QafilaaBack to the ride
LegalPrivacyTermsCookies
SafetyCommunity guidelinesChild safetyReport contentSecurity
Your dataData safetyPermissionsSubprocessorsDelete dataDelete account
HelpSupportContactAccessibility
qafilaa.in/subprocessors
Everyone who can touch your data, by name

Subprocessors

A privacy policy that says “we share data with service providers” tells you nothing. This is the list. Each one is here because Qafilaa cannot run without it, and each is bound to protect your data to the same standard we promise you.

Last updated: 20/08/2026
The commitment
  • Every party below is under a written contract with confidentiality and data-protection terms.
  • Each is required to provide the same or greater protection of your data than our Privacy Policy promises.
  • None of them is permitted to use your data for their own purposes, or to sell it.
  • There are no advertising networks or data brokers on this list, and there will not be.

Running the service

Amazon Web Services
Hosting, database, object storage for your photos and documents, and the real-time channel that carries rider positions. This is where Qafilaa lives.
Google Firebase Cloud Messaging
Delivers push notifications — crash alerts, SOS, rally-point calls — to your device. Carries the alert, not your ride data.
Google Firebase Crashlytics
Crash diagnostics, so a bug that ends a ride can be found and fixed. Reports carry no identifier for you and no request contents.
Google Maps Platform
Base maps, place search and road routing. Requests are proxied through our backend, so your device is not talking to them directly and your identity is not passed on.
Open-Meteo
Weather and conditions for a riding day. Receives a coordinate and a date, and nothing that identifies you. No account, no key, no tracking.
Apple and Google identity
Only if you choose Sign in with Apple or Google. They confirm to us that you are you; we receive an identifier and, if you allow it, your email.

Running the website

Separate from the app, and much smaller. qafilaa.in itself uses:

Amazon Web Services
Static hosting and content delivery for this site.
Google Analytics 4
How many people read a page and where they arrived from. No account data, and nothing from the app. See Cookies.
Google Fonts
Serves the two typefaces this site is set in. Receives your IP address to do so.

Where your data is processed

Primarily in India, and in other regions where our providers operate. Where data is transferred outside India, we take steps to ensure it is handled in line with our Privacy Policy and applicable law, including the Digital Personal Data Protection Act, 2023. See section 11 of the policy.

What is not on this list, deliberately

  • No advertising network, ad exchange, or attribution SDK.
  • No data broker, enrichment service, or people-search provider.
  • No behavioural analytics or session-recording tool inside the app.
  • No third party receives your medical card, your documents, or your live position. Those stay between you, your crew, and our own infrastructure.

Changes

We update this page when a provider is added or removed. If a change materially affects how your personal data is handled, we will say so in the Privacy Policy and, where appropriate, tell you directly.

Think something is missing here? That is worth knowing about — write to admin@qafilaa.in and we will either add it or explain why it does not belong.

Qafilaa.in · Kolhapur, Maharashtraadmin@qafilaa.in