Privacy notice

Version 2026-10-19.1

This notice explains, in plain language, what personal data Sharido collects, why, who sees it, and your rights under the Digital Personal Data Protection Act, 2023.

What we collect, and why

From Google when you sign in: your email address, your name, and Google's account identifier. If the account was issued by a participating college, this also verifies you as a student there.
Student ID card, only if you choose to upload one to be verified: the photo, and the college you name. Only our moderators can see it. We delete the photo as soon as it has been reviewed, approved or not, and keep only the outcome and when it was decided.
Your college, if you tell us while unverified: to decide which college to open next.
Date of birth: to confirm you are 18 or older. It is never shown to anyone.
Mobile number: so the people confirmed on your trip can reach you on WhatsApp. To verify it, you send us one WhatsApp message with a code from that number; we keep the number it came from and when it was verified, not the message.
Profile picture, if you add one: shown to people whose trip you ask to join or who ask to join yours, and to the people confirmed on a trip with you while it runs and for a week after. Never to strangers browsing, or to anyone you have blocked. Removed when you remove it or delete your account.
Optional: gender (only used to allow women-only trips), department, year of study, UPI ID (so co-travellers can pay you their share).
Your trips: where each starts and ends (a station from our list, or a place or a pin you choose on the map), times, vehicle type, your fare estimate, how many seats you booked, who asked to join and who was confirmed. We do not collect anything about friends you book seats for.
Who came: after a trip, each member says whether the others came on time, came late or didn't come. Nobody sees another member's answers; we keep them, and show only what most of the group said, to you. They become the counts on your profile below. If the group says you didn't come, you can dispute it and it won't count.
Emergency contacts you choose to save. They are never shown to other members.
Reports and blocks you make or that concern you.
Technical logs: IP address, time and the page requested, kept for security and as Indian law (CERT-In directions) requires.

We do not track your location, collect your contacts list, use face recognition, or show advertising. If you tap "Use my location" while planning a trip, your browser asks you first and then shares where you are once, to fill in your pickup. We keep only the place you confirm for that trip.

Who can see what

Any member browsing: your first name and last initial, whether you are verified and at which college, your number of trips, how often you were on time (once you have five rated trips), any no-shows you did not dispute, and when you joined.
A member who asks to join your trip, or whose trip you ask to join: also your department and year, if you added them.
Members confirmed on the same trip as you: also your full name, mobile number (once you have verified it on WhatsApp) and UPI ID, while the trip runs and for a week after it, to settle up; then only your short name. Never anyone you have blocked, or who has blocked you. We record when this happens.
Where your trip starts and ends: anyone browsing sees a public place (a station, a mall) by name, but an address or a pin on the map only as its area, such as "Near Edappally", and roughly how far it is from them. Members confirmed on the trip see the exact places.
Someone you send a live trip link to: the route by area (never an exact address), the time and your group's first names, until two hours after the trip ends, and only while you are still on the trip.
Our moderation team: what they need to handle a report or keep the service safe.

We do not sell your data. Our service providers (hosting, currently in Singapore; Google for sign-in; Meta's WhatsApp Business Platform, which passes your verification message to us; error monitoring) process it only on our instructions. We never send you WhatsApp messages from our number.

Place search uses OpenStreetMap data through komoot's Photon service. What you type into place search, and a point you pick on the map or share, go from our server, not from your device, to find the place. Map images come straight from OpenStreetMap's servers, which, like any website, see your IP address: see the OpenStreetMap Foundation privacy policy.

How long we keep it

Your account data is kept while your account is open. When you delete your account we delete or anonymise your personal data within 30 days, except where the law requires us to keep it (for example security logs, kept for 180 days) or where it is needed for an open safety report. Exact places chosen by search or on the map are cut back to their area 30 days after the trip ends.

Your rights

You can download your data or delete your account yourself from Account → Your data and privacy. You can also ask us to access, correct or delete your data, withdraw your consent (which means closing your account), and nominate someone to exercise your rights. You can raise a grievance with us at minhajaliit@gmail.com, and if you are not satisfied, with the Data Protection Board of India.

Age

Sharido is only for people aged 18 or older. We do not knowingly process the data of anyone younger.

Cookies

We use one cookie to keep you signed in and one to protect forms. No tracking or advertising cookies.