Privacy Policy — Driver-Partner App

What the NEXA Ride driver app collects, why, who sees it, and what you can do about it.

Effective date: 10 September 2026 · Version: 1.0 · Covers: ride services

Background location — please read this first. While you are online, the Driver App collects your location continuously and in the background — including when the app is minimised and when your screen is off. Each update records your position, heading, speed, accuracy and the time.

This is how dispatch reaches you, how the rider sees your vehicle approaching, how distance and fare are calculated, and how we keep the trip records the law requires. When you go offline, background location collection stops. You can go offline at any time, and you can revoke the permission in your device settings — but you will not be able to receive rides.

Scope. This policy covers ride services. Parcel and package delivery — including any second vehicle registered for it — is covered by a separate policy. Rider data is covered by the NEXA Ride Rider Privacy Policy.

1. Who is responsible for your data

NEXA Ride is a product of DENDO, not a separate company. DENDO, No. 4/361, Varagooran Kottai Village, Kalappambadi Post, Pennagaram Taluk, Dharmapuri District, Tamil Nadu – 636813, India, is the Data Fiduciary for personal data processed through the Driver App, under the Digital Personal Data Protection Act, 2023.

2. Identity and personal details

Collected during KYC onboarding. Your mobile number is your login; the rest is required before you can go online.

• Mobile number — your login identity, unique to your account.
• Legal first and last name, as on your ID documents — verification; your first name and photo are shown to the rider.
• Date of birth — age and licence-eligibility checks.
• Gender — profile record.
• Email address — receipts, account notices and account recovery.
• Profile photograph — shown to the rider so they can identify you.
• Full residential address, city, state and pincode — verification and our regulatory records.
• Driving licence number and expiry date — confirming you may lawfully drive commercially, and taking you offline when it expires.
• Referral code, and who referred you — the referral scheme and any reward owed.

2.1 Aadhaar and PAN — government identity numbers

We hold your Aadhaar number (a 12-digit national identity number, checked for validity when you enter it) and your PAN (your Indian tax identity number), together with the secondary ID type you submitted.

Why: to confirm you are an Indian citizen or otherwise lawfully entitled to work here, that you are the person named on the driving licence, and that the licence is genuine. This is the verification your onboarding consent covers, and it is required of aggregators under the Motor Vehicles Aggregator Guidelines, 2020. These numbers are used for verification and our statutory records only. They are never shown to riders, and never used for advertising or any commercial purpose.

3. Documents you upload

Photographs and scans — the images themselves, not only the numbers taken from them — are stored in our cloud file storage:

• Aadhaar card, front and back — verifying your identity and your entitlement to drive commercially.
• PAN card — as above.
• Driving licence, front and back — as above.
• A live selfie taken during onboarding — as above.
• Vehicle registration certificate, front and back — confirming the vehicle is legally registered, roadworthy and insured.
• Insurance, PUC and fitness certificates — as above.
• Five photographs of the vehicle — front, back, left, right and interior.
• Bank proof, such as a passbook page or cancelled cheque — held for the future payout feature described in clause 6. Not currently used to pay you.

This is the most sensitive category we hold. Documents are stored privately, are never served publicly, and are retrieved only through short-lived authorised links. Access is restricted to the staff who review onboarding, and every access is logged.

4. Vehicle details

Category, registration number, brand, model, colour and year; the insurance policy reference; the PUC certificate number and its expiry; and the fitness certificate expiry. We use these to confirm the vehicle is legal, to warn you before a certificate expires, and to show the rider which vehicle to look for.

5. Location — in detail

• Online, no trip — continuous background location updates, so nearby offers can reach you and dispatch knows where you are.
• On a trip — continuous background location (position, heading, speed, accuracy and time) linked to that ride, for live tracking, navigation, distance and the trip record.
• Offline — nothing. Background collection stops when you go offline.
• App uninstalled — nothing.

We also store, when you choose to set them:

• Destination mode — a coordinate and label you set so that you are offered trips heading toward where you want to go.
• Preferred and saved places you store for quick reuse.

Android requires "Allow all the time" location access, and permission to run without battery optimisation, for the app to keep receiving offers while it is off-screen; a persistent notification shows while location is in use. iOS requires "Always" access for the same reason.

Your location is not used to profile you outside your work on the platform, and is not shared with anyone except as set out in clause 10.

6. Money — the access pass, your wallet, and payouts

The only money that passes through the platform is the access pass you pay us. Your fares are paid to you directly by the rider, in cash or to your own UPI. We never see or handle a fare.

• Access pass (daily access fee) payments, and the payment gateway's reference for each — recording that you have a valid pass. Your card or UPI credentials are entered inside the gateway's own interface and are never seen or stored by DENDO.
• Wallet balance and every movement in and out — showing your access-fee payments and any credits.
• Trip-level earnings records, platform fees, commission and incentive calculations — your earnings history and the operation of any incentive scheme.
• Your chosen payout method, bank account holder name, account number, IFSC, bank name and UPI ID — held for a future payout feature. Not currently used; DENDO does not pay any money out to driver-partners today.

7. Device and telemetry

• Operating system and version, device model, app version — making the app work on your device and diagnosing faults.
• Push notification token — delivering ride offers and account alerts, via Google Firebase and Apple's notification service.
• Battery level and charging state — explaining and predicting why a driver goes offline; a flat battery is the most common cause.
• Online and offline timestamps, and a periodic "still here" heartbeat — your availability history, and enforcing the 12-hour daily login limit.
• Every offer shown to you, and whether you accepted, declined or let it lapse — dispatch quality, and your acceptance-rate record.
• Dispatch statistics and shift periods — operational records.

8. How your conduct is monitored

Some of this is not shown back to you in the app, so we set it out plainly here.

• Star ratings and written comments riders leave about you — visible to you in the app.
• Star ratings you give riders.
• Over-speed events, flagged automatically when your recorded speed exceeds a threshold — derived from your location data. Not shown to you in the app.
• Internal notes DENDO staff write about your account — not shown to you in the app, but you may request them under clause 14.
• Support tickets and the full message thread, with the staff member assigned.
• Feedback you give about the app itself.
• SOS incidents you raise, with your location — read and acted on by DENDO staff.

Your driving behaviour is monitored and may inform decisions about your account, including a warning, retraining, suspension or removal — not only your star rating.

9. Your emergency contact — someone else's data

We store the name, relationship and phone number of the person you nominate, so we can reach them if you raise an SOS. That person is not a NEXA Ride user and has agreed to nothing. You must have their permission before entering their details, and you are responsible for telling them we hold their name and number for this purpose. You may change or remove them at any time.

10. Who sees your information

• The rider on your trip — your first name, photograph, rating, your vehicle's make, model, colour and registration number, and your live location during the trip. They do not receive your Aadhaar or PAN, your documents, your address, your email, your bank details or your other trips.
• DENDO staff — your account, documents, location history, duty hours, earnings and conduct records, on a need-to-know basis. Access is role-restricted and every administrative action is logged.
• Other driver-partners — nothing.
• Google Firebase — your push notification token, to deliver offers and alerts.
• Amazon Web Services — all stored data, including your document and vehicle images; hosting, see clause 11.
• Payment gateway — your access-pass payment. Your card or UPI credentials are entered in the gateway's own interface; DENDO does not receive them.
• Transport authorities, police and regulators — driver, vehicle, trip and duty-hour records where required by law or by the Motor Vehicles Aggregator Guidelines, 2020, or in response to a lawful request or an incident investigation.

No advertising. The Driver App contains no advertising SDK. Your data is never used for advertising and is never sold.

We may also disclose data to establish or defend a legal claim, or on a transfer of our business, in which case you will be told.

11. Where your data is stored

All data and uploaded documents are stored on Amazon Web Services in the Mumbai region (ap-south-1), physically located in India. Push notification tokens are processed by Google and Apple, which operate global infrastructure, under contractual safeguards and as permitted by the Digital Personal Data Protection Act, 2023.

12. Permissions the app asks for, and why

• Precise and approximate location — dispatch, navigation and recording the route driven.
• Background / foreground-service location — keeping your position updating while the app is off-screen, so offers reach you; see the box at the top.
• Camera — taking your selfie and photographing your documents and vehicle during onboarding.
• Photos and files — choosing an existing document photograph from your gallery.
• Notifications — ride offers and account alerts.
• Ignore battery optimisation — stopping Android's power saving from killing the location service while you are online.

The Driver App does not ask for access to your contacts.

13. Consents recorded at onboarding

Your acceptance of each of the following is recorded against your account, with the version in force at the time:

• The Driver-Partner Terms and Conditions
• This Privacy Policy
• That the information and documents you submitted are true and correct
• That your KYC information may be used to verify your identity, your citizenship or entitlement to work, and your driving licence, as described in clause 2.1

14. How long we keep it

• Account and profile — while your account is active.
• KYC document images (Aadhaar, PAN, licence, selfie, RC, certificates, bank proof) — while active, then erased 90 days after your account closes. The most sensitive data held; kept only while needed to prove you were verified.
• Aadhaar, PAN and licence numbers — while active, then 2 years. Aggregator record-keeping and dispute defence.
• Location history (raw position pings) — 12 months, then deleted. Long enough for fare and route disputes and any incident.
• Trip records and earnings — 8 years. Statutory books-of-account and tax retention.
• Access pass payments and wallet ledger — 8 years. Tax and financial records.
• Duty-hour and online/offline records — 2 years. Aggregator Guidelines compliance.
• Over-speed events and internal staff notes — 3 years. Conduct history and defence of a deactivation decision.
• SOS incidents — 3 years. Safety and any legal proceedings.
• Support tickets and ratings — 3 years.
• Record of a removal on safety grounds — retained indefinitely, so that a person removed for safety reasons cannot simply re-register.

15. How we protect it

• All traffic between the app and our servers is encrypted in transit using HTTPS.
• Sign-in tokens are held in your device's secure store (iOS Keychain / Android Keystore).
• Uploaded documents are private and reachable only through authorised, time-limited links.
• Access is restricted by role and every administrative action is written to an audit log.

If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

16. Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

• Access a summary of the personal data we hold about you and how it has been processed — including the over-speed events and internal notes described in clause 8.
• Correct or update inaccurate data. Most profile fields and all documents you can update yourself in the app.
• Erase your data and close your account, using the delete-account option in the app, subject to what we must keep under clause 14 or for an open safety matter.
• Withdraw consent, including by revoking the location permission. Doing so stops you receiving rides.
• Nominate someone to exercise these rights for you in the event of your death or incapacity.
• Complain to us, and then to the Data Protection Board of India if you are not satisfied.

17. Grievance Officer

Grievance Officer · Email: grievance@dendo.store · Phone: +91 89512 12583

Complaints are acknowledged within 48 hours and resolved within one month.

18. Children

The Driver App is only for verified adults holding a valid driving licence. We do not collect data from children.

19. Changes to this policy

We may update this policy. Material changes — in particular any change to how location is collected, or the introduction of payouts — will be notified in the Driver App and will require your fresh consent where the law requires it.

20. Contact

DENDO — NEXA Ride

No. 4/361, Varagooran Kottai Village, Kalappambadi Post, Pennagaram Taluk, Dharmapuri District, Tamil Nadu – 636813, India

Email: support@nexaride.in · Phone: +91 89512 12583

NEXA Ride — Driver-Partner Privacy Policy · a product of DENDO · Version 1.0 · Effective 10 September 2026 · Rides only