Mumbai · Thane · Navi Mumbai · Mira Bhayandar and expanding
| My Bookings | Logout |

Privacy Policy

Last updated: July 22, 2026

Miles Mobility Pvt Ltd ("Miles Tours & Travels", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, retain, and safeguard your personal information when you use our website, our customer portal, the Miles Tours and Travels customer app, or the Miles Tours & Travels – Driver app, to book or fulfil travel and cab services. This policy is issued in compliance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Information We Collect

  • Personal Identifiers: Full name, mobile number, and email address.
  • Location Data: Pickup/drop-off locations and (with consent) real-time GPS data. For drivers using the Miles Driver app this includes precise location collected in the background — see the highlighted section below.
  • Device Information: Device model, OS version, unique identifiers, and app version.
  • Usage Data: Pages visited, features used, booking history, interaction logs.
  • Payment Information: Transaction identifiers via Razorpay. We do not store full card or banking credentials.
  • Communications: Messages or queries submitted through our support channels.

Background Location Collection — Miles Tours & Travels – Driver app (drivers only)

The Miles Driver app collects the driver's precise location in the background — that is, while the app is closed, minimised, or the phone screen is off. We disclose this prominently inside the app and ask for the driver's explicit consent before Android's own permission prompt appears.

  • What is collected: precise GPS coordinates (latitude, longitude, heading) of the driver's device, together with the associated booking reference.
  • Why: to show the customer and our operations team the live position of their vehicle during the journey, to calculate distance travelled for accurate fare and invoicing, and for safety and dispute resolution.
  • When: only while a duty/trip is active. Collection begins when the driver starts a trip and stops when the trip is completed or cancelled. Location is never collected while the driver is off duty, and never from customers in the background.
  • Visibility and control: while tracking is running, a persistent notification is shown in the driver's status bar. The driver can stop collection at any time by ending the trip, by revoking the location permission in Android Settings, or by uninstalling the app.
  • Sharing: live location is shared only with the customer on that booking and our internal operations team. It is never sold, and never shared with advertising or analytics networks.
  • Retention: trip location traces are retained for up to 12 months for billing, safety and dispute purposes, then deleted or anonymised.

This background location processing is carried out on the basis of the driver's consent under the DPDP Act, and consent may be withdrawn at any time as described in Section 7.

2. Lawful Basis and Purpose

We process your personal data on the basis of your consent or for legitimate uses permitted under the DPDP Act, including: booking processing, OTP verification, push notifications, driver dispatch, payment processing, customer support, service improvement, and legal compliance.

3. Information Sharing

We do not sell your personal information. We share data only with: assigned drivers (name, mobile, trip details), Razorpay (payments), SMS/OTP gateway providers (mobile number), and legal authorities when required by law. We do not share data with advertising networks for targeted advertising.

4. Data Retention Period

  • Account information: retained for the life of the account and up to 3 years after account closure.
  • Booking and payment records: retained for 7 years as required under tax and financial laws.
  • Device logs and usage data: retained for up to 12 months.

After the applicable period, data is securely deleted or anonymised in line with Section 8(7) of the DPDP Act.

5. Security

We implement reasonable security safeguards including HTTPS/TLS encryption, role-based access controls, regular security reviews, bcrypt password hashing, and PCI-DSS compliant payment processing. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by law.

6. Your Rights as a Data Principal (DPDP Act 2023)

Under Sections 11–14 of the DPDP Act, you have the following rights:

  • Right to Access: Obtain a summary of your personal data being processed and the processing activities.
  • Right to Correction and Erasure: Request correction, completion, updating, or erasure of your personal data.
  • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 8).
  • Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.

To exercise any right, email our Grievance Officer at the address in Section 8. We will respond within 30 days.

7. Consent and Withdrawal of Consent

Where processing relies on your consent, you may withdraw consent at any time. The procedure is:

  1. Send a written withdrawal request to grievance@milestoursandtravels.co.in from your registered email address, stating which consent(s) you wish to withdraw (e.g. location, marketing notifications), or use the consent toggles in the customer portal.
  2. We will action the request within 7 working days and confirm via email.
  3. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to provide certain services. Statutory retention obligations (e.g. tax records) will continue to apply.

8. Grievance Officer

In accordance with Section 8(9) of the DPDP Act, 2023 and Rule 5(9) of the IT Rules, 2011, the contact details of our Grievance Officer / Data Protection Officer are:

  • Name: Mr. Rakesh Kumar (Grievance Officer)
  • Designation: Data Protection Officer, Miles Mobility Pvt Ltd
  • Email: grievance@milestoursandtravels.co.in
  • Phone: +91 81047 79974 (Mon–Sat, 10:00–18:00 IST)
  • Address: A-505, Satya Sai Krupa Apartment, Satya Nagar, Borivali West, Mumbai 400092, Maharashtra, India

If your complaint is not resolved to your satisfaction, you may approach the Data Protection Board of India.

9. Children's Data

We do not knowingly process personal data of children under 18 without verifiable parental consent, in compliance with Section 9 of the DPDP Act.

10. More Information

For common questions about bookings, refunds, account management, and data rights, see our Frequently Asked Questions. Our Terms and Conditions govern your use of the Service.

11. Changes to This Policy

We may update this Privacy Policy. The revised version will be posted on this page with a new "Last updated" date. Continued use after the change constitutes acceptance.