CammuteThis policy explains how Cammute (“we”, “us”) handles your personal data when you use the Cammute apps for iPhone and Android and this website. Cammute is operated by e404 Technology, MM-45, Sector Q, Aliganj, Lucknow, Uttar Pradesh, India, which is the Data Fiduciary for your personal data under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
In short: we collect what is needed to match verified colleagues for shared office commutes and to keep rides safe. We don’t sell your data, we don’t show ads, and we never handle your money.
1. Data we collect
| Data | Why |
|---|---|
| Work email address | To sign you in and to confirm which company you work for. Personal email providers are not accepted. |
| Mobile number (+91), verified by OTP | To confirm you are a real person and to reduce fake accounts. It is never shown to other users. |
| Name, profile photo, gender | Shown to the people you ride with so they can recognise you. Gender is used only for Ladies-only rides. |
| Office location and working hours | To suggest rides that match your commute. |
| UPI ID | Shown to your passengers so they can pay you directly from their own UPI app. |
| Car make, model, colour and registration number (drivers) | So passengers can find and check the right car. |
| Emergency contacts (up to three names and numbers) | To text them from your phone if you use SOS or share a trip. |
| Location | Your current location when you search or set places. While you drive a ride, your live location is shared with your passengers until the ride ends (Android shows an ongoing notification while this happens). |
| Rides, bookings, ratings, cancellations | To run the service, keep records both people can rely on, and handle disputes. |
| Payment records | Amount, status, and a UPI transaction reference (UTR) if you choose to enter one. We never receive your bank account, card or UPI PIN. |
| Chat messages and support tickets | To deliver messages between riders and to answer your questions. Phone numbers typed into chat are hidden automatically. |
| Device notification token and language | To send ride updates and messages in your language. |
We do not collect your contacts list. If you pick an emergency contact from your phone, only that contact is read.
2. Consent and legitimate uses
We process your personal data on the basis of the consent you give when you create an account and grant permissions such as location and notifications, and for the legitimate uses permitted by Section 7 of the DPDP Act, including responding to a medical emergency or a threat to safety (for example, an SOS). You can withdraw consent at any time by deleting your account or turning off permissions in your phone’s settings; some features will then stop working.
3. Who can see your data
- Other Cammute users see your name, photo, company, ratings and, if you drive, your car. People in a booking with you also see the pickup and drop points, the timing and, for drivers, the UPI ID.
- People you share a trip with through a share-trip link see the driver’s first name, car, the pickup and drop points, and live location until the ride ends.
- Cammute’s support and safety team can see account, ride, payment and ticket data to resolve disputes, answer tickets and respond to SOS alerts.
- Service providers (Data Processors): Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, Cloud Messaging) to run our backend, and Google Maps Platform for maps, routes and place search. Our application servers run in Google Cloud’s Mumbai region (asia-south1). These providers process data only on our instructions.
- Authorities, when required by law or to protect someone’s life or safety.
Payments happen in your own UPI app between you and the other person. Your UPI app and bank handle that payment under their own privacy policies.
4. How long we keep data
- Your profile, private details (phone, UPI ID, emergency contacts, office) and profile photo are deleted when you delete your account.
- Records of rides, payments, ratings and messages that involve other people are kept after deletion because their history and any dispute depend on them. They are no longer linked to a profile with your name, phone or email.
- Share-trip links stop working when the ride ends or after 12 hours.
- We keep data longer only where the law requires it or to deal with a safety incident or legal claim.
5. Your rights
Under the DPDP Act you can ask us to: tell you what personal data we process and who we have shared it with; correct, complete or update your data (most of it you can edit in the app’s Profile tab); erase your data (Profile → Settings → Delete account, or see Delete your account); nominate someone to exercise your rights if you die or become incapacitated; and have your grievance addressed. Write to hi@e404.in from your registered email address. We reply within 30 days.
6. Children
Cammute is for working adults. You must be 18 or older to use it, and we do not knowingly process the personal data of children.
7. Security
Data is encrypted in transit and at rest by our cloud provider. Access is limited by security rules so that, for example, your phone number, UPI ID and emergency contacts are readable only by you and our support team, and the ride code is visible only to the passenger. No system is perfectly secure; if a breach affects you we will inform you and the Data Protection Board of India as the law requires.
8. Grievance Officer
Grievance Officer
Email: hi@e404.in
e404 Technology, MM-45, Sector Q, Aliganj, Lucknow, Uttar Pradesh, India
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
9. Changes
We will post updates on this page and tell you in the app before significant changes take effect.