Privacy policy

Last updated 28 October 2026 · Applies to the Book My Nandi app, www.bookmynandi.com and www.nandimobility.com

NANDI Mobility Solutions ("Nandi", "we", "us") runs chauffeured electric cab services in Delhi NCR. This policy explains what personal data we collect when you book with us, why, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023.

What we collect

Your account

• Mobile number (required). You sign in with a one-time code sent to it by SMS.
• Name, email address and GST number (optional). Used on your profile, receipts and tax invoices. Data exports are sent to your email address.
• Profile photo (optional). It stays on your phone and is not uploaded to us.
• Saved places you choose to store, such as home and work.

Your bookings

• Pickup, drop and stop addresses and their map coordinates, pickup time, service type, booked hours, flight number and any pickup note you add.
• Fare, payment status and how you paid (cash or UPI to the chauffeur, or your company's account), and your ride history and invoices.
• Ratings and incident reports you submit, including any photos you attach to a report.

Location

• When you choose to use your location for a pickup, the app reads your phone's location while the app is open. Some maps also show your position on screen; that position is only sent to us if you pick it as your pickup point. The app never collects your location in the background.
• During a ride we record the cab's GPS position (from the chauffeur's phone) to run the trip, show you where your cab is, and bill distance.

Your device

• A push-notification token, so we can send ride updates to your phone.
• Technical records such as IP address and request times, kept for security and troubleshooting.

Corporate accounts

• If your employer has a corporate account with us, the link between your login and that account, and the rides charged to it.

How we use it

• To take your booking, assign a cab and chauffeur, and run the ride.
• To let you and your chauffeur contact each other, and to show you the cab's live location.
• To calculate and record fares, and to issue receipts and GST tax invoices.
• To send you sign-in codes, ride updates and service messages.
• To handle support requests, complaints, safety incidents and refunds.
• To prevent fraud and misuse, and to meet our legal and tax obligations.

We do not sell personal data, and the app shows no advertising.

Who we share it with

• Your chauffeur sees your name, mobile number, pickup, drop and stops, and any note you add, for the ride they are driving.
• Your company, if you ride on its corporate account, sees the rides charged to that account.
• Service providers who process data for us under contract and only to provide their service:

  Provider	What for
  Railway, Vercel	Hosting our servers, database and websites
  Cloudflare	Storing photos attached to incident reports and vehicle inspections
  Google (Maps Platform, Firebase Cloud Messaging)	Maps, addresses, routes and distances; delivering push notifications
  Expo	Delivering push notifications to the app
  BhashSMS	Sending sign-in codes by SMS

• Authorities, when the law requires us to, or to protect someone's safety.

Some of these providers may store or process data outside India.

How long we keep it

• Account details: for as long as your account is open.
• Cab GPS trails: deleted 7 days after the ride ends.
• Data export files: available for 7 days, then deleted.
• Ride, payment and invoice records: kept for as long as Indian tax and transport law requires. If you delete your account, these records are kept without your name, mobile number, email address or addresses.

Your rights

You can do the following in the app, under Profile → Privacy & Data (DPDP), or by writing to us:

• Access: request a copy of your data ("Request my data"). It is emailed to you as a download link. You can request one every 30 days.
• Correction: edit your name, email and GST number on your profile.
• Erasure: delete your account. See how account deletion works.
• Grievance: complain to our Grievance Officer (below). If you are not satisfied with our response, you can approach the Data Protection Board of India.
• Nomination: nominate someone to exercise these rights for you in case of death or incapacity, by writing to us.

Security

Data travels to and from our servers over encrypted connections. Sign-in codes are stored only in hashed form and expire after five minutes. Access to personal data is limited to staff who need it for their work.

Children

Our service is for adults. Bookings must be made by a person aged 18 or over, who may book rides for others in their care.

Changes to this policy

We will post changes on this page and update the date at the top. If we make a material change, the app will show you the new notice and ask you to acknowledge it.

Contact and Grievance Officer