Privacy Policy
Last updated: April 28, 2026
1. Introduction
Welcome to Waylo. This Privacy Policy governs your use of the Waylo ecosystem ("Services"), which includes the Waylo Passenger App, Waylo Admin Dashboard, and Waylo Resolve App. We are committed to protecting your privacy in compliance with the Digital Personal Data Protection (DPDP) Act of India and other relevant global data protection regulations.
2. Data Roles (Controller vs. Processor)
Waylo primarily operates as a "Data Processor". The client organization that provides you access to our Services (such as an educational institution or corporate entity) acts as the "Data Fiduciary" or "Data Controller". This means the organization owns the data and determines how it is used, while Waylo processes that data solely to provide the transport service on their behalf.
The client organization is solely responsible for managing its own authorized personnel (administrators, drivers, and staff) and for ensuring their conduct and data handling practices comply with their internal policies and applicable laws. Waylo is not responsible for any misuse of data by the organization’s authorized users.
3. Information We Collect
We collect and process personal data of "Data Principals" (users) to facilitate institutional transport management. We collect this data only to provide the service, manage your account, and analyze app performance.
3.1 Personal Information
- Name & Email: Used for account identity and authentication.
- Phone Number: Used for account management and calling drivers through the app.
- User IDs: Unique identifiers used for app functionality and internal analytics.
- Other info: Any additional profile data provided by your organization (Dynamic Blueprint data).
3.2 Location Data
To provide real-time vehicle tracking, geofencing, and map features, we collect your device's Approximate and Precise Location while the app is in use. This data is used solely for app functionality—such as showing your position relative to the vehicles and managed zones—and is not collected when the app is closed.
3.3 App Activity & Performance Data
- App Activity & Usage Data: We collect anonymous information about app usage and navigation to optimize performance and improve the user experience.
- User-Generated Content: Titles and descriptions of issues you report in the Issue Center.
- Diagnostics & Crash Logs: We collect crash reports (via Google's reporting tools) and app performance metrics to fix bugs.
3.4 Device & Other IDs
We collect Device IDs (such as push notification tokens) to send you alerts. We also access the Advertising ID strictly for internal Analytics purposes to monitor app health and usage trends, not for advertising.
3.5 Biometric Data & Face ID
Facial recognition technology is utilized across the Waylo ecosystem to ensure secure and efficient passenger boarding. This biometric capability is used solely for real-time identity verification during transit. The data is processed securely, is not used for any profiling, and is never shared with external third parties.
4. Data Sharing & Third-Party Disclosures
We do not share your personal data with third parties for their own marketing or independent use. Your data is processed only by Waylo and its trusted service providers to run the app.
Service Providers (Processors): We use Google Cloud services to store and analyze data. These providers are "Data Processors" who handle your data according to our strict security instructions and only for the purposes of providing the Waylo service.
Organizational Access: Authorized administrators from your specific organization (your school or company) have access to the data to manage your transport. This is a core part of the app's functionality, not "Third-party sharing."
No Data Sharing: we do not sell, rent, or share your personal information with any outside third parties for their own marketing or independent use.
No Advertising: We do not use your data for advertising, and we do not show third-party ads in our apps.
5. Children's Privacy
Because Waylo is used by schools and colleges, we take the privacy of students seriously. In accordance with the DPDP Act and educational standards, for users under the age of 18 (or the relevant age of majority in your jurisdiction), we rely on the parent or authorized educational institution to obtain verifiable parental consent before providing students access to the platform. We do not knowingly collect personal data from children without such consent.
6. Your Rights & Data Deletion
You have the right to access, update, or delete your personal information. We provide you with the flexibility to manage your data privacy:
Manage Your Data:
Through our official request form, you can choose to:
- Request Partial Deletion: Delete specific data (like activity history) without removing your entire account.
- Request Complete Deletion: Permanently delete your account and all associated personal data from our systems.
Note: Requests are typically processed within 7–30 days.
You may also contact us at [email protected] for assistance.
7. Data Retention
We retain your personal data only for as long as necessary to provide our services and fulfill the purposes outlined in this policy, or as required by the client organization. Data may be retained to comply with legal obligations, resolve disputes, and enforce agreements.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Users are responsible for reviewing this page periodically for updates. Continued use of the Services after changes are made constitutes acceptance of the updated policy.
9. Contact Us
For inquiries regarding this Privacy Policy or your data rights as a Data Principal, please contact us at:
[email protected]
For general support inquiries, you may contact:
[email protected]