Privacy Policy
Auto Driver > Privacy Policy > Update: 11 June 2026

Privacy Policy for Auto Driver

Effective date: 11 June 2026
Last updated: 11 June 2026

1. Who We Are

This application, "Auto Driver" (the "App"), is developed and published by Binaryscript Private Limited ("Binaryscript", "we", "us", "our"). This Privacy Policy explains what data the App processes, what leaves your device, what stays on your device, and the rights you have over your data.

If you have any questions about this policy or your data, write to us at [email protected].

2. Scope

This policy applies to the Auto Driver Android application distributed through the Google Play Store. It does not apply to the rideshare platforms the App works alongside (Uber, Lyft, Ola, Careem), or to any other application on your device. Those services are operated by third parties and are subject to their own privacy policies.

The App requires you to create an account by verifying your phone number. You can complete this verification in one of two ways, at your choice: Truecaller one-tap verification, or a one-time password (OTP) sent over SMS by MSG91. If you choose Truecaller, Truecaller may share your name and profile information with us as part of the verification. We do not ask for your email address, postal address, or your rideshare platform credentials, and we never request, store, or transmit your Uber, Lyft, Ola, or Careem password.

3. Summary in Plain Language

  • Most of your data — your trip history, your preferences, any video or audio recorded by Secret Camera — never leaves your phone.
  • We send a small amount of non-sensitive information to Google Firebase so we can understand which screens are used and fix crashes. This does not include your fares, your locations, your ride history, or any identifier that lets us contact you personally.
  • You sign in by verifying your phone number (via Truecaller one-tap or an MSG91 SMS OTP). We store your phone number, and your name if Truecaller provides it, to identify your account.
  • If you buy a subscription, payment is handled by PhonePe (for users in India) or Google Play Billing (for users outside India). We do not receive your card, UPI, bank account, or wallet details.
  • The App uses the Android Accessibility Service and MediaProjection only to read rideshare ride-request screens so it can grade them. It does not record, log, or transmit anything from other apps.

4. Data Processed on Your Device Only (Not Transmitted)

4.1 Screen content captured via MediaProjection

When you turn on the Cherry Picker feature, Android shows you the system dialog that grants the App permission to capture the screen. The App uses this permission only to take short screen captures of ride-request screens from supported rideshare apps. The captured image is held in memory, passed through on-device text recognition (Google ML Kit, bundled offline), and discarded. The image itself is never saved to storage and never leaves your device.

4.2 Accessibility Service events

When you turn on the Cherry Picker feature, the App's Accessibility Service is used to detect when a rideshare app displays a ride-request screen. The service configuration does not at the operating-system level restrict which apps it receives events from; however, the App's code processes events only from the supported rideshare packages (Uber, Lyft, Ola, Careem). Events from all other apps are discarded immediately and are never read, stored, or transmitted. The Accessibility Service is not used for any purpose other than detecting ride-request screens and extracting the visible ride data.

4.3 Trip history (local database)

For each ride request the App grades, it stores a record on your device containing: the rideshare platform, the timestamp of the offer, the fare amount and currency shown on the ride card, the distance and duration shown on the ride card, the passenger rating shown on the ride card, the pickup and drop-off text as shown on the ride card, the grade assigned by the App, and the derived per-mile and per-hour earnings. GPS coordinates are not captured or stored. This database is stored only on your device and is not transmitted to us or to any third party.

4.4 Secret Camera recordings

If you turn on the Secret Camera feature, the App records video and, if you enable it, audio using your device camera and microphone. Recordings are written to application-private external storage under the App's own folder. They are not uploaded to any server, not synced to any cloud, and not shared with us. You can view and delete them in the App. If you uninstall the App, the recordings are removed with it.

4.5 User preferences

Your in-app settings — earnings thresholds, rating thresholds, overlay position and size, currency and distance unit overrides, Secret Camera options, onboarding state — are stored on your device using Android DataStore. They are not transmitted.

5. Data Transmitted Off Your Device

5.1 Google Firebase Analytics

The App sends a small set of product-usage events to Google Firebase Analytics so we can understand which features are used and improve the product. The events currently include: screen views (onboarding, home, trip filters, history, profit), onboarding progress, permission grants, changes to trip filters, changes to history filters, changes to profit view, and service lifecycle signals such as the Cherry Picker overlay being shown or dismissed.

Event parameters are limited to non-sensitive values such as the rideshare platform name, the permission type being granted, a filter type, or a count. We do not send your fare values, your pickup or drop-off text, your passenger ratings, the grade of any specific ride, or any content captured from rideshare apps.

Firebase Analytics automatically attaches certain identifiers and device data to events, including an app-instance identifier, coarse device information (model, operating system version, language, country), and limited network information. These are controlled by Google; see the Firebase privacy documentation for full details.

5.2 Google Firebase Crashlytics

If the App crashes, a crash report is sent to Google Firebase Crashlytics so we can diagnose and fix the problem. Crashlytics collects the stack trace, the device model, the Android version, and related technical information. It does not collect the content of your ride history, your recordings, or your preferences.

5.3 Account and login (phone verification)

To use the App you create an account by verifying your phone number. You can verify either through Truecaller one-tap verification or through an OTP sent over SMS by MSG91 — the choice is yours.

  • Truecaller: if you choose Truecaller, the Truecaller SDK handles the verification and returns to us a verified phone number and, where available, your name and basic profile information. Your use of Truecaller is also subject to Truecaller's own privacy policy.
  • MSG91: if you choose SMS OTP, we send your phone number to MSG91, our SMS provider, so it can deliver the one-time password. MSG91 processes your phone number to send the message on our behalf.

We store the verified phone number, your name (only if Truecaller provides it), an authentication token for your session, and basic device information on our servers to identify your account, keep you signed in, and link your subscription status to your account. We do not collect your email address or postal address.

5.4 Payments and subscriptions

If you purchase a subscription, the payment is processed by a payment provider depending on your region:

  • Users in India: payment is handled by the PhonePe payment gateway, including UPI AutoPay for recurring billing.
  • Users outside India: payment is handled by Google Play Billing.

The relevant payment provider receives your payment details — we do not. Our servers receive only your subscription status (for example, whether your subscription is active and when it renews), which we link to your account. No card, UPI, bank account, or wallet information reaches us or is stored in the App.

6. Data We Do Not Collect

  • We do not collect your email address or postal address. (We do store your phone number, and your name if Truecaller provides it, for your account — see Section 5.3.)
  • We do not collect GPS or precise location coordinates.
  • We do not collect your rideshare platform passwords or session tokens.
  • We do not collect your contacts, calendar, SMS, or call logs.
  • We do not use any advertising SDK and we do not show ads.
  • We do not use any attribution SDK (such as AppsFlyer, Adjust, Branch, or similar).
  • We do not sell or rent any data to anyone.

7. Permissions We Request and Why

  • Draw over other apps (SYSTEM_ALERT_WINDOW): to show the Copilot floating pill and the Cherry Picker grade overlay.
  • Notifications (POST_NOTIFICATIONS): to show the persistent notifications required by Android for our foreground services (Copilot, Cherry Picker, Secret Camera).
  • Ignore battery optimizations: so Android does not kill the Cherry Picker service while you are driving.
  • Accessibility Service: to detect when a supported rideshare app displays a ride-request screen (see Section 4.2).
  • Screen capture (MediaProjection, granted via the system dialog each session): to read the ride-request screen so it can be graded (see Section 4.1).
  • Camera and Microphone: only if you enable the Secret Camera feature (see Section 4.4).
  • Foreground Service types (MediaProjection, Camera, Microphone, Special Use): required by Android to keep the corresponding features running in the foreground.

Each permission is requested at the point where the feature requires it. You can revoke any permission at any time in Android Settings.

8. Third-Party Services

The following third parties receive limited data as described above:

We do not embed Google Maps SDK, advertising SDKs, or analytics SDKs other than Firebase.

9. Data Retention

  • Data stored only on your device (trip history, Secret Camera recordings, preferences) is retained until you delete it in the App or uninstall the App.
  • Firebase Analytics event data is retained according to the retention period configured in our Firebase project (Google's default is 14 months for event-level data).
  • Firebase Crashlytics data is retained according to Google's default retention policy.
  • Account data on our servers (your phone number, name if provided, authentication token, device information, and subscription status) is retained for as long as your account is active. When you ask us to delete your account, we delete this data within 30 days, except where we must retain limited records to comply with law. See How to Delete Your Account.
  • Payment and subscription records held by PhonePe or Google Play are retained by those providers according to their own policies.

10. International Transfers

Firebase Analytics and Firebase Crashlytics are operated by Google and may process data on servers located in the United States and other countries. By using the App you acknowledge that the limited data described in Section 5 may be transferred to and processed in those countries. Google relies on Standard Contractual Clauses and other lawful mechanisms for such transfers.

11. Your Rights

You have rights over personal data about you. Your account is identified by your phone number, so we can locate and act on data we hold about you. You can ask us to access, correct, or delete your account data at any time by writing to us, or by following the steps in How to Delete Your Account. Where your rights apply to data held by Google on our behalf, you can also exercise them directly through your Google account.

11.1 General rights
  • Access: ask what data, if any, we hold about you.
  • Correction: ask us to correct inaccurate data.
  • Deletion: ask us to delete data we hold about you.
  • Objection or restriction: ask us to stop or limit certain processing.
11.2 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

Our legal bases for processing are (a) your consent, for Firebase Analytics event collection; (b) our legitimate interests in diagnosing and fixing crashes, for Firebase Crashlytics; (c) the performance of a contract, for account creation and phone-number login, and for subscription handling through PhonePe or Google Play. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your national data protection authority.

11.3 California, United States (CCPA / CPRA)

In the previous 12 months we do not sell or share personal information as those terms are defined under the CCPA. California residents have the right to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

11.4 India (Digital Personal Data Protection Act, 2023)

If you are a Data Principal in India, you have the rights of access, correction, erasure, grievance redressal, and nomination in respect of personal data we hold about you. Our Grievance Officer can be reached at [email protected]. We will acknowledge your grievance and respond within the time limits required by the DPDPA and its rules.

11.5 How to exercise your rights

Write to [email protected] with your request. We may ask you for information reasonably necessary to confirm your identity and locate any records.

12. Children

The App is intended for adults who work as rideshare drivers. It is not directed to children and is not intended for anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has used the App, please contact us and we will take appropriate steps.

13. Security

We protect the App using standard Android application sandboxing. Data stored on your device is protected by the Android operating system and is accessible only to the App and to anyone with physical or administrative access to your device. Data in transit to Firebase is transmitted over TLS. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

14. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of the document and, for material changes, we will give you notice inside the App or on the Play Store listing before the changes take effect. Your continued use of the App after a change becomes effective means you accept the updated policy.

15. Contact

Binaryscript Private Limited
Email: [email protected]

For questions about this Privacy Policy, to exercise your rights, or to raise a grievance, write to the address above.