Privacy Policy

Who we are

TheOneTouch is a ride-booking service that connects riders with nearby toto (e-rickshaw), bike, cab and auto drivers in one touch. It is developed and operated by VisionFall Private Limited, [Registered business address] (“TheOneTouch”, “we”, “us” or “our”).

This policy covers:

TheOneTouch, the rider app (com.theonetouch.user)
OneTouch Loco, the driver app (com.theonetouch.loco)
this website

Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and its rules, we are the Data Fiduciary for the personal data described here. By creating an account or using our apps, you agree to this policy. If you don’t agree, please don’t use them.

What we collect

We collect only what we need to verify who you are, match you with a ride and keep every trip safe.

If you ride with TheOneTouch

What	Details	Why
Google account	Your email address and name, when you choose “Continue with Google”.	To create your account and sign you in, on any phone.
Aadhaar verification	Your 12-digit Aadhaar number and the OTP that UIDAI texts to your Aadhaar-linked mobile. The check returns your name, date of birth, gender, address and photo.	To confirm you are a real, verified person and that one Aadhaar backs only one account.
Mobile number	The number you type and confirm — your Aadhaar-linked mobile or another one.	So your driver can reach you.
Profile	Address, date of birth, age and gender, filled in from Aadhaar to start with. You can change your mobile, address and date of birth later.	Shown in Account → Personal details and used for your rides.
Rides	Pickup and drop points, route, distance, vehicle type, Reserve or Share, fare and any boost you add, chosen payment method, ride PIN, ride status and your rating.	To quote fares, find a driver and complete your trip.
People you book for	The name and mobile number of up to 5 passengers you save. Kept on your phone only.	So their driver knows who to pick up and can call them.

What we keep from Aadhaar, and what we don’t

Your Aadhaar number is never stored — not on our servers and not on your phone. We keep the last 4 digits, the name, date of birth, gender and address Aadhaar returned, the time of verification, and a keyed one-way code (HMAC-SHA-256) of the number, which stops the same Aadhaar from opening a second account. Your Aadhaar photo is shown to you once so you can confirm it’s you, and is never saved. OTPs are never stored.

If someone later tries to sign up with an Aadhaar that already has an account, they see only a masked hint of that account’s email (for example ••••••e@gmail.com) so the rightful owner can sign in with it.

Before you save someone as a passenger, please make sure they’re happy for you to share their name and number with us and their driver.

If you drive with OneTouch Loco

What	Details	Why
Google account	Your email address and name, when you sign in with Google.	To create your driver account and bring it back on any phone.
Mobile number	Your number and the SMS code sent to it, checked by Cashfree Secure ID.	To confirm the number is yours, so riders can reach you.
Aadhaar verification	Your Aadhaar number and the OTP UIDAI texts to your Aadhaar-linked mobile. We keep the name, date of birth and gender Aadhaar returns, and the last 4 digits.	To confirm you are a real, verified person. Riders see the name Aadhaar holds.
Driving licence	The licence number you type and confirm.	So every driver on the road has a licence on record.
Vehicle	Vehicle type (toto, bike, cab or auto) and its registration number. The number is optional for a toto without a plate.	To offer you the right rides, and so riders can recognise your vehicle.
Duty & trips	Online status, your live location while online, rides offered, accepted, declined and completed, and the earnings shown in the app.	To send you ride requests and show your trips and earnings.

Extra data is thrown away, unread

When your mobile code is checked, the verification service can also return information linked to the number, such as PAN, addresses or a credit score. The app discards it without reading or storing it. From Aadhaar, drivers’ addresses and photos are never kept, and the Aadhaar number itself is never stored.

Location

Riders: your precise location while you use the app, to set your pickup point, show nearby vehicles, draw the route and follow your driver. When you search for a place, what you type is sent to Google Places for suggestions.
Drivers: your precise live location while you are online or on a trip, so riders can be matched with you and watch you approach. On duty, Loco keeps sharing it while it runs behind Google Maps — Android shows a “You’re on duty” notification and iPhone shows the blue location indicator. It stops when you go offline or lose connection.
Weather: your coordinates, without your name or any account details, are sent to Open-Meteo to draw the live sky in the app.

We do not collect location when you are not using the rider app, or when a driver is offline.

In-ride chat

During an active ride, riders and drivers can exchange messages, photos (taken with the camera or picked from the gallery) and “share my location” pins. These travel only between the two people on that ride and are deleted when the ride ends. We keep no chat history.

Payments

Payments are processed by Cashfree Payments. See Payments & Cashfree for exactly what we receive.

Stored only on your phone

Saved places, saved passengers, trip history, appearance settings (light, dark or follow the sky), onboarding progress, graphics settings and your sign-in state are kept in the app’s storage on your device. We cannot see them. They are removed when you clear the app’s data or uninstall it.

Technical information

We do not use advertising SDKs or third-party analytics. Google services built into the apps (Firebase and Google Maps) may process technical information such as IP address, device model, operating system version, app instance identifiers and diagnostic data so that they can deliver and secure their services, under Google’s Privacy Policy.

How we use your information

Create and secure your account, and verify identity — Aadhaar for riders; mobile, Aadhaar, licence and vehicle for drivers. This also stops duplicate or fake accounts.
Match riders with nearby drivers, quote fares and show routes, live ETAs and the vehicle on the map.
Let the rider and driver on a trip contact each other by phone or in-app chat.
Send ride notifications, such as a driver accepting your ride or a new request reaching a driver.
Process payments, refunds and receipts through Cashfree Payments.
Keep trips safe with the ride PIN and trip details, and look into incidents and reports.
Provide customer support and resolve disputes.
Meet our legal obligations and respond to lawful requests from authorities.
Keep the apps running smoothly, for example by switching to lighter graphics on slower phones (that setting stays on your device).

We rely on the consent you give when you sign up and use the apps, and on the legitimate uses allowed by Section 7 of the DPDP Act, such as complying with the law or responding to an emergency that threatens someone’s safety. You can withdraw consent at any time (see Your rights).

We never use your data for advertising and we never sell it.

Payments & Cashfree

Paid services are processed by Cashfree Payments

Ride fares, fare boosts, wallet top-ups and any other paid services in our apps are processed by Cashfree Payments India Private Limited.

RBI-authorised Payment Aggregator
PCI-DSS compliant
Encrypted checkout

UPI
Debit & credit cards
Net banking
Wallets
Cash to driver

When you pay online, you enter your payment details on Cashfree’s secure checkout. They go directly to Cashfree Payments and your bank or card network, not to us.

We never see or store

Full card numbers, CVV or expiry dates
UPI PINs
Net-banking usernames or passwords
Wallet login details

We receive only

Order ID and transaction reference
Amount, date and time
Payment status (success, failed, refunded)
Payment method type, and a masked identifier where Cashfree provides one (for example the last 4 digits of a card)

What we share with Cashfree: to create a payment we send your name, mobile number, email address and the order amount, which Cashfree needs to process the payment and prevent fraud.
Refunds go back through Cashfree Payments to the method you paid with. How long they take depends on your bank.
Cash: if you pay the driver in cash, no payment data is collected.
Records: we keep transaction records for as long as tax and accounting laws require.

Cashfree Payments handles your payment data under its own Privacy Policy.

Service providers

We have no servers of our own. These trusted providers run parts of the service for us, each under its own privacy policy:

Google & Firebase

Accounts · database · maps

Google sign-in, rider and driver accounts (Cloud Firestore), live matching, ride status and chat (Realtime Database), and Maps, Places and Routes for maps, search and traffic.

Google Privacy Policy ↗

₹

Cashfree Payments

Payment processing

Processes UPI, card, net-banking and wallet payments, and refunds, for paid services in our apps.

Cashfree Privacy Policy ↗

Cashfree Secure ID

Driver mobile check

Sends and checks drivers’ SMS codes, to confirm their mobile number.

Cashfree Privacy Policy ↗

PowerAPI

Aadhaar check

Sends the Aadhaar OTP and returns the details UIDAI holds, so riders and drivers can verify themselves.

powerapi.in ↗

☁

Open-Meteo

Weather

Receives only map coordinates to return the local weather used for the in-app sky.

Open-Meteo terms ↗

Your phone’s system

Apple iOS · Google Android

Turns coordinates into readable addresses, shows notifications and, with your permission, fills in SMS codes for you.

Apple Privacy Policy ↗

Hostinger

Website hosting

Hosts this website. It does not receive any data from our apps.

Hostinger Privacy Policy ↗

App permissions

Your phone asks you before an app can use any of these. You can change them at any time in your phone’s settings.

Permission	Used for	Needed?
Location (precise)	Riders: pickup point, nearby vehicles and live tracking. Drivers: sharing your position with riders while you are online.	Required to book or drive
Location while on duty (drivers)	Keeps sharing your position while Loco runs behind Google Maps on a trip, so requests still reach you and your rider still sees you coming.	Required to drive
Notifications	Telling riders when a driver accepts or arrives, and showing drivers new ride requests.	Optional
Camera	Taking a photo to send in the ride chat.	Optional
Photos / gallery	Picking a photo to send in the ride chat.	Optional
Read one SMS (Android)	Filling in your verification code. Android asks “Allow … to read this message?” for that single message only.	Optional — you can type the code
Internet	Connecting to the services above.	Required

Our apps do not ask for your contacts, microphone, call logs or files.

Where it’s stored & how it’s protected

Location of data: rider and driver accounts are stored on Google Cloud (Firebase) in Mumbai, India. Live ride data passes through Firebase servers in Singapore. Our service providers may process data outside India, as the DPDP Act permits.
Encryption: all data travels over encrypted connections (HTTPS/TLS), and Google encrypts stored data.
Strict access rules: each rider and each driver can read and change only their own account. Only the rider and driver on a ride, and drivers it is being offered to, can read that ride. Your verified Aadhaar record cannot be altered once saved.
Minimal data: no Aadhaar numbers, OTPs, card numbers or UPI PINs are stored.
Limited staff access: only people who need it to support you or run the service can access personal data.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

How long we keep it

Data	Kept for
Rider account & Aadhaar verification record	Until you delete your account. Erased within 30 days of your request.
Driver account (mobile, Aadhaar name, licence and vehicle)	Until you delete your account. Erased within 30 days of your request.
Live ride, ride offers & chat	Deleted automatically seconds after the ride ends.
Driver’s live location	Removed when the driver goes offline or loses connection.
Trip history, saved places, passengers & settings	On your phone until you delete them, clear the app’s data or uninstall.
Payment & transaction records	As long as the law requires — generally up to 8 years under Indian tax and accounting laws.
Support conversations	Until your request and any follow-up are resolved, then deleted.
OTPs & Aadhaar number	Never stored by us.

Your rights

Under the DPDP Act, you have the right to:

Access

Get a summary of the personal data we hold about you and who we’ve shared it with.

Correct & update

Change your mobile, address and date of birth in Account → Personal details, or ask us to correct anything else.

Erase

Ask us to delete your account and personal data. See Delete your account.

Withdraw consent

At any time. It doesn’t affect what was done before, but we may no longer be able to provide the service.

Grievance redressal

Complain to our Grievance Officer. We respond within 30 days.

Nominate

Name someone to use these rights for you if you die or become unable to.

To use any of these rights, email contact.visionfall@gmail.com from the email address or with the mobile number on your account. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.

Delete your account

You can ask us to delete your TheOneTouch or OneTouch Loco account and its data at any time.

Email usWrite to contact.visionfall@gmail.com with the subject “Delete my account” from the Google account you sign in with. Drivers: please include your registered mobile number too.
We confirm it’s youWe may ask you to confirm a code sent to your registered mobile or email, so nobody else can delete your account.
We delete it within 30 daysWe’ll email you when it’s done.

Request account deletion

What we delete

Riders: your account record (name, email, mobile, address, date of birth, gender and Aadhaar verification record)
The Aadhaar link, so the same Aadhaar can be used again
Drivers: your driver account (email, mobile, Aadhaar name and last 4 digits, licence and vehicle numbers) and your driver profile
Your sign-in record

What we may keep

Payment and transaction records the law requires us to keep
Information needed for an open dispute, safety investigation or legal claim, only as long as required

Data kept on your phone (saved places, passengers, trip history and settings) is removed when you sign out and uninstall the app.

Children

Our apps are meant for people aged 18 and over, and we do not knowingly create accounts for children. If you believe a child has created an account, contact us and we will delete it.

A parent or guardian may book a ride for a child in their care using the passenger feature. The child’s name and a contact number are then shared with the driver for that trip only.

This website

This website is a simple static site. It sets no cookies, runs no analytics or advertising trackers, and loads nothing from third parties. It remembers whether you chose light or dark mode in your browser’s own storage, which never leaves your device. Our web host, Hostinger, may keep standard server logs (such as IP address, browser type and time of visit) for security and to keep the site running.

Changes to this policy

We may update this policy as our apps or the law change. When we do, we’ll change the “Last updated” date at the top. For significant changes, we’ll let you know in the app or by email before they take effect.

Contact us & Grievance Officer

Questions, requests or complaints about your privacy? We’re here to help.

Privacy & support

Company: VisionFall Private Limited
Email: contact.visionfall@gmail.com
Website: www.visionfall.in
Address: [Registered business address]

Grievance Officer

Name: [Grievance Officer name]
Email: contact.visionfall@gmail.com
Phone: [Phone number]
Response: Within 30 days