1. Who We Are
RideManager is an Android application developed and operated by Ankit Rawat, an individual software developer. This Privacy Policy explains how data entered into and generated by the RideManager application is collected, stored, used, and retained.
For questions about this policy, contact: mail@ankitrawat.com
2. Who This Policy Applies To
This policy applies to rental business operators who use the RideManager Android application to manage their two-wheeler rental operations. RideManager is a business management tool for operators, not a consumer-facing marketplace. End customers of rental businesses are not direct users of this application.
3. Data We Collect and Why
3.1 Account Data
When you create a RideManager account, we collect:
- Email address — used as your login identifier
- Full name — associated with your account
- Business name — associated with your rental operation
- Mobile number — for account identification
- Password — stored as a bcrypt hash; your actual password is never stored in readable form
3.2 Customer Records
Operators enter customer information into the app as part of the rental process. The following customer data is stored on the server:
- Customer name
- Customer mobile number
- Customer address
- Identity document type — selected from: Aadhaar, PAN, Voter ID, Passport, or Driving Licence
- Identity document number
- Driving licence number
- Driving licence expiry date
- Customer document images — photographs of identity or other documents uploaded within the app are stored as image files (JPEG, PNG, or WebP) on the server
This data is entered by the operator. Operators are responsible for obtaining any necessary consent from their customers to record and store this information.
3.3 Vehicle Records
Operators register their vehicle fleet in the app. The following vehicle data is stored:
- Vehicle registration number
- Make and model
- Vehicle type (scooter, motorcycle, or bicycle)
- Operational status (available, rented, or under maintenance)
- Rental price per day
- Per-date pricing overrides, if set
3.4 Booking and Payment Records
For each rental booking, the following records are stored:
- Vehicle assigned to the booking
- Customer assigned to the booking
- Booking start and end dates
- Vehicle return date, once recorded by the operator
- Total rental amount
- Booking status (active, completed, or cancelled)
- Daily price records for the booking period
- Payment records: amount paid, payment method, date and time of payment, and any notes entered by the operator
3.5 System Records
The application generates the following technical records as part of normal operation:
- Authentication tokens — login session tokens are stored on the server as SHA-256 hashes to manage your login session. The token is stored securely on your device using Android’s secure credential storage and is invalidated when you log out.
- Audit event logs — actions such as creating or updating a booking are logged with the action type, affected record type, and your account identifier for security and data integrity purposes.
- Request idempotency records — short-lived technical records used to prevent duplicate API operations.
3.6 What We Do Not Collect
- GPS location data or vehicle position — RideManager does not use or request location permissions
- Payment card numbers, bank account numbers, or financial credentials
- Advertising identifiers, analytics data, or device identifiers beyond the session token
- Data from your contacts, camera roll, or other apps
- Biometric data
- Video recordings — the app does not have video capture functionality
- Odometer readings — this feature is not implemented in the current version
4. How Data Is Stored
Server storage: All business data (bookings, customers, vehicles, payments, document images) is stored on a server operated by Ankit Rawat, hosted on HostingRaja shared hosting in India.
On-device storage: The app stores only your login session token on your device, using Android’s secure credential storage (flutter_secure_storage). No business records, customer data, or document images are stored on your device.
Data in transit: All communication between the app and the server is encrypted using HTTPS (TLS).
No third-party cloud services: Your data is not stored on or processed by third-party cloud platforms such as Firebase, AWS, or Google Cloud.
5. Data Retention
Data entered into RideManager is retained on the server until your account deletion request is processed. There is no automatic expiry or scheduled deletion of any data type.
| Data Type | Retention |
|---|---|
| Account data (email, name, business name, mobile number, password hash) | Retained until account deletion is processed |
| Customer records (contact details, identity document fields) | Retained until account deletion is processed |
| Customer document images (uploaded photographs) | Retained until account deletion is processed |
| Vehicle records | Retained until account deletion is processed |
| Booking and payment records | Retained until account deletion is processed |
| Authentication tokens | Invalidated on logout; all invalidated when account is deleted |
| Audit event logs | Retained until account deletion; may be retained for a limited additional period for security purposes |
To request deletion of your account and associated data, see Section 7 or visit the Account Deletion page.
6. Data Sharing
We do not sell, rent, or share your data with third parties for commercial purposes. Data may be disclosed only:
- If required by applicable Indian law, a court order, or a government authority
- To protect the rights, property, or safety of Ankit Rawat or users of the application
7. Your Rights
You have the right to:
- Access: request a summary of the data held against your account
- Correction: update customer, vehicle, and booking records directly within the app; contact us to correct account data
- Deletion: request deletion of your account and all associated server-side data
To exercise any of these rights, email mail@ankitrawat.com or follow the process on the Account Deletion page. Requests are processed within 30 days.
On-device data: The app stores only your session token on your device. This token is automatically invalidated when your account is deleted. To also remove it from your device, uninstall the app or clear the app’s data from Android settings: Settings → Apps → RideManager → Storage → Clear Data. There is no local database on your device — all business records are stored only on the server.
8. Children’s Privacy
RideManager is a business management tool intended for adult operators of commercial rental businesses. It is not directed at or intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the “Last Revised” date at the top of this page will be updated. Continued use of the application after a policy update constitutes acceptance of the revised policy.
10. Contact
For any questions about this Privacy Policy or your data:
- Email: mail@ankitrawat.com
- Account deletion: ankitrawat.com/ridemanager/account-deletion/
- Product page: ankitrawat.com/products/ridemanager/
Governing law: Republic of India. Disputes subject to the jurisdiction of courts in Delhi, India.