This policy explains what the Drive Wacho app and service collect, track, monitor and share about you, why, and your rights. The Data Fiduciary is Nanchar Global Enterprises (OPC) Private Limited ("we", "us"), which owns and runs Drive Wacho. It is part of our Terms of Use.
In short: Drive Wacho tracks your location in the background (also when the app is closed), monitors your driving with the phone's sensors, and shares your location and details with your family, our Command Center and emergency services when help is needed – and with family members you choose. We never sell your data and never use it for advertising. By agreeing in the app you consent to all the processing described here for the purposes listed; optional items are only used if you turn them on.
1. What we collect and track
| Data | When / how | Required? |
|---|---|---|
| Account: name, mobile number, city/state, language, plan, agreement record | At sign-up and when you change them | Yes |
| Cars: number plate, make, model, colour, drivers you add | When you add a car | Yes (at least one car to protect) |
| Emergency contacts: names, relation and phone numbers of family or friends | When you add them | Recommended |
| Location: GPS position, speed, heading, accuracy | Continuously while protection is on, including in the background when the app is closed or not in use | Yes, for protection |
| Trips: start, end, route, distance, duration, top speed, vehicle type (car / taxi / bus / train / two-wheeler) | Automatically when you travel | Yes |
| Driving behaviour: overspeed, hard braking, quick acceleration, sharp turns, phone unlocks and calls without hands-free while moving, driving time and tiredness, safety score | While driving | Yes |
| Motion sensors: accelerometer, gyroscope, air pressure, proximity (phone in pocket / holder), how the phone leans in turns | While moving, to detect crashes, phone position and two-wheeler rides | Yes |
| Black box: ~10 s before and ~20 s after a strong jolt, hard stop or phone drop – sensor readings and GPS (no sound, no video) | Automatically, if your plan includes it | Plan feature |
| Physical activity (in vehicle / walking) | From the phone, to tell driving from walking | Yes |
| Bluetooth: name and address of your car's Bluetooth and of an SOS button you pair | When you link them | Optional |
| Microphone: only the loudest sound level in the 3 seconds after a strong jolt (no recording, nothing saved) | Only if you allow the microphone | Optional |
| Medical card: blood group, allergies and a note for the doctor (health data) | Only if you fill it in | Optional |
| Photos: profile and car photos | Kept on your phone only | Optional |
| Saved places (home, work) | When you add them – used only to name trips | Optional |
| Emergencies: SOS and crash alerts, timeline, call notes, reports you send (photo, description), QR-sticker reports from people who scan your car | When an emergency happens | — |
| Device: phone model, Android version, app version, battery, permission status, notification token | To keep protection working and send alerts | Yes |
| Payments: plan, amount, date, payment reference (card / bank details stay with Razorpay) | When you buy a plan | For paid plans |
| Support: your messages and screenshots | When you contact support | — |
We do not read your calls, messages, contacts list, photos gallery or other apps.
2. Why we use it
- To detect trips and possible crashes, and to raise and handle SOS and crash alerts.
- To send your location and details to the people who can help you in an emergency.
- To show your trips, driving score, weekly report, spoken warnings, accident-area and tiredness warnings.
- To run family view, parental monitoring, car sharing, live trip links and the emergency QR sticker when you use them.
- To manage your account, plan and payments, and to answer support requests.
- To keep the Service secure, prevent misuse and false alerts, and meet legal duties.
- To improve crash detection and the driving score (using driving data, black-box recordings and operator labels).
- To send safety tips – only if you choose this.
3. Who we share it with
| Who | What | When |
|---|---|---|
| Your emergency contacts (family / friends you add) | Your name, phone, car, live location link, what happened | When you raise an SOS or a crash is detected (Basic plan: one app notification to the first contact who has the Drive Wacho app, no WhatsApp. Prime and higher plans: WhatsApp and app notification to all your contacts) |
| Drive Wacho Command Center (our staff) | Your account, cars, contacts, live location, trips, driving events, black box, medical card, alerts | For plans that include it: to watch for and handle emergencies |
| Police, hospitals, ambulance services | Your name, phone, car, location, what happened, medical card if added | When the Command Center calls them for you |
| Family members you approve (family view) | Your trips, live location while driving, status | Only after you allow it; you can stop at any time |
| Parents (parental monitoring) | Speed and area alerts, live location | Only after both agree; the young driver sees the rules |
| Anyone with a live trip link you send | Your live location on a map | Until the link ends (4 hours) or you stop it |
| Owner / drivers of a shared car | Trips and alerts for that car | When the owner adds you as a driver |
| Other Drive Wacho drivers nearby | Only the place and type of a reported accident – never your name or number | When an accident is reported on a road |
| Service providers under contract: Google Cloud (servers in India), Google Maps / OpenStreetMap, WhatsApp (Meta Platforms – WhatsApp Business), Firebase notifications, Razorpay (payments), number-plate reading, motion engine (Transistorsoft, on the phone) | Only what each needs to provide its part | To run the Service |
| Authorised Drive Wacho staff (under NDA) | What their work needs | To provide the Service (section 4) |
| Government, police, courts and other authorities | What the official request asks for | On their official request for legal reasons (section 5) |
We never sell your data and never use it for advertising.
4. Who inside Drive Wacho can see your data
To provide the Service, authorised staff of Nanchar Global Enterprises (OPC) Private Limited – including Command Center operators, supervisors, support staff and technical staff – may access your personal data, including your live location, trips, driving events, black-box recordings, emergency contacts and medical card. Access is given only to staff who need it for their work, is protected by individual logins, and is recorded in activity logs.
Every staff member who can access personal data signs a Non-Disclosure Agreement (NDA) and a confidentiality pledge before getting access. They may use your data only to provide the Service and must not copy, share or misuse it. Breach of this pledge leads to disciplinary action, including termination and legal action against the staff member.
5. Requests from government and law-enforcement authorities
We may share your personal data – including your account details, phone number, cars, live and past locations, trips, driving events, black-box recordings, emergency alerts, call notes and payment records – with government, police, courts, regulators and other authorities when they ask for it for legal reasons, for example: to investigate or prevent a crime, accident or offence; in response to a court order, summons, warrant or notice; for national security, public order or public safety; to protect someone's life or safety in an emergency; or to comply with any law, rule or official direction in force in India.
We share data only against an official request from an authorised officer or authority (in writing or through an official channel), after checking that it is genuine, and only what the request asks for. Where the law allows, we will tell you about the request; we may not tell you if the law, the authority or an ongoing investigation does not allow it. This sharing is done under applicable Indian law, including the Information Technology Act, 2000 (sections 69 and 79) and its rules, the Bharatiya Nagarik Suraksha Sanhita, 2023, section 17 of the Digital Personal Data Protection Act, 2023, and CERT-In directions. By accepting our Terms and this Privacy Policy you agree to this sharing; to the fullest extent the law allows, Nanchar Global Enterprises (OPC) Private Limited is not liable for any consequence of data shared in good faith in response to such a request.
6. Family view and parental monitoring
You can let a family member see your trips, live location while driving and status. A parent can set rules for a young driver (speed limit, allowed area) and is notified when a rule is broken. Both work only after the people involved agree in the app, the driver always sees the rules, and either person can stop sharing at any time.
7. Your emergency contacts and your medical card
- When you add a family member, friend or co-worker as an emergency contact, or share anyone's phone number, vehicle details or other personal details with us, you are solely responsible for sharing them and you confirm that the person knows and agrees (Terms of Use, section 7B). We send each new emergency contact one WhatsApp message saying they were added and how to be removed, and we remove their details when they ask.
- The medical card is saved only after you tick that it may be shared with the Command Center, ambulance and hospital staff in an emergency. It is health data: we use it for nothing else, and you can delete it at any time.
8. Data that no longer identifies you
We may use data that no longer identifies you (for example accident hotspots, average speeds on a road or crash patterns) to improve the Service and road safety, and may share it with government road-safety bodies, researchers or partners. This data cannot be traced back to you.
9. Where your data is stored, and messages we send
- Your data is stored on servers in India (Google Cloud, India regions). Some service providers – such as maps, notifications or the motion engine – may process limited data outside India, only as allowed by Indian law.
- The Service uses services from various Indian and global companies (servers, database, maps, location and background tracking, notifications, SMS, payments). If any of them does not work, the Service may work only partly – see the Terms of Use, section 5.
- You agree to receive service calls, SMS, WhatsApp messages and notifications about your safety, account and plan, even if your number is on the Do Not Disturb (DND) list. Promotional messages are sent only if you opted in to safety tips, and you can stop them at any time.
10. How long we keep it
| Data | Kept for |
|---|---|
| Trip routes, driving events, risk scores | Basic plan: 30 days. Paid plans (Prime and up): 1 year. Longer only if the trip is part of an emergency. |
| Trip summaries (date, distance, top speed, score) | Until you delete them or your account |
| Two-wheeler rides and walks | Deleted at the end of the ride (kept only if an emergency happened) |
| Black-box recordings | 90 days (recordings of a real crash are kept as evidence) |
| App notifications | 180 days |
| Closed emergency alerts and reports | 1 year, unless the law needs longer |
| Account, cars, contacts, medical card, plan | Until you delete your account |
| Proof of consent, payment and tax records, audit logs | As long as the law requires |
11. Your rights
- See and correct your details in the app (Profile), or ask us for a summary of your data and who it was shared with.
- Withdraw device permissions (location, microphone, camera, physical activity, Bluetooth, notifications, battery, full-screen alarm) at any time in your phone settings or the app – they are your choice, and features that need them will stop working (Terms of Use, section 7A).
- Withdraw consent at any time: turn off protection, remove location or other permissions, delete your medical card or contacts, stop family sharing or safety tips. Withdrawing does not affect processing already done; some features will stop working.
- Delete: Profile → Delete my account removes your profile, cars, contacts, medical card and history (records we must keep by law are kept only for that purpose). Without the app, use Delete your account on the web (we send a code to your number).
- Nominate a person to use these rights for you if you die or cannot act. A nominee, or your legal heir with proof, can ask us for your data or ask us to delete your account. Emergency records may be kept as long as the law or an investigation requires.
- Complain to our Grievance Officer (section 16). If you are not satisfied, you can approach the Data Protection Board of India.
12. Age
Drive Wacho is for people 18 or older. We do not knowingly collect data of children. Parental monitoring is for adult young drivers who agree to it.
13. Security and data breaches
Data is encrypted in transit (HTTPS), stored on Google Cloud servers in India, and access is limited to staff who need it, with logins, two-step checks for staff and activity logs. No system is perfectly secure; if a personal data breach happens that affects you, we will inform you and the Data Protection Board of India as required by the DPDP Act and Rules, explain what happened and what you can do.
14. Laws we follow
- Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025
- Bharatiya Nagarik Suraksha Sanhita, 2023 and CERT-In directions (requests from authorities)
- Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020
- TRAI Telecom Commercial Communications Customer Preference Regulations, 2018 (registered SMS)
- Reserve Bank of India rules for payments (through Razorpay)
- Motor Vehicles Act, 1988 (you remain responsible for safe and lawful driving)
- Google Play Developer Policies (background location, prominent disclosure, data safety)
15. Changes
We will tell you in the app before important changes take effect, and ask for your agreement again where the law requires.
16. Contact and Grievance Officer
Nanchar Global Enterprises (OPC) Private Limited
Registered office: 2-62, Railwaystation Road, Mandavalli Mandalam, Mandavalli, Krishna, Andhra Pradesh – 521345, India
Grievance Officer / contact for data requests: Grievance Officer, Nanchar Global Enterprises (OPC) Private Limited – email nancharsmartai@gmail.com, phone / WhatsApp +91 82978 49697
We aim to reply within 7 days and resolve within 30 days. In the app: Profile → Help & support.