Privacy Policy

This policy explains how PullUp handles information when students use our carpooling and taxi-pooling services.

Effective date: 25 August 2026

Who operates PullUp

PullUp is operated by the PullUp development team. Privacy questions and requests can be sent to krish@pullupapp.in.

Information we collect

We collect account and university identity information including university email, name, phone number, profile picture, course, division, role, and saved home address. Drivers may provide driving-licence images and verification status. We collect precise and background location when permitted for route matching, live rides, pickup, safety, and completion. We process ride, booking, fare, seat, cancellation, waitlist, live-location, chat, rating, notification, device push-token, subscription, payout, and transaction records.

Camera and gallery

Camera or gallery access is used only when you choose to upload a profile picture, driving licence, or chat image. Images are stored using Cloudinary. Device permissions can be changed in Android settings.

Payments

Razorpay processes checkout and payment details. PullUp receives order, payment, signature-verification, status, refund, transfer, and audit identifiers, but does not store complete card or bank credentials. Payment and wallet records may be retained where required for accounting, fraud prevention, disputes, and legal compliance.

Services and sharing

Firebase Authentication and Cloud Firestore provide authentication and application data storage. Firebase Cloud Messaging and Expo notification components support push delivery. Google Maps, Geocoding, and Routes services process locations to calculate road routes, distances, and fares. Cloudinary stores uploaded images. Razorpay processes payments and payouts. Relevant ride identity, pickup, and status details are shared with matched riders or drivers to provide the service. We do not sell personal information.

How we use information

We use information to authenticate users, complete profiles, verify drivers, create and match rides, calculate road-distance fares, process bookings and payments, enable chat and live tracking, send transactional notifications, prevent abuse, support users, diagnose failures, and meet legal obligations.

Analytics and diagnostics

The app and backend record operational logs, notification delivery metadata, route-cache data, audit events, and system statistics needed for reliability, security, and fraud investigation. Firebase configuration includes analytics capability; collection depends on the installed build and user/device settings.

Security

PullUp uses authenticated Firebase access, server-side privileged operations, encrypted network transport, restricted backend credentials, payment-signature verification, and rate limits. No system is risk free; report suspected misuse to the privacy contact above.

Retention and deletion

Account deletion removes the Firebase Authentication account, profile, personal contact data, push tokens, preferences, private notifications, and active participation where deletion is appropriate. Shared completed ride and payment/audit records may be retained in anonymized form when deleting them would affect another user, financial integrity, dispute handling, fraud prevention, or legal obligations. Cloudinary and service-provider backups may persist for their limited backup or legal retention periods before deletion. You can delete in Profile → Privacy & Account or use the public account deletion page.

Your choices and rights

You may update profile data in the app, control camera, gallery, location, and notification permissions in device settings, request access or correction, or request account deletion. Contact krish@pullupapp.in for privacy requests that cannot be completed in the app.

Children and campus eligibility

PullUp is intended for eligible university users. Users must satisfy applicable age and university requirements.

Policy updates

We may update this policy as the service or legal requirements change. The effective date above will change, and material changes may also be communicated in the app.