Legal
Privacy policy
Your data is yours. This policy explains what Braj collects, why, and the rights you can exercise.
Ekarche Private Limited (“Braj”, “we”) operates the Braj app and this website. Privacy is enforced by architecture, not only by this policy — see privacy by architecture for what that means in the system.
Who is responsible for your data
The data controller is Ekarche Private Limited (CIN U58200UW2026PTC253262), registered at Mathura, Uttar Pradesh, India. For any privacy question or to exercise a right, contact braj@ekarche.com.
What we collect
- Account & identity: name, phone number, and KYC details required to provide rides, deliveries and payments and to comply with applicable regulation.
- Location & addresses: pickup/drop and saved addresses needed to fulfil an order or trip, and live location during an active trip or delivery.
- Orders & transactions: order history, wallet and payment metadata needed to process and reconcile payments.
- Device & usage: standard request data (such as device type and app interactions) needed to operate the service and keep it reliable on low-end devices and patchy networks.
How your data is protected
- Location history, consumption, addresses and payment metadata are encrypted per user.
- Each town runs its own encrypted configuration; the operator cannot read or resell your data.
- Your data is never sold and never used to train an ad model. There is no advertising business.
- Driver and customer contact details are masked end-to-end; numbers are never exposed.
How we use your data
We use your data only to provide the service you asked for — matching rides and deliveries, fulfilling orders, processing payments, providing support, and meeting legal and regulatory obligations (including aggregator, food-safety and pharmacy rules where relevant). We do not profile you for advertising.
Sharing
We share the minimum necessary with the parties who fulfil your request — for example, a driver receives the masked contact and route for your trip, a merchant receives your order and a masked delivery handoff, and payment and ONDC partners receive what they need to settle and fulfil. We do not share your data with data brokers or advertisers.
Retention
Retention windows are configured per town and held to what is needed for the service and for legal obligations. You control retention and sharing of your own data, subject to regulatory minimums.
Your rights
- Access & export: you can request a copy of your data, provided in a usable format.
- Deletion: you can request deletion of your data, subject to legal retention requirements.
- Correction & control: update your details and control retention and sharing, with a full audit trail.
- Grievance: raise a complaint with our grievance officer — see grievance redressal.
Children
Braj is not intended for children below the age required by applicable law to consent to data processing without parental consent.
Changes
We will update this policy as the service and the law evolve, and will reflect the date of the latest change above.