- Effective date
- October 2026
- Parent entity
- Awara Banjara Adventure (OPC) Pvt. Ltd.
- Territory
- Himachal Pradesh, India
Data Protection Notice: This Privacy Policy explains what personal data the BOLOGO platform collects, why, who it is shared with, and the rights you have over it under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them. By signing in to BOLOGO you confirm you have read this notice.
1. Who We Are
BOLOGO is operated by Awara Banjara Adventure (OPC) Private Limited ("Company", "we", "us"), which is the Data Fiduciary for the personal data described here. "You" means anyone who uses BOLOGO — a Rider, a Driver-Partner, or someone applying to become one.
2. Personal Data We Collect from Riders
- Account: Your mobile number (used to sign you in by SMS code), your name, gender and email address, and a profile photo if you add one.
- Trips: Each trip request you post — pickup and drop places, date and time, number of passengers, vehicle preference and any notes or itinerary you write — and the quotes, bookings, pickup codes, trip status and payment status that follow from it.
- Ratings: The star rating, tags and remark you leave for a driver after a trip.
- Payments: The amount, status and Razorpay order, payment and refund references for each token advance. Your card number, bank login and UPI PIN go only to Razorpay; BOLOGO never receives or stores them. A UPI ID you type on the payment screen is remembered only on your own device, to speed up checkout next time.
3. Personal Data We Collect from Driver-Partners
Everything listed for Riders, and in addition, to verify that you may legally carry passengers:
- Identity: Your date of birth, Aadhaar number and photos of the front and back of your Aadhaar card, and a selfie holding your driving licence.
- Licence: Your driving licence number, expiry date and photos of both sides.
- Vehicle: Make, model, type, colour, year, seats and registration number; a photo of the vehicle; and photos of the registration certificate (RC) and both parts of the permit.
- Payouts: The UPI ID your payouts are sent to, and the account-holder name the UPI network returns when we check that ID with Razorpay.
- Work on the platform: Your online/offline status, the quotes you send, the trips you start and complete, your earnings and payouts, and the ratings Riders give you.
4. Data Collected Automatically
- Cookies: A sign-in cookie that keeps you signed in for up to 14 days, and a language cookie that remembers English, हिंदी or Hinglish for up to a year. Both are needed for the app to work. We use no advertising or tracking cookies.
- On your device: Unsent drafts of a trip request or driver application, the UPI ID mentioned above, and whether you dismissed the alerts prompt, kept in your browser’s storage so they survive a dropped connection. They never leave your device.
- Notifications: If you allow trip alerts, a notification token for your browser and your chosen language, so we can send alerts to that device.
- Technical logs: Like any website, our hosting provider and Google Firebase record technical details of each request, such as IP address, browser type and time, which we use only to keep the service running and secure. A security check (Google reCAPTCHA) runs when you request a sign-in code.
- Location: The app may ask a Driver-Partner for location permission. BOLOGO does not currently store or track anyone’s location; if that changes, this policy will be updated first.
We do not use analytics or advertising tools, and we never sell personal data.
5. Why We Use Your Data
- To run the service: Signing you in, publishing your trip request to drivers, delivering quotes, creating bookings and pickup codes, and completing trips.
- Payments: Collecting token advances, issuing refunds under the Cancellation & Refund Policy, and paying Driver-Partners.
- Driver verification: A person at BOLOGO reviews every Driver-Partner’s documents against their licence, permit and vehicle before they can quote, and may recheck them later.
- Safety and disputes: Investigating complaints, cancellations, no-shows, fraud, chargebacks and misuse, and enforcing the Terms & Conditions.
- Messages: Sending sign-in codes, trip alerts and service messages. We do not send marketing without asking you separately.
- Legal duties: Keeping tax and accounting records, and responding to lawful requests from courts, police, transport and tax authorities.
We process your data on the basis of the consent you give when you sign in, apply to drive or agree before paying, and for the legitimate uses the DPDP Act allows, such as complying with law and responding to emergencies.
6. Who Can See Your Data
- Driver-Partners: See a Rider’s name, photo and number of completed trips on a trip request — never their phone number or email at that stage.
- Riders: See a Driver-Partner’s name, photo, rating, ratings received and remarks, vehicle model and registration number.
- Phone numbers: A Rider and their Driver-Partner can see each other’s mobile number only once the token advance is paid, and only until the trip ends — so they can find each other at pickup. Using it afterwards is barred by the Terms & Conditions (section 11).
- Identity and vehicle documents: Seen only by the Driver-Partner who uploaded them and authorised BOLOGO staff. They are never shown to Riders or other drivers.
- Service providers: Google Firebase (sign-in, database, file storage, notifications and reCAPTCHA), Razorpay (payments, refunds and UPI ID checks) and Hostinger (website hosting). They process data only on our instructions and under their own security obligations.
- Authorities: Courts, police, the transport department or tax authorities, when the law requires it or to protect someone’s safety.
7. Where Your Data Is Stored
Our database and file storage are hosted on Google Cloud in India (Mumbai region). Some of our service providers may process data on servers outside India; any such transfer is made only as permitted under the DPDP Act and never to a country the Government of India has restricted.
8. How Long We Keep It
- Your account: For as long as you keep it, and deleted when you ask us to, except for the records below.
- Bookings and payments: Kept for as long as tax and accounting laws require (generally eight years), and for any longer period needed to settle a dispute or legal claim.
- Driver documents: Kept while you are a Driver-Partner or your application is under review, and deleted once they are no longer needed for verification, a dispute or a legal duty.
9. Your Rights
Under the DPDP Act you may:
- Access: Ask for a summary of the personal data we hold about you and who we have shared it with.
- Correction: Correct your name, gender, email or photo yourself under Settings → Personal Details, or ask us to correct anything else.
- Erasure: Ask us to delete your account and data. We will do so except where the law or an open booking, payment or dispute requires us to keep it.
- Withdraw consent: Withdraw your consent at any time. This does not undo what was lawfully done before, and you may no longer be able to use BOLOGO.
- Nominate: Nominate someone to exercise these rights for you in case of death or incapacity.
- Complain: Raise a grievance with our Grievance Officer (section 12) and, if it is not resolved, complain to the Data Protection Board of India.
To use any of these rights, email support@bologo.in from your registered email or write to us with your registered mobile number.
10. How We Protect Your Data
Sign-in uses a one-time SMS code and a secure, browser-only session cookie. Identity and vehicle documents sit in private storage that only their owner and authorised staff can open. Database access is limited by security rules, so a driver cannot read another driver’s quote or anyone’s private documents. Payments are handled entirely by Razorpay. If a personal data breach occurs, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.
11. Children
BOLOGO accounts are for people aged 18 and over. We do not knowingly collect personal data from children. A child may travel as a passenger on a trip booked by a parent or other adult, who is responsible for the booking.
12. Grievance Officer & Contact
Questions, requests and complaints about your personal data go to:
- Name: Viru Thakur
- Designation: Regulatory Nodal & Grievance Officer
- Operating Entity: Awara Banjara Adventure (OPC) Private Limited
- Corporate Address: The Mall Road / VPO Manali, District Kullu, Himachal Pradesh – 175131, India
- Support Email: support@bologo.in • legal@awarabanjara.com
- Phone: +91 91039 10523
- Timelines: Acknowledgment within 24 hours; resolution within 15 operational business days.
13. Changes to This Policy
We will publish any change on this page with a new effective date. If a change affects how we use data you have already given us, we will tell you in the app and ask for your consent again where the law requires.
Summary: What We Hold and Who Sees It
| Data | Who Can See It | Why |
|---|---|---|
| Name, photo | Who Can See It: Drivers you request; your driver | Why: So each side knows who to look for |
| Mobile number | Who Can See It: Your matched rider or driver — only after the token is paid, until the trip ends | Why: Sign-in, and finding each other at pickup |
| Trip requests and bookings | Who Can See It: You, drivers quoting, your driver, BOLOGO staff | Why: Running the trip |
| Aadhaar, licence, RC, permit photos | Who Can See It: The driver who uploaded them and BOLOGO staff only | Why: Verifying drivers |
| Payment references | Who Can See It: You, BOLOGO staff, Razorpay | Why: Payments, refunds, payouts |
| Card, bank and UPI PIN details | Who Can See It: Razorpay only — never BOLOGO | Why: Processing the payment |
Awara Banjara Adventure (OPC) Private Limited
Data Fiduciary • BOLOGO Regulatory Compliance
CIN: U79110HP2025OPC011677 • Kullu / Manali, HP
Viru Thakur, Regulatory Nodal & Grievance Officer