Privacy Policy
Effective 23 September 2026
Sahyatri Community Carpool (“the app”) is operated by Enlivion Studios (“we”, “us”). It helps colleagues and neighbours organise shared commutes: pools, a fair driver rotation, live ride tracking, group chat and cost settlement. This policy explains what we collect, why, who can see it, and how to delete it.
What we collect
| Data | Why | Who can see it |
|---|---|---|
| Name, email address, optional phone number | Create your account, sign you in, send verification codes | Members of pools you join |
| Sign-in account (email and password, or Google / Apple sign-in) — managed by Google Firebase Authentication | Authentication | Google Firebase (sign-in only) |
| Precise location | Show the driver’s position to passengers, and passengers’ positions to the driver, during an active ride | Members of that ride |
| Vehicle name, registration number, seat count | Driver rotation and seat planning | Members of that pool |
| Pickup points, availability, leave and ride history | Build the roster and keep the rotation fair | Members of that pool |
| Chat messages | Pool group chat | Members of that pool |
| Trip cost and settlement amounts | Show who owes whom | Members of that pool |
Location
Location is used only while a ride is in progress. When you are the driver of a ride that has started, the app shares your location with that ride’s passengers — including while the app is in the background or the screen is off — so they know when to be ready. Sharing stops automatically when every passenger is picked up or the ride ends. On Android a persistent notification is shown the whole time; on iOS the system location indicator is shown. Passengers share their location with the driver only while the app is open, from when the ride starts until they are picked up, after agreeing to an in-app notice; they can pause it at any time from the ride screen.
Live positions are held for a few minutes and then discarded. We do not build location history, and we never use location for advertising.
What we don’t do
- We do not sell or rent personal data.
- We do not show ads and do not use advertising identifiers.
- We do not track you across other companies’ apps or websites.
Service providers
We use a small number of processors to run the service: cloud hosting and database (Render); Google Firebase Authentication, which handles sign-in, email verification and password resets (it stores your email, a hashed password if you use one, and your sign-in provider); Google and Apple for optional sign-in; and a map tile provider for maps (map tile requests reveal the approximate area being viewed). They process data only on our behalf. If you sign in with Apple, we keep a token from Apple solely so we can revoke that sign-in when you delete your account.
Security
Data is encrypted in transit (HTTPS / WSS). Session tokens are stored in the device keychain / keystore. Passwords are handled and hashed by Firebase Authentication. Accounts created before we moved to Firebase kept a bcrypt hash on our servers, which is deleted the first time that account signs in through Firebase.
Retention and deletion
We keep your data while your account exists. You can delete your account at any time from Profile → Delete account in the app, or as described on the account deletion page. Deletion immediately removes your name, email, phone, sign-in identity, vehicles, pickup points, chat messages and notifications, and signs you out everywhere. Past rides you took part in remain in other members’ history as “Deleted user” so their rotation and settlement records stay correct; they no longer identify you. A chat message that was reported for abuse is kept until the report has been reviewed.
Your rights
You can access and correct your data in the app, and ask us for a copy or for deletion by emailing enlivionhelp@gmail.com. Depending on where you live (for example under the GDPR or India’s DPDP Act) you may have further rights, including to complain to your data protection authority.
Children
The app is not directed at children under 16 and we do not knowingly collect their data.
Changes
We will post changes here and update the effective date. Significant changes will be announced in the app.