How we protect your data

The app and this website talk to our servers only over HTTPS (TLS). Our internal services are not reachable from the internet directly — only through that encrypted connection. The server's firewall allows only secure web traffic and key-based administrator access.

If you book a ride or delivery

• Pickup and drop addresses, to price and complete the trip.
• Your location while you book and during a live trip. During the trip it is shared only with the captain assigned to you, so they can find you.
• Your name and email if you sign in with Google. We never see your Google password.
• Your public wallet address, if you choose to connect a wallet.

If you are a captain

• Your location only while you are on duty, to show trip progress and match you with nearby riders. It stops the moment you switch to Off.
• Identity and vehicle documents, to verify you before you can take trips.

Documents are stored outside the public website, visible only to VGF Foundation's verification team, and are never shown to riders. A captain can only go on duty for the vehicle types whose documents we have approved.

• Google sign-in is verified with Google on every sign-in, and sessions are stored as one-way hashes, so a copied file cannot be used to sign in as you.
• A captain account signed in on a new phone is signed out on the old one automatically.
• App data is excluded from phone cloud backups, so sign-in data is not copied off your device.

VGF is non-custodial. We never hold your VGF or your private keys. Anything you pay in VGF goes from your own wallet, and you approve every transaction in that wallet.

We do not sell your personal data. You can ask what we hold about you, correct it, or delete your account, under India's Digital Personal Data Protection Act, 2023. Delete your account or write to support@vgf.foundation.