Empower - Your ride, your way

"If you use our Services, we automatically collect generic location information about you (such as city or neighborhood) or, with your consent, precise geographic location data from your mobile device when the app is running and when it is not running, depending on the choices you make when you are asked to consent to our collection of location information."

The app collects precise GPS location data even when the app is not running, meaning it tracks your location continuously in the background.

"Such data may include data about your device operating systems, browsers, and other software installed on your device; device identifiers, such as IP address, IMEI number, MAC address, or other device identifier; country of origin, region and language settings; and information about domain servers and wireless or network access points near your device."

The app collects hardware identifiers (IMEI, MAC address), a list of installed software, and nearby WiFi/network access points — data that goes well beyond what a ride-hailing app needs to function.

"We share information with third-party vendors, consultants, and other service providers who perform services or functions on our behalf (e.g., hosting or operating our Services, data collection, reporting, ad response measurement, site analytics, data analysis, delivering marketing messages and advertisements, processing payments, and providing fraud detection services)."

Personal information is shared with a wide range of third-party vendors for purposes including advertising, analytics, and marketing — not just core service delivery.

"We may retain your personal information for as long as your account is active and for a period of time thereafter to allow you to re-activate your account without loss of information. We may also retain your personal information as necessary to: Maintain logs and business records for analysis, security, and/or audit purposes Comply with record retention requirements under the law Deal with any complaints regarding the Services; and Comply with our legal obligations, protect or defend our rights, resolve disputes and enforce our contracts"

There is no defined timeline for data deletion after account closure. The policy uses vague language like 'a period of time thereafter' and lists broad justifications for indefinite retention.

"We combine the information we collect, generate, or otherwise obtain to draw inferences about your preferences and interests in order to provide and personalize our Services and tailor the offers we provide to you. Enable 'single sign-on', i.e., allowing you to log into a shared account for multiple brands using a single set of log-in credentials, which allows us to, for example, show your purchases and bookings made through the websites, applications, and services of our group companies on your account page."

The company combines data from multiple sources to build inferred profiles and links user activity across affiliated platforms and group companies via single sign-on.

"Except to the extent limited by applicable law, we will update this Policy from time to time to reflect changes in our privacy practices, legal requirements, and other factors. Changes to our Privacy Policy will be effective when posted online. If we make any changes to the Policy that materially impact previously collected personal information about you, we will make reasonable efforts to provide notice and obtain consent to any such changes as may be required by law."

Policy changes take effect simply by being posted online, with no requirement for user consent. The promise of notice for material changes is hedged with 'reasonable efforts' and 'as may be required by law.'