Easy Rasta — Privacy Policy

1. Information we collect

Account information

• Your phone number, used to log in via one-time password (OTP) — signing in this way needs neither your name nor your email. You can also choose to sign in instead with a Google account, an Apple account, or a one-time link sent to your email. Whichever of those you use, the provider shares your email address with us (Apple sometimes shares a private relay address instead of your real one), and Google — and, only the very first time you ever use it, Apple — may also share your name. Easy Rasta's own systems don't keep a separate stored copy of your name from either provider; we use it only to complete the sign-in itself.

Location information

• When you verify a loo, parking spot, or fuel deal, we briefly check your GPS location to confirm you're physically at that spot (this check happens once per verification and isn't stored as a location history).
• When you use Share My Ride, we collect your live GPS location for as long as your ride-tracking session is active, so it can be shown on a map to people you choose to share it with.
• If you're tracking an event ride, your live location is visible only to other riders who joined that same event, during the event's active window.

Photos you upload

• Photos you add for loos, parking spots, marketplace listings, or event posters are stored with us and may be visible to other users of the app, depending on the feature.

Profile information (all optional)

• Gender, if you choose to add it.
• Emergency information — blood group, allergies, and an emergency contact's name and phone number. This is private to you; no one else on Easy Rasta can see it today.
• Vehicle and insurance-related details you provide, including but not limited to vehicle number, insurance number and expiry, PUC number and expiry, odometer reading, service/maintenance history, and roadside-assistance contact numbers (insurer and manufacturer), if you use the Garage feature.
• A UPI ID, if you add one — used only to build a payment link so another rider can pay you directly (for a Marketplace sale, a Parking Rental, an event, or Spends Tracker). Easy Rasta never receives, holds, or moves the payment itself; the transfer happens directly between the two riders' own banks and UPI apps.

Marketplace information

• If you list an item for sale, your listing details (title, description, price, photos, and approximate location if you add one) are visible to other users. Your phone number is only revealed to a specific buyer when you choose to be contacted, via a WhatsApp link — it isn't published on the listing itself.

Events

• If you create or join a group ride or meetup, your username, participation, and any WhatsApp group link or Instagram handle you add are visible to other users viewing that event.

Notifications

• If you enable push notifications, we store a device or browser-specific token so we can send you alerts (like stale-loo reminders, event updates, or a ride check-in) — on the native app, this token is provided by Google's Firebase Cloud Messaging service, along with which platform (Android or iOS) your device is. Enabling push notifications is entirely optional. If you also enable location-based notifications, we separately store an approximate location for that purpose only.
• On the native Android app specifically, Firebase's own SDK — not Easy Rasta — automatically creates and registers a device identifier called a Firebase Installation ID the moment the app starts, so it can support Firebase Cloud Messaging. This can happen before you've made any choice about notifications at all. Firebase's messaging SDK separately generates the notification token described above — Easy Rasta creates neither identifier. We only retrieve that token and store our own copy, in our own device-registration records, once you deliberately choose to enable notifications, never before, and we may refresh our stored copy afterward for a device that's already enrolled. If you delete your Easy Rasta account, we remove our own stored registration for that device. We don't currently call the separate Firebase request that deletes the underlying Installation ID itself — Firebase states that it retains that identifier until we request its deletion through that separate API, and that after such a request, it removes the identifier from its own live and backup systems within 180 days.

Warn-a-Brother

• If you report a road hazard (a police check, road block, waterlogging, landslide, fallen tree, or similar), we store the hazard's exact location, what kind of hazard it is, and, where one is resolved, a place name for it. This is shown to nearby riders as a community safety alert — the hazard type, location, and how recently it was reported are visible to anyone using the feature; you are not identified to other riders as the one who reported it. If you or another rider later confirms a hazard is still there or no longer there, we store that response the same way.

Spends Tracker

• If you use Spends Tracker to split trip costs with other riders, we store the trip's name, who's part of it, and each expense logged against it — its category, amount, an optional note or custom label, the date, and an optional receipt photo. Everyone sharing that trip can see these entries and how much each person owes or has paid. If a payment between riders is marked as sent or received, we store that as a self-reported status only — Easy Rasta has no way to verify with a bank or UPI provider that a payment actually happened.

Usage and contribution activity

• We track your verifications, Shells (our in-app reward points) balance, and contribution history to power the app's gamification and trust features. Your username and verification activity may be visible to other users (for example, “Verified 3h ago · @username” on a loo listing).

Analytics

• We use PostHog, a product analytics service, to understand how Easy Rasta is used. This covers four things: the pages and screens you visit; specific actions we've deliberately chosen to track (for example, which sign-in method you use, or when you verify a loo or join an event); technical information your browser or device sends automatically as part of any web request (like browser type, operating system, and screen size); and page-loading/responsiveness diagnostics (Web Vitals) so we can see where the app is genuinely slow. None of this ever includes the content of anything you write — a listing's title or description, a comment, a note — only that an action happened, never what you typed. Once you're signed in, these events are linked to your account id; before that, they're tied only to an anonymous visit, not to you. We don't use this data for advertising.
• We've deliberately turned off every other PostHog feature that goes beyond this. We do not use Session Replay (no video-like recording of how you use the app), automatic console-log recording, Heatmaps (aggregate click/scroll tracking across the app), automatic crash or exception capture, or broad automatic tracking of every button, link, or element you tap. Only the pageviews, the specific actions we've deliberately coded, and the performance diagnostics described above are collected — nothing beyond that, and this is enforced in our own app code, not left to a setting that could be changed without us also updating this page.
• Reaching PostHog's servers, like reaching any website, necessarily sends along technical information such as your device's IP address — that's a basic feature of how the internet works, not something we or PostHog can switch off for anyone. Our PostHog project is set to discard that IP address rather than store it alongside your analytics events. We've also turned off PostHog's separate GeoIP location lookup, which can otherwise turn an IP address into an approximate city-level location — so it isn't used to work out or store an approximate location from any new event going forward.

2. How we use your information

We use the information above only to operate and improve Easy Rasta — for example, to:

• Confirm you're physically present when you verify a spot
• Show your live location to people you've explicitly chosen to share it with
• Let other riders see and respond to your marketplace listings and events
• Send you relevant notifications you've opted into
• Award and track Shells and contribution history
• Keep the platform safe (reviewing flags, reports, and moderation actions)
• Understand which features are used and where riders drop off, so we can improve the app

We do not sell your personal information to anyone, and we do not use your data for third-party advertising.

3. Who we share information with

We share information only with the service providers that help us run Easy Rasta, and only as needed for them to provide that service:

We may also disclose information if required by law, or to protect the safety of our users or the public.

4. Data retention and deletion

We keep your information for as long as your account is active, or as needed to provide the features you've used (for example, your marketplace listing history or verification contributions).

You can delete your account yourself, at any time, from Profile → Personal Info → “Delete my account.” You'll be asked to type your username to confirm. Deletion happens immediately once confirmed — there is no waiting period, and it cannot be undone or reversed.

Deleting your account permanently removes your own private data outright — your vehicles, fuel and maintenance logs and their photos, insurance/PUC details, ride-tracking history, emergency contact information, and roadside-assistance numbers, along with any photo you've uploaded anywhere in the app.

When you delete your account, we also automatically ask PostHog to delete the analytics history linked to your account (the pageviews, coded events, and performance diagnostics described in Section 1). PostHog processes deletions in batches, so this usually completes within about a week; we keep retrying automatically until PostHog confirms it. If you'd like us to confirm it's done, email us at the address in Section 7.

We keep a small internal record that a deletion was requested, so we can make sure it finishes. Your username is removed from that record as soon as your account is deleted, and the remaining account ID is removed about 30 days after PostHog confirms its deletion.

Step-by-step instructions, including how to request deletion without the app, are on our Delete your Easy Rasta account page.

Some contributions you made stay visible to other riders after your account is gone, with your identity removed from them — for example, a loo or parking listing you added, a rating or check you left on one, a public route you created, a challenge or fuel offer you created, a Warn-a-Brother report and its confirmations, or your own entries in a shared trip's Spends Tracker ledger. We keep these because other riders' own verifications, Shells, and trust in that shared information depend on it staying intact — the record stays; who you are is removed from it.

A small number of records exist mainly because of someone else's account, and can later disappear if that other person deletes their own account — for example, a comment you left on another rider's public profile, or a check-in you made on someone else's shared ride.

A Marketplace listing or Parking Rental listing you created — and everything tied to it, including bids or bookings from other riders — is removed entirely when you delete your account, rather than staying up with your identity removed.

If you're the sole owner of a Club, or you've created an Event that's still upcoming with other riders already joined, you'll need to transfer or dissolve the Club, or cancel the Event, first — these are never left behind silently when an account is deleted.

5. Your rights

Whatever India's data protection law requires of us at any given time, Easy Rasta already lets you:

India's data protection framework (the Digital Personal Data Protection Act, 2023, and its rules) is still being progressively brought into force. We're building these protections in as standard practice regardless of exactly when each part of that framework takes legal effect.

To exercise any of these rights, contact us using the details in Section 7.

6. Children’s privacy

Easy Rasta is intended for users aged 18 and over. We don't knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, please contact us so we can remove it.

7. Contact us / Grievance Officer

If you have questions, concerns, or requests about your data, or wish to raise a grievance, contact: