1. Scope and operator
This policy explains how information is handled when you use the SwitchDrives Android app, website and related services. The operator is Hashtake Labs, a sole proprietorship, operating under the brand SwitchDrives by Hashtake Labs, with contact address Greater Noida West, Uttar Pradesh, India.
SwitchDrives enables discovery, interest requests, matches and communication for vehicle swaps, rentals and sales. It does not currently process swap, rental or sale payments, security deposits, insurance, vehicle ownership transfers or physical vehicle handovers. Contact switchdrives@hashtakelabs.com with privacy questions.
2. Information handled
Account authentication and profile
When you sign in using Google, Google and Firebase Authentication provide and process information needed to authenticate your account, such as an account identifier, email address and available basic profile details including your name and profile image. We do not receive your Google password. If you register or sign in with email and password, Firebase Authentication handles your credentials and account identity. We use your account email for verification and password-reset messages, and check Firebase’s email-verification status before enabling protected email/password account features. Passwords are managed by Firebase Authentication, not stored in our Firestore profile records. The Android app and website use the same Firebase account identity and associated profile. We also handle the name, city and optional profile photo you provide or choose to use in your profile.
Android app waitlist
If you join our Android app waitlist, we collect your email address and record your consent, its version and the signup time in Firebase Firestore to send app-access and launch updates. Joining does not create a SwitchDrives account or guarantee an invitation. To withdraw consent and request removal from the waitlist, email switchdrives@hashtakelabs.com. We retain waitlist information while needed for these updates, unless you request removal, subject to applicable retention requirements.
Vehicle view counts
The website displays combined vehicle-detail view counts from the website and Android app to the signed-in owner on their own listings. When a signed-in visitor opens an eligible vehicle, a service checks the vehicle and excludes its owner’s own views. A random browser/app session identifier and the authenticated account are used to derive a hashed duplicate-check key. Firebase stores the count and duplicate-check records with timestamps; the public response contains only aggregate counts. The website stores the random session identifier and completed-view markers in session storage to reduce repeat counting. Counts represent views, not unique people, and are not an independently audited measure. These counters do not use Google Analytics or advertising trackers. Contact us for privacy or deletion requests concerning associated records.
Website favourites
When signed in, you can save vehicle IDs as favourites in this browser’s local storage, separately for your SwitchDrives account. This saved list is not synced to Firebase, the Android app or other browsers or devices. Signing out hides the saved list but does not erase it from this browser. Remove individual favourites using the heart, or clear this website’s browser data to remove locally saved lists. Clearing browser data can also sign you out. Only currently available listings are displayed in the favourites view.
Vehicle listings and documents
We handle listing information, photographs and vehicle details you submit, including your selected Swap, Rent and Sell preferences, expected sale price, negotiability, currency, rental price, deposit and availability where provided. We also store listing activation and owner-selected closure information, such as Sold Out, On Rent or Swapped, when you use those website controls. If you upload or share documents, their contents can include registration information, an owner's name or address, vehicle identifiers, insurance details and other personal information. Upload only documents you are entitled to provide and avoid unnecessary personal information.
Requests, matches, messages and support
We handle Swap, Rent and purchase interest requests, offered-vehicle details for swap requests, match records, chat messages and the associated sender, recipient and activity information needed for these features. If you contact support or report a concern, we handle the information and evidence you send and our correspondence with you.
Notifications and service operation
Firebase Cloud Messaging (FCM) is enabled. Notification delivery involves device/app notification tokens and Firebase installation identifiers. Notification content and related delivery data are processed as needed to send notifications. Information visible in a notification depends on the feature and your device settings.
Technical information such as IP addresses, request details and service logs may be processed by the hosting and Firebase/Google infrastructure when your app or browser connects to those services. The website also uses hosting infrastructure to serve pages and receive requests. Its Firebase sign-in session may persist in browser storage so that you remain signed in between visits; signing out ends the current website session. This is distinct from the app asking for device location permission.
Information not currently collected
The app does not currently collect your mobile number or device location. A city you enter in your profile is still processed as profile information. This statement does not mean that infrastructure providers cannot receive an IP address or infer a general area from it. If we introduce mobile-number collection or device-location access later, we will update the notice and obtain any necessary permission or consent before that collection begins.
3. Why information is used
Information is used to authenticate and maintain accounts; create and display profiles and vehicle listings; support swap, rental and sale discovery, requests, matching, document sharing and chat; deliver notifications; respond to support requests; investigate reported misuse and protect the service; and meet applicable legal obligations.
Where consent is required, we will request it for the relevant purpose. You may decline optional uploads or sharing and use available device controls. Withdrawing consent may prevent a feature from working where its data is necessary, but does not remove rights or retrospectively invalidate lawful processing. Contact us to discuss withdrawal where no in-app control is available. Accepting the Terms is not blanket consent to unrelated data use.
Google Ads measurement on the website
We use a Google Ads tag on the website to measure advertising traffic and support attribution of website actions to our campaigns. The tag may use cookies and process page visits, ad-click identifiers and browser or device information. Advertising personalisation signals are disabled in our tag configuration. This website tag is separate from Firebase authentication and the vehicle view counter. You can manage cookies through your browser; blocking the tag may limit advertising measurement without preventing vehicle listings from being saved. Google processes information under its applicable terms and advertising privacy information.
4. Information visible to other users
Active vehicle listings are also displayed on the public website without login. Visitors may see vehicle photographs, make/model, year, city, kilometres driven, fuel type, transmission and Swap/Rent/Sell availability. Signed-in users opening vehicle details may also see the owner’s stated sale or rental prices, currency, negotiability and other listing terms where provided. The public listing feed does not include account email addresses, private vehicle documents, chat messages or owner identifiers. Deactivating or marking a listing Sold Out, On Rent or Swapped removes the entire listing from current public discovery results, including its other selected preferences. This does not delete the account, listing record, related requests or chats; copies independently retained by visitors or search services may remain outside our control.
Other users may see the profile and listing details made available through discovery or communication features, such as your display name, city, selected photo, vehicle details and listing photographs. Users receiving an interest request or participating in a match see information necessary for that interaction. Chat recipients receive messages you send to them.
When you choose to share vehicle documents, intended recipients receive the information in those documents through the sharing feature. A sign-in email is not automatically described here as a public profile field. Information you put into a listing, photograph, document or message can nevertheless reveal your contact details or identity.
Share carefully. Recipients can copy, photograph or retain information outside the service. Revoking access, deleting a message or closing an account cannot guarantee removal of those independent copies. Recipients are required by our Terms to respect the purpose of sharing. Report misuse to us.
5. Service providers and other disclosures
We use Firebase Authentication for sign-in and account authentication, Cloud Firestore for app records and communications, Cloud Storage for Firebase for uploaded files, and Firebase Cloud Messaging for notifications. These services are provided by Google and process data needed to perform their respective functions. Their processing is also subject to relevant service terms and privacy documentation.
Information may be accessed by authorised personnel or service providers where necessary for operating the service, support, security or legal compliance. We may disclose information in response to a valid legal requirement or where lawfully necessary to investigate fraud, protect rights or respond to a credible safety risk. We assess such disclosures in accordance with applicable law.
If the service is transferred or reorganised, personal information may form part of that transaction, subject to applicable safeguards and notices. Such a transfer does not by itself permit unrelated new uses without any legally required notice or consent.
6. International processing
Firebase, Google and other infrastructure used to deliver the service may process information outside India. Processing locations depend on the services and their configuration. We do not promise India-only storage or processing. Applicable transfer restrictions and obligations remain relevant. Provider documentation explains their general arrangements, but does not by itself verify our app's actual configuration.
7. Retention
Information is retained for as long as reasonably needed for the purposes described in this policy, taking into account whether your account is active, the information is still required for a feature, a deletion request has been received, and legal, safety, fraud-prevention or dispute requirements apply.
Deletion must cover relevant records and files across the services used; removing a sign-in account alone is not a promise that all associated content has been removed. Backups and service-provider systems may have different removal processes. We do not promise immediate removal or a fixed deletion period that has not been verified. Any information retained after a valid deletion request should be limited to a justified purpose and not used simply to keep your account active.
8. Account and data deletion requests
For email instructions, the data covered and our processing target, visit our Account & Data Deletion page.
There is currently no in-app account deletion control. You can request deletion without reinstalling the app by emailing switchdrives@hashtakelabs.com.
Use the subject “SwitchDrives account deletion request”, send it from the email address associated with your SwitchDrives account where possible, and tell us whether you want the whole account or specified information deleted. If you cannot access that email, contact us so we can discuss another proportionate way to verify your request. Do not send passwords, OTPs or full identity documents unless a specific, justified request is agreed with you.
We will verify the request as reasonably needed, arrange deletion of the account and associated personal information under our control, and explain any lawful exceptions, outstanding steps or expected processing period. Requests will be handled within applicable legal requirements. Relevant account information can include profile records, Swap/Rent/Sell listings and their prices and status information, uploaded photos and documents, interest requests, messages, associated vehicle-view records and notification identifiers, subject to justified retention and third-party copies described above.
Deleting SwitchDrives does not delete your Google account. Uninstalling the app, signing out or revoking Google's sign-in access does not itself submit an account-deletion request. Content retained independently by another user is outside our direct control; copies within platform systems must still be considered in our deletion process.
9. Your choices and privacy requests
You may request access to information we hold about you, correction of inaccurate information, deletion, withdrawal of consent where relevant, or resolution of a privacy grievance. We will handle requests subject to identity verification, technical context and applicable legal rights and exceptions, explaining a refusal or restriction where required. These requests can be sent to the contact below.
You can limit optional profile content and document sharing and control app notification permissions through Android settings. Turning notifications off does not necessarily delete an installation identifier or close your account. Legal remedies and complaint routes available under applicable Indian law remain unaffected; this policy does not represent every future statutory mechanism as already operational.
10. Security
We are responsible for applying safeguards appropriate to the information and service and for meeting applicable legal duties. Using Firebase does not remove our responsibility to configure access rules and operational access appropriately. No online service can promise absolute security. This policy does not claim end-to-end encryption, a particular encryption configuration, independent security certification or an incident-free service.
Protect your sign-in account, password and devices, avoid sharing credentials, and take care with document contents. Notification previews may be visible to someone with access to your device, depending on its settings. Contact us promptly if you suspect unauthorised access or document misuse. We will address incidents and notifications as required by applicable law.
11. Children
SwitchDrives is intended for people aged 18 or older. We do not knowingly offer accounts to children under 18. If you believe a child has provided personal information, contact us so we can investigate, restrict the account where appropriate and arrange removal subject to applicable legal requirements. Do not include children's personal information in uploads or conversations unnecessarily.
12. External links and third-party information
Google Sign-In and links to external services involve services operated by other parties. Review their notices for their own processing. A third-party policy does not replace this policy for processing for which the SwitchDrives operator is responsible.
Relevant provider information: Google Privacy Policy and Privacy and Security in Firebase. These links describe the providers generally; not every service described there is enabled in SwitchDrives.
13. Contact and grievances
Brand: SwitchDrives by Hashtake Labs
Legal operator: Hashtake Labs, a sole proprietorship
Privacy and grievance contact: SwitchDrives Support, Hashtake Labs
Email: switchdrives@hashtakelabs.com
Address: Greater Noida West, Uttar Pradesh, India
Describe your concern and the relevant account or content. We will handle it within applicable legal time limits, including any shorter period required for particular complaints. Contacting us does not prevent you from using remedies available under applicable law. This email is not an emergency service.
14. Policy updates
We may revise this policy when the service, processing practices or legal requirements change. The published version will show its effective and last updated dates. We will give reasonable notice of material changes and obtain fresh consent where legally required. We will not rely on a policy change alone as consent to an unrelated new purpose.