Privacy Policy

XRide Labs ("we", "us", or "our") operates the Revvie platform — a social platform for motorcycle riders. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Revvie mobile application and website (collectively, the "Platform").

This policy complies with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and India's Digital Personal Data Protection Act, 2023 ("DPDPA 2023").

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

We use the information we collect to:

• Create and manage your account, and authenticate your identity.
• Provide, maintain, and improve the Platform and its features.
• Process payments and manage your Revvie Pro subscription.
• Enable ride tracking, club management, and social features.
• Facilitate peer-to-peer communication and Marketplace transactions.
• Send you notifications about rides, clubs, messages, and Platform updates you have opted into.
• Respond to your support requests and provide customer service.
• Monitor Platform safety, detect fraud, and enforce our Terms & Conditions.
• Analyse usage patterns to improve performance and develop new features.
• Comply with applicable laws and legal obligations.
• Send marketing communications where you have given explicit consent (you can opt out at any time).

We do not sell your personal data. We may share your information in the following circumstances:

Revvie uses precise location data to power ride tracking, nearby club discovery, and emergency SOS features. Location access is only activated when you explicitly start a ride or use a location-dependent feature.

We request background location access on supported devices solely to continue tracking an active ride when the app is minimised. This access is not used for any other purpose. You may revoke location permissions at any time through your device settings, though doing so will disable ride tracking features.

Location data from completed rides is stored on our servers to provide you with your ride history, statistics, and to generate community route maps (where you have opted in to public route sharing).

Our website uses cookies and similar tracking technologies to remember your preferences, maintain your session, and understand how you interact with our website. We use:

• Essential Cookies: Required for authentication and core website functionality. Cannot be disabled.
• Analytics Cookies: Help us understand traffic patterns and improve our website. You can opt out via your browser settings.
• Preference Cookies: Remember your settings and preferences for a better experience.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

We retain your personal data for as long as your account is active or as needed to provide you with our services. You can delete your account at any time through the app settings. Upon account deletion:

• Your profile and most personal data is permanently deleted within 30 days.
• Anonymised ride data may be retained for community features (e.g., popular routes) in a form that cannot identify you.
• Transaction records and billing information are retained for 7 years as required by Indian tax and accounting laws.
• Data required for ongoing legal proceedings or regulatory compliance may be retained until such matters are resolved.

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or alteration. These include:

• Encryption of data in transit using TLS 1.3.
• Encryption of sensitive data at rest.
• Hashed passwords using bcrypt.
• Role-based access controls for employees.
• Regular security audits and vulnerability assessments.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: Withdraw consent for data processing at any time, without affecting the lawfulness of prior processing.
• Right to Grievance Redressal: Lodge a complaint about how your data is handled.
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact our Data Grievance Officer at hello@xride-labs.in. We will respond to verifiable requests within 30 days.

Revvie is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 13, please contact us immediately at hello@xride-labs.in.

Your data may be stored and processed in data centres outside India (including the United States, via our cloud infrastructure providers). When we transfer data internationally, we ensure appropriate safeguards are in place consistent with applicable Indian data protection law, including contractual clauses with our service providers.

Our Platform may contain links to third-party websites or integrate with third-party services (such as mapping, social sign-in, or payment processing). These third parties have their own privacy policies. We are not responsible for the privacy practices of third parties and encourage you to review their policies before providing them with any personal information.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by updating the "Last updated" date and, where required by law, by providing more prominent notice (such as an in-app notification). Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated policy.

As required under Indian law, we have designated a Data Grievance Officer to handle privacy-related queries and complaints: