ula

Ula ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it when you use the Ula mobile application.

1. Information We Collect

We collect the following information when you create an account or use Ula:

• Account information: your name, email address, and password (stored securely via Supabase Auth).
• IT Professional verification: your company email address and employer domain, if you choose to verify as an IT professional. This is optional.
• Profile information: phone number, gender, car model, car colour, and number plate — only if you choose to add them.
• Ride and booking data: rides you post, seats you book, departure times, routes, and prices.
• Notification preferences: travel dates and routes you register for "Notify Me" alerts.
• Push notification token: a device token used to send you ride alerts. This is stored on our servers and used only for app notifications.
• Usage data: app interactions, feature usage, and error logs for improving the app.

2. How We Use Your Information

• To provide and operate the Ula ride-sharing service.
• To verify IT professional status and display verified badges.
• To send push notifications when a matching ride is posted on your registered route.
• To calculate and display driver and passenger ratings.
• To enforce safety features such as women-only ride filters.
• To comply with applicable laws and regulations, including RTO cost-split guidelines.
• To improve and develop new features of the Ula app.

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We share information only in the following limited circumstances:

• Other users: Your name, rating, car details, and ride information are visible to other Ula users when you post a ride or make a booking. Your email address is never shown to other users.
• Service providers: We use Supabase for database and authentication services, and Expo for push notifications. These providers process data on our behalf and are bound by confidentiality obligations.
• Legal requirements: We may disclose information if required by law or in response to a valid legal request.

4. Data Retention

We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Ride history and booking records may be retained for up to 12 months for safety and dispute resolution purposes.

5. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on our database, and secure password hashing. However, no method of transmission over the internet is 100% secure.

6. Children's Privacy

Ula is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

7. Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and personal data.
• Withdraw consent for push notifications at any time via your device settings.
• Object to certain types of data processing.

To exercise any of these rights, please contact us using the details below.

8. Push Notifications

Ula uses Expo's push notification service to send you ride alerts. You can disable push notifications at any time in your iPhone Settings → Notifications → Ula. Disabling notifications will not affect your ability to use the app, but you will not receive Notify Me alerts.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of Ula after changes are posted constitutes your acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising in connection with this policy shall be subject to the jurisdiction of the courts of Tamil Nadu, India.