver partner data. If you register as a driver partner, we additionally collect your driving licence, vehicle registration certificate, permit, fitness and insurance documents, PAN, Aadhaar-based or other identity verification records, bank or UPI settlement details, police verification status, and vehicle telematics.

• Create and manage your account and verify your identity.
• Match you with a nearby driver partner and enable the trip.
• Calculate fares, process payments, issue invoices and handle refunds.
• Provide navigation, live tracking, trip sharing and ETA updates.
• Send you service communications by SMS, WhatsApp, email or push notification about bookings, receipts and account activity.
• Provide customer support and resolve disputes and lost-item claims.
• Keep the platform safe: detect fraud, misuse and unsafe behaviour, and investigate incidents and complaints.
• Improve routing, pricing, supply planning, product features and safety systems, including through aggregated analytics.
• Send you offers, promotions and referral rewards, where you have not opted out.
• Comply with legal obligations and respond to lawful requests from authorities.

We process your personal data on the basis of the consent you give when you create an account and grant permissions, and for certain legitimate uses permitted by law, such as complying with a legal obligation, responding to a medical emergency or threat to safety, and preventing fraud.

You may withdraw your consent at any time by writing to us at the address in Section 12 or by deleting your account in the App. Withdrawal is not retrospective and may mean we can no longer provide the service.

We do not sell your personal data. We share it only as described below.

• Driver partners and riders: to complete a trip, a driver partner sees your first name, pickup and drop-off location, rating and masked contact number. You see the driver partner's name, photo, rating, vehicle model and registration number.
• Service providers: payment gateways, mapping and navigation providers, cloud hosting, SMS, WhatsApp and email providers, analytics, crash reporting, customer support and background verification vendors. They act on our instructions and are bound by confidentiality and data protection obligations.
• Emergency and safety: with police, hospitals, emergency responders or your registered emergency contacts when there is a credible risk to life or safety, or when you trigger the in-app SOS.
• Legal and regulatory: with courts, law enforcement, transport authorities and regulators where required by law or to establish, exercise or defend legal claims. This includes trip data required under applicable Motor Vehicle Aggregator Guidelines.
• Corporate accounts: if your rides are booked or paid for by your employer, we share trip and expense details with that organisation.
• Business transfers: with an acquirer or successor entity in a merger, acquisition, restructuring or sale of assets, subject to this Policy.

We keep your personal data for as long as your account is active and thereafter for as long as needed to meet legal, tax, accounting, safety and dispute-resolution requirements. Trip and transaction records are typically retained for a minimum of eight years to meet statutory obligations. Data that is no longer required is deleted or irreversibly anonymised.

We use reasonable security safeguards including encryption in transit, access controls, number masking, secure cloud infrastructure and periodic reviews to protect your data against unauthorised access, disclosure, alteration or loss. No system is completely secure, so we cannot guarantee absolute security. Keep your account credentials and device confidential and tell us immediately about any suspected unauthorised use.

• Access a summary of the personal data we process about you and how we process it.
• Correct or update inaccurate or incomplete data, directly in the App or by writing to us.
• Request erasure of your data and deletion of your account, subject to data we must retain by law.
• Withdraw consent for optional processing, including marketing communications.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if you are not satisfied.

To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before acting on a request, and we will respond within the timelines prescribed by law.

Kruze Commute is not intended for children under 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child without verifiable parental consent, we will delete it. Unaccompanied minors may not book or take rides.

Our website and App use cookies, SDKs and similar technologies to keep you signed in, remember preferences, measure performance and understand how the service is used. You can manage cookies through your browser settings and limit ad tracking through your device settings. Some features may not work if you disable them.

We may update this Policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, notify you in the App or by email. Continuing to use Kruze Commute after a change takes effect means you accept the revised Policy.

For questions about this Policy or to exercise your rights, contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

We acknowledge grievances within 24 hours and aim to resolve them within 15 days of receipt.