Before you publish: this policy is drafted around GAMYO's actual modules and India's Digital Personal Data Protection Act, 2023, but it must be checked against your live implementation — the SDKs you actually ship, where your servers are, and your real retention windows — and reviewed by a qualified advocate. It is not legal advice.
1. Who we are
(CIN ), registered at , is the Data Fiduciary for the personal data described in this policy. This policy covers the GAMYO Android and iOS applications and the website at gamyo.app.
2. The short version
- We collect what the app needs to work — your profile, your posts, your rides, your messages, and your location while you are using a feature that needs it.
- We do not sell your personal data. Ever.
- Location is shared with other people only when you choose to share it, and you can revoke every share at once from the SOS screen.
- You can see, correct, export and delete your data — from the app, or by writing to us.
- If we get it wrong, our Grievance Officer is named in section 15 and answers within the timelines the law sets.
3. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Name, display name, email address, mobile number, password hash, date joined, profile photo, cover image, bio, private-account setting. | You, at sign-up and in Edit Profile. |
| Content | Posts, stories, reels, live broadcasts, captions, hashtags, tagged users, comments, likes, saved places, reviews. | You, when you post. |
| Rides | Origin and destination, date and time, vehicle type, model and registration number, seat count, per-seat contribution, notes, auto-accept setting, ride requests and ride history. | You, when you post or join a ride. |
| Messages | Chat messages, media you send, group membership, and call metadata (who, when, how long — not call content). | You and the people you talk to. |
| Location | Precise or approximate device location — see section 4. | Your device, with permission. |
| Emergency contacts | Name and mobile number of each contact you add for SOS. | You, entered manually on the SOS screen. |
| Social graph | Followers, following, blocked users, follow requests. | Your activity on the Platform. |
| Device & technical | Device model, OS version, app version, language, IP address, crash logs, diagnostic and performance data, and a device identifier for push notifications. | Automatically, when you use the app. |
| Usage | Which modules and features you use, search terms inside Explore, and interaction events used to improve the product. | Automatically, in aggregate where possible. |
| Support | Emails, reports, complaints and anything you send us. | You, when you contact us. |
We do not ask for, and you should not send us, financial account details, Aadhaar numbers, biometric data or health information through chat, posts or support email.
4. Location data — the detail
Location is central to GAMYO, so it gets its own section.
- Explore uses your location to show places within your chosen radius (1, 2, 5 or 10 km) and to compute drive, walk and cycle times. It is used at the moment you search.
- Rides uses the origin and destination you type — not continuous tracking — to match routes.
- Live Tracking streams your position to the specific chat thread or contacts you have chosen, only while you have it switched on. Static mode shares a single position once.
- SOS attaches your current position to the alert sent to your emergency contacts.
- We do not track you in the background when you are not using a location feature, and we do not build or sell a movement profile of you.
- Revoke All Location Access on the SOS screen stops every active share immediately. You can also withdraw the OS-level permission at any time; features that need it will stop working, and nothing else will break.
5. Why we use your data
| Purpose | Data used |
|---|---|
| Create and run your account and profile | Account, social graph |
| Show the Feed and deliver your Content to the people entitled to see it | Content, social graph, account |
| Match, list and coordinate rides, including AI Ride Matcher | Rides, account, usage |
| Deliver messages, calls, group chats and live journey cards | Messages, location, account |
| Discover places and compute routes and travel times | Location, usage |
| Send SOS alerts and share live location with your chosen contacts | Location, emergency contacts, account |
| Keep the Platform safe — detect fraud, abuse, impersonation and spam | Device, usage, account, reported content |
| Fix bugs, measure performance and improve the product | Device, usage, crash logs |
| Send service and safety notifications | Account, device identifier |
| Comply with law and respond to lawful requests | Whatever the law requires |
We do not use your personal data for automated decision-making that produces legal effects for you. AI Ride Matcher ranks and suggests rides; it never decides anything on your behalf.
6. Consent and legal basis
We process your personal data under the Digital Personal Data Protection Act, 2023 on the basis of the consent you give when you create an account and when you grant each device permission, and for certain legitimate uses permitted by that Act — for example, complying with a legal obligation or responding to a medical emergency threatening life or safety.
Consent is asked for at the point of use, in plain language, and can be withdrawn at any time from the app's settings or the device permission screen, or by writing to us. Withdrawing consent stops future processing; it does not undo processing that was lawful before withdrawal.
7. Who we share it with
- Other users — your public profile, posts, ride listings (including the vehicle registration number you enter) and the messages you send are visible to the people you share them with. Setting your profile to Private limits this to approved followers.
- Emergency contacts — the people you have added receive your alert and location when you trigger SOS.
- Service providers — cloud hosting, map and place-data providers, push-notification services, crash reporting and analytics, communications and (where applicable) payment processing. They act on our instructions under contract and may not use your data for their own purposes.
- Law enforcement and authorities — where required by a valid legal order or where necessary to prevent serious harm, protect life, or investigate a crime.
- Corporate transactions — if GAMYO is involved in a merger, acquisition or transfer of assets, your data may transfer with the business. You will be notified and this policy will continue to apply until replaced.
We do not sell personal data, and we do not share it with advertisers or data brokers.
8. How long we keep it
| Data | Retention |
|---|---|
| Account and profile | While your account is active |
| Posts, reels, stories | Until you delete them, or you delete your account |
| Ride records | Up to 3 years after the ride, for dispute and safety purposes |
| Chat messages | While the conversation exists for either participant |
| Live location points | Not retained after the share ends, beyond short-lived operational logs |
| SOS alert records | Up to 12 months, as a safety record |
| Crash and diagnostic logs | Up to 180 days |
| Records required by law (e.g. under the IT Rules) | For the period the law prescribes |
Deleting your account: use the delete option in the app or email us. Your profile and content become inaccessible immediately and are erased from live systems within 30 days, and from encrypted backups within 90 days. Messages you sent may remain visible in the other participant's copy of the conversation, and anonymised aggregate statistics that cannot identify you may be retained.
9. Your rights
Under the DPDP Act, 2023 you have the right to:
- Access — a summary of the personal data we hold about you and how it is processed;
- Correction and completion — fix anything inaccurate, incomplete or out of date;
- Erasure — have your data deleted where we no longer need it for the purpose it was collected or to comply with law;
- Withdraw consent — at any time, as easily as you gave it;
- Grievance redressal — raise a complaint with our Grievance Officer and receive a response;
- Nomination — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
Most of these you can do yourself in the app. For anything else, write to from your registered email address. We respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Security
We protect your data with encryption in transit (TLS) and at rest, hashed passwords, role-based access controls limiting internal access to staff who need it, audit logging, and regular review of our dependencies and infrastructure. We will notify you and the Data Protection Board of India of a personal data breach in the manner and within the timelines the law requires.
No system is perfectly secure. Use a strong, unique password, keep your device locked, and tell us immediately if you think your account has been accessed by someone else.
11. Children
GAMYO is not intended for anyone under 18, and we do not knowingly collect the personal data of children. If we learn that we hold data belonging to a child, we will delete it. Parents or guardians who believe a child has created an account should contact us at .
12. Cookies and the website
gamyo.app uses only what it needs to work: strictly necessary storage for your session and preferences, and — where enabled — privacy-respecting analytics to understand which pages are useful. Any admin settings saved from the admin panel are stored locally in that browser and never transmitted to us. We do not run advertising cookies or third-party ad trackers on the website. You can clear or block browser storage at any time; the site will still render.
13. Transfers outside India
We aim to store personal data on infrastructure located in India. Some service providers may process limited data outside India; where that happens we transfer only to countries not restricted by the Central Government, and we require contractual protections equivalent to those described in this policy.
14. Changes to this policy
We update this policy when the product or the law changes. Material changes are notified in the app or by email at least 7 days in advance, and the "last updated" date at the top of this page always reflects the current version.
15. Contact and grievances
We acknowledge complaints within 24 hours and resolve them within 15 days, in line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.