Privacy Policy

This Privacy Policy explains how EWheels Hub Private Limited (“EVJoints”, “we”, “us”, or “our”), a company having its registered office at 7th Floor, Dheeraj Kawal, Lal Bahadur Shastri Rd, Station Rd, near Vikroli, Mumbai, Maharashtra 400079, India (GSTIN: 27AAICE9399P1ZF), collects, uses, discloses, and protects personal information when you use the EVJoints mobile application (the “App”) and the EVJoints website (together, the “Services”).

EVJoints helps owners of 4-wheeler electric vehicles (EVs) in India plan trips, discover charging stations, and manage EV charging along their routes. By creating an account or otherwise using the Services, you agree to the collection and use of information as described in this Policy.

EVJoints may offer free or promotional access for a limited period. Continued use after that requires an active paid subscription.

This Policy should be read alongside our Terms & Conditions. Where this Policy conflicts with the Terms & Conditions on a matter specific to data handling, this Policy governs.

This Policy applies to all users of the EVJoints App and website (evjoints.com), including visitors who use website tools such as the Charging Station Finder, Trip Planner, Charging Time Estimator, or EV vs. Fuel Cost Calculator without creating an account. It covers information we collect directly from you, information generated through your use of the Services (such as trip and charging data), and information we receive from third parties described below.

3.1 Account & Contact Information

When you register for an account, we collect your name, mobile phone number, and email address. This information is used to create and secure your account, verify your identity, and communicate with you.

3.2 Website Visitor Information

You do not need an account to browse the website or use public tools such as the Charging Station Finder, Trip Planner preview, Charging Time Estimator, or EV vs. Fuel Cost Calculator. When you use these tools without registering, we collect standard web analytics data — your IP address, browser and device type, pages viewed, and general location entered into a tool (e.g., a search origin/destination) — to operate the tool and understand how visitors use our website. If you choose to save a trip or continue into the App from the website, the applicable sections below (e.g., trip data, vehicle information) also apply.

3.3 SMS Data — One-Time Password (OTP) Autofill Only

To make signup and login faster, the App can automatically detect and fill in the one-time password (OTP) sent to your phone by SMS. We do this using Google's SMS Retriever API, which is designed specifically for this purpose:

• No broad SMS permission is requested or used. The App does not ask for, and cannot use, general permission to read your SMS inbox.
• Only app-tagged verification messages are accessed. The SMS Retriever API automatically delivers to the App only the specific OTP message that is formatted with our App's unique signature — no other message in your inbox is seen or accessed by the App.
• Limited fallback. In limited cases, if you copy an OTP to your clipboard, the App may read the clipboard to autofill the code you copied. This does not involve reading your SMS inbox.
• Not stored. The OTP code is used only to complete verification at that moment and is not stored by us beyond that purpose.

3.4 Location Data

We collect precise device location to power core trip-planning and station-discovery features, including finding nearby charging stations, calculating routes, estimating range and energy usage, and providing turn-by-turn guidance during a trip. This applies whether a trip was planned in the App or saved to your account through our website — once saved, it can be located, navigated, and plotted from wherever you are signed in.

• While using the App or website: location is accessed while relevant screens (e.g., Home, Stations, Trip Planner, Station Details, Add Station, Favourites, Search) are open and in active use, and stops when you leave those screens or close the App.
• In-vehicle displays (Android Auto / Apple CarPlay): if you connect the App to Android Auto, Apple CarPlay, or a similar in-vehicle display, we access your location during that connected session to show nearby charging stations and to locate, navigate, and plot your saved trips directly on your vehicle's display.

You can disable location access at any time through your device settings; certain features (trip planning, nearby-station search, live navigation) will not function without it.

3.5 Vehicle Information

To give you accurate range, charging-time, and route estimates, we collect information about your vehicle, including manufacturer, model, and variant; vehicle registration (license plate) number; battery capacity and vehicle weight details; vehicle purchase date and model year; and how you use the vehicle. Your registration number is used to personalize your experience within the App and is not used to query external government vehicle databases.

3.6 Trip Data

We collect data generated when you plan and take trips using the App, including routes and destinations, charging stops selected or skipped, comfort-mode preferences (such as meal or rest breaks), trip edits and history, and trip-related feedback you provide.

3.7 Charging Station Listings You Submit

The App lets you search stations integrated with our real-time data partners as well as add your own charging station or home/community charger listings. If you add a listing, we collect the address and location you provide, a contact phone number for that listing, any photos you upload (up to 3), and optional notes (for example, gate access instructions). This information is linked to your account, and depending on the listing type, may be visible to other App users searching for charging options nearby.

3.8 Check-ins, Ratings & Reviews

When you check in at a charging station, we record your vehicle, the station and connector used, the date and time, and any star rating or written feedback you choose to give. If you optionally log detailed charging-session information — such as units charged, cost, price per kWh, battery state-of-charge before/after, odometer reading, an uploaded invoice, or a private note — we treat these fields as private.

• Private to you: your full check-in history, and detailed fields (state-of-charge, odometer, cost, invoices, private notes), are visible only to you in your account.
• Visible to other users: your name, profile photo, star rating, written feedback, check-in date, and general charging details (charger type, power, price) may be shown publicly on that station's page to help other EV owners — similar to a public review on a maps or ratings app.

3.9 Payment Information

When you subscribe to a paid plan, your name, email address, and phone number are shared with our payment partner, Razorpay, to create and process the transaction. We do not collect or store your card, UPI, net-banking, or bank account details — these are collected and processed directly by Razorpay under its own security and compliance standards (Razorpay is a PCI-DSS compliant payment processor).

3.10 Device, Notification & Usage Information

We collect technical information such as your device identifier, device model, operating system and app version, IP address, and a push-notification device token (via our notification partner, OneSignal). We also collect general usage data — how you interact with App features — to help us maintain, secure, and improve the Services.

3.11 Photos & Uploads

If you choose to upload a profile photo, station or home-charger photos, a check-in photo, or an invoice/receipt image, we collect and store that image as part of the relevant record.

3.12 Loyalty Program (EVolts)

If you participate in our EVolts loyalty program, we record the actions that earn you points (such as adding a station, checking in, referring a friend, or leaving trip feedback) and your points balance. Our referral program is code-based: when you refer a friend, you share a referral code rather than their contact details, and we do not access your phone contacts or address book.

We use the information described above to:

• Provide trip planning, route optimization, and charging-stop recommendations;
• Autofill OTPs to make signup and login faster (as described in Section 3.3);
• Show real-time and community-submitted charging station information near you;
• Process subscription payments and manage your account and billing;
• Send transactional and, where you have not opted out, promotional push notifications;
• Operate the EVolts loyalty program;
• Provide customer support and respond to your requests;
• Maintain the security, integrity, and proper functioning of the Services, and prevent fraud or misuse;
• Comply with applicable legal and regulatory obligations, including tax and payment-related recordkeeping.

We do not sell your personal information. We share information only as described below:

• Razorpay (Payments): your name, email, phone number, and transaction details are shared to process subscription payments. Razorpay's own privacy policy governs its handling of payment instrument data.
• OneSignal (Push Notifications): your device's notification token and basic device information are shared to deliver push notifications to your device.
• Maps & Location Services (Google Maps): location, route, and place-search queries are processed by Google Maps to provide directions, geocoding, and mapping functionality, subject to Google's own privacy policy.
• Charging Network Operators (CPOs) and Station Aggregators: to show real-time availability and connector status, we may share limited trip-context information (such as your general location or requested connector type) with the third-party charging network operators and aggregators integrated with our platform.
• Other Users: certain information you post — such as ratings, feedback, community charging station listings, and check-in activity described in Sections 3.7 and 3.8 — is, by design, visible to other App users.
• Legal & Safety: we may disclose information where required by law, regulation, legal process, or government request, or where necessary to protect the rights, property, or safety of EVJoints, our users, or the public.
• Business Transfers: if EVJoints is involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy or a policy at least as protective.

We take reasonable technical and organizational measures to protect your information, including:

• Encryption in transit: all communication between the App and our servers is encrypted using HTTPS/TLS.
• Encryption at rest & access controls: data is stored on cloud infrastructure with encrypted storage and role-based access controls limiting internal access on a need-to-know basis.
• Payment data isolation: we never receive or store your full card, UPI, or bank details — these are handled entirely within Razorpay's PCI-DSS compliant systems.
• OTP handling: OTP messages accessed for autofill are not persisted to any database or log.
• Ongoing review: we periodically review our security practices and update dependencies and configurations to address known vulnerabilities.
• Breach notification: in the event of a data breach affecting your personal information, we will notify affected users and the relevant authorities as required under applicable Indian law.
• No unauthorized scraping: we prohibit automated scraping, harvesting, or bulk extraction of data from the Services by bots, crawlers, or any other automated means — including community charging station listings, contact numbers, photos, check-ins, ratings, and reviews in the App, and station, pricing, and route data from public website tools such as the Charging Station Finder and Trip Planner. We use technical and legal measures to detect and act against unauthorized scraping of the Services.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

• Active accounts: we retain your account and profile information for as long as your account remains active.
• Trip, check-in & listing data: retained for as long as your account is active, or until you delete the specific item or your account, whichever is earlier.
• Payment & tax records: transaction and billing records are retained for the period required under applicable Indian tax, GST, and financial regulations, even after account deletion.
• After account deletion: we delete or anonymize your personal information within a reasonable period, except information we are legally required to retain.
• Public contributions: feedback, ratings, or station listings you posted publicly may persist in anonymized or aggregated form after account deletion, without identifying you.

Subject to applicable law, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: update or correct inaccurate account, vehicle, or profile information, largely available directly in the App.
• Deletion: request deletion of your account and associated personal information, subject to the retention exceptions in Section 7.
• Withdraw Consent: withdraw consent for optional data collection (e.g., location or camera access) via your device settings; note that this may disable related features such as trip planning or photo uploads.
• Notification Preferences: opt out of promotional push notifications at any time while continuing to receive essential transactional notifications.

To exercise these rights, contact us using the details in Section 13 or our Grievance Officer in Section 12. We will respond within a reasonable timeframe as required under applicable law.

The Services are intended for users who are at least 18 years old and legally eligible to hold a driving license in India. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

Our website uses cookies and similar technologies to operate essential site functions, remember your preferences, and understand how visitors use our site. Where required, we will present a cookie consent banner allowing you to accept or decline non-essential cookies. You can also control cookies through your browser settings; disabling certain cookies may affect site functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes through the App, by email, or via our website, and will update the “Last Updated” date above. Your continued use of the Services after a change takes effect constitutes acceptance of the updated Policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for EVJoints is:

The Grievance Officer will acknowledge and address complaints regarding this Privacy Policy or the handling of your personal information within the timeframe prescribed under applicable law.

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and applicable rules made thereunder, and the Digital Personal Data Protection Act, 2023, as and when it comes into force. Courts at Mumbai, Maharashtra shall have exclusive jurisdiction over any disputes arising from this Policy.

If you have questions about this Privacy Policy or how we handle your personal information, please contact us at: