dlabla ("dlabla", "we", "us") is a travel companion platform operated from Pune, Maharashtra, India. This Privacy Policy explains what information we collect through the dlabla mobile application and the website dlabla.com (together, the "Service"), why we collect it, how it is used and protected, and the choices you have. By using dlabla you agree to this policy.
1. Information we collect
| Category | Examples | When |
|---|---|---|
| Account data | Name, mobile number, email address, password (stored as a secure hash), date of birth, gender | Sign-up and profile editing |
| Profile data | Photo, bio, interests, languages, travel preferences | Optional, provided by you |
| Identity verification (KYC) | Government ID images and a selfie | Only if you choose to verify your identity |
| Emergency contacts | Name, phone number and relation of contacts you nominate | Required before publishing or joining a trip |
| Trip & activity data | Trips you host or join, join requests, reviews, expenses you record, group chat and direct messages | As you use the Service |
| Location data | Precise GPS coordinates | Only when you tap SOS or share a trip check-in — never continuous background tracking |
| Device data | Push notification token, device model, OS version, app version, IP address, crash logs | Automatically |
2. How we use information
- To run the platform — creating trips, matching travellers, delivering chats and notifications.
- Safety — when you trigger SOS we send your live location by SMS to your emergency contacts and alert our safety team; verified-ID badges and reviews help travellers trust each other.
- Verification — phone number verification via SMS one-time codes (delivered through Google Firebase Authentication).
- Compatibility matching — computing trip match scores from interests, languages, age group and travel style.
- Communication — service notifications, trip updates and safety alerts. We do not send third-party marketing.
- Security & compliance — preventing fraud and abuse, moderating reported content, meeting legal obligations.
3. What we never do
- We do not sell your personal data to anyone.
- We do not show your phone number, email, ID documents or emergency contacts to other travellers.
- We do not track your location in the background.
- We do not serve third-party advertising.
4. Sharing
Limited data is shared only with: (a) other travellers — your public profile (name, photo, bio, interests, verified badge, reviews) and the trips you publish; (b) service providers — Google Firebase (phone verification and push notifications), SMS delivery providers (OTP and SOS messages) and our hosting providers, each bound to process data only on our instructions; (c) your emergency contacts — your name and live location, only when you trigger SOS; (d) authorities — where required by applicable law or to respond to valid legal process, or to protect the safety of any person.
5. Storage & security
Data is stored on secured servers. ID documents are kept in private, access-controlled storage and are never publicly reachable. Passwords are hashed with bcrypt. All traffic uses HTTPS/TLS. Access to personal data within our team is role-restricted and logged.
6. Retention
We keep your data while your account is active. When you delete your account, personal data, KYC documents, emergency contacts and device tokens are removed within 30 days, except minimal records we must retain under Indian law (for example, fraud-investigation or tax records) or content already shared with others where removal is technically impossible (e.g. your messages quoted in another user's report).
7. Your rights
Under India's Digital Personal Data Protection Act, 2023 and comparable laws, you may access, correct, update or delete your personal data, withdraw consent, and nominate a person to exercise your rights. Most actions are available in the app (Profile → Edit; Settings → Delete account). For anything else, email us — we respond within 30 days.
8. Children
dlabla is for users aged 18 and above. We do not knowingly collect data from minors; suspected underage accounts are removed.
9. Changes
We may update this policy as the Service evolves. Material changes are announced in-app at least 7 days before taking effect. Continued use after the effective date means acceptance.
10. Contact & grievances
Data requests and grievances (including under the DPDP Act and IT Rules 2021):
dlabla — Grievance Officer
Email: support@dlabla.com
Pune, Maharashtra, India