Privacy Policy
Your privacy and safety are our top priorities. This Privacy Policy details how Drifttly collects, uses, protects, and stores your personal information when you use our campus ride-pooling service.
shieldPrivacy Principles at Drifttly
- Zero Ad-Tracking & No Data Selling: We do not sell, rent, or monetize your personal data or travel history with advertisers or data brokers.
- Verified Contact Shielding: Your WhatsApp contact number is never made public on the discovery feed. It is only shared securely when a verified peer unlocks a ride connection.
- No Stored Payment Cards: All payments are processed through Cashfree Payments under RBI compliance and 256-bit encryption. Drifttly never stores your card numbers, UPI PINs, or CVVs.
- Student-First Verification: We only collect information essential to verifying university identity and facilitating peer safety.
1Information We Collect
We collect information that you directly provide when registering and using Drifttly:
Account & Profile Data
Full name, official university email (@bennett.edu.in), student course, graduation year, gender, and avatar photo.
Contact & Ride Data
WhatsApp contact number, origin, destination, departure time, seat availability, ride preferences, and notes.
Transaction Data
Drifts credit balance, top-up pack purchase history, Cashfree Order ID, payment status, and connection logs.
Security & Telemetry
IP address (used exclusively for Upstash Redis abuse rate limiting), browser user-agent, and error crash logs.
2How We Use Your Information
We process your data solely for core application operations:
- Verifying Student Eligibility: Authenticating that users belong to Bennett University to keep the community safe.
- Ride Matching & Coordination: Displaying available ride listings, departure times, and enabling WhatsApp communication between confirmed co-travelers.
- Safety & Filter Enforcement: Enforcing the “Girls Only” pool preference based on verified profile gender.
- Wallet & Payment Processing: Crediting Drifts upon successful Cashfree webhook confirmation and maintaining accurate balance records.
- Service Notifications: Sending critical account alerts (e.g. password resets, ride matches, security updates) via Resend.
3How Information is Shared
We never sell or disclose your information except under the following direct operational circumstances:
- With Fellow Students (On-Demand): When you unlock a connection or a student joins your ride, your sanitized WhatsApp number and first name are shared with that student to facilitate in-person cab pooling.
- Infrastructure & Service Providers:
- Google Cloud / Firebase: Secure encrypted database (Firestore) and authentication storage.
- Cashfree Payments: RBI-licensed payment gateway for processing Drift purchases.
- Upstash Redis: Temporary high-speed caching for DDoS and rate-limit protection.
- Resend: Secure transactional email dispatch.
- Legal Compliance: If required by Indian law enforcement or court order in connection with criminal investigation or campus safety threats.
4Data Retention & Security
We implement enterprise-grade technical safeguards including TLS 1.3 encryption in transit, encrypted database storage at rest, strict Firestore Security Rules, and server-side secret key isolation.
Ride records and connection logs are retained for active travel coordination and community safety review, after which expired ride details are automatically archived.
5Your Rights: Access & Data Deletion
Under Indian data protection laws, you maintain full control over your personal data:
- Profile Updates: You can edit your contact number, course, year, and avatar anytime in your in-app Profile settings.
- Account Deletion Request: You can permanently delete your account and all associated ride records by emailing us at contact@drifttly.app. Upon verification, your profile and personally identifiable information will be purged from our active databases within 7 business days.
6Contact the Data Privacy Team
If you have questions, privacy concerns, or data requests, our team is available to assist you:
Data Protection Officer & Support
Drifttly Campus Mobility Team · Bennett University Campus